Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier: mbXCcYw/UNdgIEp45zVgiiP+1o+gdzeWEzWhRYIEjS8=
Subject key identifier: AA:85:AE:28:6B:D1:C5:F6:60:E5:60:81:2B:64:53:39:AD:F1:43:C8
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial: 01A132590AC0440050A58B97734CA1D0DF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number: 02DC
Signing time: Mon 12 Oct 2026 23:00:58 +0000
Manifest this update: Mon 12 Oct 2026 23:00:58 +0000
Manifest next update: Tue 13 Oct 2026 23:00:58 +0000
Files and hashes: 1: T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa (hash: hJkbS7Ns7tr/dUI7yRHtcG/eXbm7a0GJDdxjVlyXMNM=)
2: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: FRquuxX5zhKs0drbXL/0JHXAr38LARHtSZ0v4R2qooE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:0a:c0:44:00:50:a5:8b:97:73:4c:a1:d0:df:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Validity
Not Before: Oct 12 23:00:58 2026 GMT
Not After : Oct 13 23:00:58 2026 GMT
Subject: CN=aa85ae286bd1c5f660e560812b645339adf143c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:8a:95:79:61:e0:c7:12:85:e6:62:9b:5d:
ae:7d:18:f9:a2:57:b1:24:18:5d:9f:20:8c:e7:37:
34:39:9d:f9:0e:d9:95:56:0d:3c:43:5d:52:45:ad:
59:31:7b:1d:66:97:57:6c:4b:25:c4:9c:d8:95:a9:
79:b1:fc:52:e1:e2:6e:60:59:a2:24:69:7c:12:28:
f8:0e:58:b7:19:ca:f5:5b:c3:ac:6e:4c:08:e4:8e:
82:e0:7c:bf:a1:4c:cc:29:74:b7:61:38:37:d2:7c:
ff:6f:30:0f:d7:bd:18:48:7f:29:84:f8:6d:ab:16:
55:81:89:62:bb:5a:f5:e8:a0:e2:0b:b0:4d:08:e5:
e1:75:05:2a:0a:a4:e4:25:c4:b8:37:3c:98:1b:bb:
de:7a:b7:87:59:4b:24:48:f4:6d:0c:25:09:bb:3c:
9f:ea:ca:52:37:d0:c4:2a:f2:a9:5e:62:68:69:c1:
cb:63:98:fa:3f:51:5d:c6:14:42:82:62:b0:2e:5f:
bd:6e:fb:72:02:f1:77:53:94:4b:c6:48:a5:bd:34:
42:00:30:ad:77:7c:ca:d4:85:ea:67:c9:02:93:49:
67:87:d2:12:92:74:ba:26:88:79:f9:bf:e5:a0:87:
25:41:bc:b5:f5:5f:dc:6e:64:0f:94:01:c4:3c:82:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:AE:28:6B:D1:C5:F6:60:E5:60:81:2B:64:53:39:AD:F1:43:C8
X509v3 Authority Key Identifier:
keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:24:e7:cd:69:1e:c9:dd:ab:49:f2:98:5f:18:39:c6:0e:
6d:21:a7:b5:0f:94:b3:fb:61:14:6b:57:92:43:f7:ce:13:12:
12:98:5b:4f:66:1f:d0:44:99:38:d5:b1:dd:5f:73:59:bd:65:
7a:92:f8:ab:d4:b9:f6:c4:93:85:9f:e4:30:af:df:c0:03:69:
ef:fc:ff:76:b8:c3:11:37:6e:8b:d9:97:92:d5:c4:1d:f7:11:
60:c8:5a:84:f4:81:e2:9b:4a:c2:85:aa:89:e1:44:9e:6d:52:
52:94:f6:4d:d1:6c:79:d7:f3:af:0c:9c:89:c2:f5:6a:0a:86:
a0:68:be:9d:fb:c6:be:e6:4e:bd:22:dd:ed:42:f0:f2:48:03:
4c:fb:0e:79:af:9a:3a:37:eb:3d:13:70:17:d4:7b:c4:72:57:
14:01:b8:a6:5f:f0:d2:4f:a2:73:67:7c:76:f9:be:8d:02:8c:
35:05:ee:e5:2c:4b:65:e1:90:f8:d3:8c:33:af:c5:a3:52:c6:
14:05:b7:a2:87:3d:d9:6e:50:70:f0:8c:11:c7:38:c3:3d:de:
60:db:91:8f:d9:7c:ab:b4:21:77:a9:f9:23:b0:82:96:ef:e8:
a7:ab:ad:47:c1:14:62:91:d2:de:e6:60:3d:ab:29:c4:4b:26:
fc:51:f6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:04:15 2026 by rpki-client