Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: c9Cu11mlwpjlKHKt5CVZCOfRp1hPT4KDxLlDTQIN17g=
Subject key identifier: 6D:46:F1:89:94:67:1A:9B:45:1D:96:85:89:E7:E8:C9:08:6D:F1:64
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 01A0C47B54D569A06AD10643944D4408328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 15:00:12 +0000
Manifest this update: Mon 21 Sep 2026 15:00:12 +0000
Manifest next update: Tue 22 Sep 2026 15:00:12 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: gc+tyIJlhAC7sYXZPlgLWsaajedAXGg6uY6bYEIB2X0=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:54:d5:69:a0:6a:d1:06:43:94:4d:44:08:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Sep 21 15:00:12 2026 GMT
Not After : Sep 22 15:00:12 2026 GMT
Subject: CN=6d46f18994671a9b451d968589e7e8c9086df164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:25:6c:61:be:6f:0d:74:2b:cd:df:f8:3b:
7a:6b:5b:b3:f5:f8:58:36:3e:d4:81:3d:6c:af:74:
da:d0:7c:13:89:63:43:49:ce:c7:f7:8d:8e:86:d0:
7d:ed:eb:36:a9:63:b6:a5:2d:5d:5b:54:84:18:96:
69:78:13:e8:33:fa:ec:44:b7:ca:a0:95:75:e8:82:
50:25:60:6b:9f:08:35:9c:82:5e:61:c9:f7:aa:d5:
39:5b:1c:ab:03:92:a0:bf:ba:08:fe:bd:70:14:ff:
a8:d1:85:09:f1:3b:4f:17:5a:29:fb:8e:dd:aa:62:
80:cc:a5:89:e9:9e:5d:ab:27:d2:09:6b:b3:21:05:
51:e8:cf:63:d6:0e:99:e4:57:2e:a3:ff:13:c2:23:
ad:a7:04:20:38:93:63:57:78:c5:f6:13:bc:4a:8a:
9e:cd:db:91:02:c8:4d:35:6b:15:4f:6c:3a:28:68:
0e:4e:90:e4:34:94:85:5d:94:dc:b6:3f:2c:8e:f0:
f9:14:5f:d8:f1:8c:0c:7c:24:1d:20:37:3b:ae:ab:
28:a3:f9:d8:b2:b4:b0:b5:e5:c8:07:3e:b3:08:11:
61:8e:e8:e7:10:2a:63:98:24:f2:bd:8f:b3:0f:3e:
5e:45:55:5f:5a:e8:f3:92:e9:89:08:7e:22:3c:33:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:46:F1:89:94:67:1A:9B:45:1D:96:85:89:E7:E8:C9:08:6D:F1:64
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:db:ae:f6:13:7b:49:10:28:50:dc:d0:e7:25:7a:4e:34:81:
47:50:01:a0:02:d7:df:67:e4:a5:d0:97:d6:d8:42:46:fd:50:
85:ff:c0:57:05:29:02:a5:d5:02:67:f6:fa:46:74:ed:2c:14:
aa:d8:e1:59:93:8e:69:85:2b:13:ab:80:04:30:48:0a:ec:eb:
83:55:1b:a1:61:ff:0b:0e:26:1b:ee:4f:6e:83:03:c3:e3:e3:
86:f3:53:01:fa:db:1d:ae:33:a7:b9:78:1b:6c:72:59:a7:d1:
40:40:a8:68:c6:fc:26:57:f8:86:0c:de:8f:88:fb:92:30:b0:
3e:77:45:a7:4d:4a:47:8b:6b:a2:e8:f8:7b:25:c8:52:92:32:
68:9d:65:6a:85:b8:12:83:bd:6f:15:25:e5:64:e7:ea:f9:73:
2d:4c:03:5a:e4:65:4e:10:59:74:59:56:ea:78:3e:52:5b:69:
37:bc:6c:f3:d6:e9:13:fb:fd:9c:90:ec:fd:9a:41:b9:23:09:
48:52:e6:f6:d8:fc:12:f1:fc:04:2c:1c:26:40:70:28:33:4f:
f0:06:cf:70:3a:79:78:aa:54:b1:9b:93:78:03:fa:9b:dd:03:
57:c2:a0:c4:31:14:5d:45:06:4a:75:bf:c0:0a:3c:3a:d6:f6:
f2:1c:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:07:12 2026 by rpki-client