Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: AYmBSn5YzIqv5HxXYEVUOej8QDhAnh3TrPhNvr7SH9M=
Subject key identifier: A1:83:DF:C0:23:F4:7F:7A:94:56:DE:2E:5E:20:BF:1E:6B:9E:FA:C1
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 01A0CA0FF45145EB0C63305DB524D78833AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0346
Signing time: Tue 22 Sep 2026 17:00:38 +0000
Manifest this update: Tue 22 Sep 2026 17:00:38 +0000
Manifest next update: Wed 23 Sep 2026 17:00:38 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: XxfEYPs/CeQSc+DTrhSNFgxOjrjNCv6lFiAwYPJ8PIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:f4:51:45:eb:0c:63:30:5d:b5:24:d7:88:33:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Sep 22 17:00:38 2026 GMT
Not After : Sep 23 17:00:38 2026 GMT
Subject: CN=a183dfc023f47f7a9456de2e5e20bf1e6b9efac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:8a:86:60:a6:8c:f5:d2:4c:ab:28:95:47:
3f:ba:4d:c7:f3:cd:1e:1e:b8:ae:42:dd:68:18:e7:
41:58:34:c8:c3:17:9a:5f:d2:b4:3a:bd:4a:a2:08:
44:62:8f:3b:01:b4:7f:a5:7b:51:d1:9c:dc:56:2e:
23:2c:a1:24:0d:12:20:8a:d2:5c:8f:a8:a0:ce:3b:
4e:af:07:9a:26:42:36:ef:e9:be:27:3b:9e:50:46:
af:7d:a6:2b:3a:23:06:a8:1f:42:ae:0b:ad:61:70:
c8:54:f1:60:9e:58:01:3a:e3:5b:d1:bd:35:c4:bc:
39:86:02:1b:4f:63:e1:0d:bc:cb:9f:a6:6c:ec:07:
a3:a4:97:27:70:a9:1c:74:58:a7:13:47:6e:93:dc:
d3:19:58:03:03:52:d6:7e:87:c1:2e:ae:04:22:60:
1b:37:e9:7a:e0:cd:da:4f:40:ef:b5:f4:3f:ce:a2:
c5:6e:c1:71:8b:9c:e6:53:a4:5b:38:14:2c:fd:1c:
f4:87:94:89:1c:ec:58:33:e7:c3:2a:3a:98:dc:5f:
9d:59:d1:ad:54:be:8b:37:69:29:82:bf:5a:c2:a9:
b9:fa:8f:c7:5a:c0:c9:ff:f6:22:ec:94:ae:e3:a1:
0f:2f:62:6c:12:6f:2c:2b:3e:41:d9:9c:43:e7:88:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:DF:C0:23:F4:7F:7A:94:56:DE:2E:5E:20:BF:1E:6B:9E:FA:C1
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dc:37:69:c9:e3:06:ca:5c:10:27:36:24:a7:78:a9:dc:65:
34:fb:17:02:e7:68:9a:85:05:d4:94:5a:6c:a9:72:49:ed:b5:
16:cc:72:1c:36:7c:86:4e:dc:60:8f:d6:28:c0:ce:29:68:d1:
ee:2c:6a:2c:36:67:20:3d:28:9e:59:51:3a:f1:1d:41:45:93:
f4:22:f8:7c:79:86:84:08:f2:7c:0a:93:b9:be:17:87:6f:2b:
b5:35:8c:8c:8c:94:e0:b4:13:bf:33:b3:a1:80:6a:80:36:05:
58:9c:09:26:47:20:6c:68:79:d6:a2:c8:1f:40:4f:da:92:0f:
36:1c:88:b4:f1:1a:20:6d:c9:74:5d:95:61:83:8a:76:7d:54:
e9:08:93:9f:55:25:b1:ae:e6:90:b1:b9:13:6a:fc:ac:50:e5:
90:3e:6d:c5:46:a6:1b:fe:ec:0b:5d:b8:98:66:26:2e:b5:67:
90:49:4b:9e:b5:13:2f:51:20:ec:30:17:0e:8f:b2:1c:f0:1a:
e6:92:b0:19:48:3e:c3:64:96:a6:97:ba:c2:31:86:a0:fe:6c:
e5:22:61:bf:5a:cb:ab:f8:18:a5:35:2d:3f:97:64:b3:e3:01:
4f:1d:91:60:fe:db:38:81:3e:21:25:bb:09:bc:72:9c:7b:b2:
ac:ab:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:57:08 2026 by rpki-client