Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: 8hF/2u1o6nF1goDIVwVRwYMMNuMau7Aj8jMkzxjA9dg=
Subject key identifier: B8:6E:72:6D:08:DB:D9:35:FC:C1:EE:97:76:17:13:4B:72:32:78:86
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019D9B1953738DFBC4C6033FB76F5124F7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 01A0
Signing time: Fri 17 Apr 2026 11:00:21 +0000
Manifest this update: Fri 17 Apr 2026 11:00:21 +0000
Manifest next update: Sat 18 Apr 2026 11:00:21 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: I1JYaS8/M/3GhFW5hxg/6uzAgrHvMTPCgr0LdzdXCzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:53:73:8d:fb:c4:c6:03:3f:b7:6f:51:24:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Apr 17 11:00:21 2026 GMT
Not After : Apr 18 11:00:21 2026 GMT
Subject: CN=b86e726d08dbd935fcc1ee977617134b72327886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:87:7b:96:65:2c:74:cd:2f:c9:3f:12:e0:
1e:d7:d4:92:c8:9f:37:fc:ca:8f:9e:f0:7a:9a:76:
9b:e3:f0:f1:e5:be:a5:0d:6a:ab:53:f9:88:89:d1:
b2:fa:0c:e1:1f:73:98:7b:d7:4b:41:58:52:d4:78:
57:38:41:a4:dd:ca:c8:e8:53:24:df:07:34:e3:01:
6f:10:00:75:0f:96:b9:dc:08:02:99:67:ba:e2:e4:
19:3e:85:d1:0d:6d:9d:f7:8f:df:81:6c:27:12:12:
55:79:8b:15:94:a3:45:49:51:e7:0c:df:1b:31:a7:
75:45:31:e5:48:6f:7f:bb:b1:7f:d3:57:53:eb:c7:
c0:21:00:b4:20:cd:6b:e2:9c:77:ab:2c:bc:68:ba:
31:47:ec:70:50:e3:12:79:13:29:51:0c:a8:78:3f:
03:06:8e:1e:7c:10:ad:e6:98:1a:d1:a6:ed:31:f0:
36:20:67:33:15:38:bd:d5:c1:a8:2d:26:3a:b5:87:
4c:7d:84:eb:43:2f:21:e0:98:31:b6:f2:3f:b0:16:
50:c1:02:c9:c1:f1:73:fd:cc:f2:ba:40:66:3f:5b:
20:e2:3c:7c:ad:aa:d7:90:b0:18:d5:3f:cd:4e:e3:
df:6b:56:9f:10:62:b8:ca:b4:cf:46:80:e1:b1:12:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:72:6D:08:DB:D9:35:FC:C1:EE:97:76:17:13:4B:72:32:78:86
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d7:f7:57:da:59:87:34:77:73:af:ae:0c:ea:78:bc:f6:b0:
b3:c7:36:66:12:5f:2f:b6:d1:e3:fd:d7:d4:54:4e:79:f8:45:
98:2e:7b:5c:36:dc:69:02:10:4e:54:f8:5d:a7:5c:69:1c:b7:
4c:fb:e3:6b:38:d4:1d:bb:ef:21:c1:5f:81:ca:aa:69:06:ae:
b2:23:52:33:36:8a:81:3e:27:36:62:04:71:f7:87:36:a5:9c:
5e:b5:9d:32:16:de:1a:c9:b4:92:7e:4f:b4:de:e2:a3:9a:41:
bf:c7:a6:a7:d3:50:b9:d4:f9:8c:50:6b:d9:33:28:6b:1e:f2:
4d:9d:66:ca:e8:c1:c5:0e:d0:29:94:9a:6d:3b:36:8d:7c:aa:
f5:bf:2f:ad:0d:25:29:1b:41:98:6b:d6:8e:06:56:52:9d:c4:
3a:04:df:7a:72:45:08:b3:d1:25:b6:28:2f:86:68:2d:dd:9e:
04:65:bb:7a:8c:9d:b9:dc:ec:d3:be:04:8c:a2:dc:39:ce:43:
71:f8:3f:53:60:f7:d6:07:73:4c:6e:97:8c:71:48:92:05:12:
ca:61:04:7d:fb:06:c2:18:81:78:f6:7e:dd:36:ce:ba:f8:91:
c1:2f:ea:7a:01:dc:94:95:c1:76:ff:6f:aa:86:1f:5d:97:02:
f5:88:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:18 2026 by rpki-client