Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: hkxZDhsFzrdvNX2bOuKljnREki6vz6GQn4a2KlWqUxw=
Subject key identifier: 7E:E3:9D:CF:B3:69:5C:86:59:3E:01:24:D0:23:1C:9B:A3:57:9A:10
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 01A0CBFE698E0ED28F77AAC60319965EA6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0347
Signing time: Wed 23 Sep 2026 02:00:42 +0000
Manifest this update: Wed 23 Sep 2026 02:00:42 +0000
Manifest next update: Thu 24 Sep 2026 02:00:42 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: ZpmtVK6rAs4cwCYKZBpuDJsok6571EFGl+kJLJIf6yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:69:8e:0e:d2:8f:77:aa:c6:03:19:96:5e:a6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Sep 23 02:00:42 2026 GMT
Not After : Sep 24 02:00:42 2026 GMT
Subject: CN=7ee39dcfb3695c86593e0124d0231c9ba3579a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:0f:5e:93:e5:0f:6d:cd:fe:61:06:af:b9:
09:85:eb:3e:04:dd:49:41:f8:94:b4:a8:11:b9:a3:
a9:20:d4:d8:47:67:c2:a7:a6:3a:ce:28:ab:9d:e7:
ba:f8:23:a7:c5:47:5e:53:f9:b2:d4:09:64:66:26:
cd:64:a9:85:8d:55:01:dc:66:92:dc:e5:d0:e0:f5:
6b:a2:33:95:6e:bc:99:69:4a:1e:b8:93:bc:71:02:
63:4a:77:0b:81:9c:bf:2e:05:fd:b7:e2:27:65:ae:
85:9b:25:71:40:36:e5:f4:cb:36:0e:c1:0c:c8:aa:
7d:db:53:a0:17:b0:03:f7:15:9c:cb:b8:fa:9b:fa:
85:34:4a:ea:d0:ee:92:5a:c4:d0:76:04:14:d1:03:
17:9e:fc:6a:82:99:a8:94:a1:a9:96:2b:79:5f:03:
6d:b5:4b:b2:c1:1d:5f:c3:ba:09:93:a6:b6:ab:83:
ea:4b:32:23:b1:f5:71:7e:6a:69:0c:68:4d:85:72:
c6:6c:b3:f5:71:7b:c0:1c:0d:f1:d7:bc:0c:f0:aa:
0a:20:ed:46:a1:44:ff:4a:da:15:2e:6c:83:7e:ce:
5b:0c:a8:91:6a:99:df:42:3d:e6:5e:3e:55:dc:6d:
98:0c:ae:90:e7:99:62:b5:9a:47:95:c6:ee:20:58:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:9D:CF:B3:69:5C:86:59:3E:01:24:D0:23:1C:9B:A3:57:9A:10
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0a:75:47:bd:61:dd:fc:5d:ea:0d:4f:c7:46:dc:9b:c2:74:
af:e0:58:09:a6:43:61:89:ff:07:47:ac:97:08:4c:d1:25:5f:
e4:36:89:f5:cd:99:40:ae:48:8f:46:c0:55:d7:4a:4c:95:ea:
f0:8f:da:97:17:99:31:01:07:e7:1e:7d:12:58:bc:76:e1:3b:
4e:7a:d0:a9:ab:78:ee:6c:69:48:82:e3:4f:95:51:e2:a0:44:
eb:96:4e:02:89:02:3e:2f:fb:04:8a:12:a6:17:3a:88:de:86:
c6:d6:f2:9e:4b:59:e0:d1:5f:56:fc:18:fe:0b:b5:cb:9e:42:
1d:53:be:de:95:ca:8c:01:46:b8:76:30:17:55:78:45:df:6d:
d7:3f:08:fe:b7:ee:22:47:b2:14:f6:88:38:2c:ce:54:38:02:
13:a8:9c:7d:8c:7e:3f:f8:a0:2a:f6:4a:cf:6f:7d:01:e7:07:
8d:92:d8:cf:70:1c:66:96:75:a9:28:d9:7d:19:7a:70:02:f2:
d1:25:bd:d2:71:ed:3f:e2:8a:dc:c2:3f:57:22:16:ad:f2:2e:
b6:db:3c:ef:6a:7b:96:55:e0:02:20:2a:9f:1f:1b:cd:f9:b4:
bb:7b:05:63:43:1f:72:ab:ac:f6:02:41:ff:21:b0:89:b9:51:
d0:7f:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:14:36 2026 by rpki-client