Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File: cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier: WaxrRC0FjwpdKbonSIgj3cYS7+hjNlPZ8mN73kx2Tj4=
Subject key identifier: AA:17:21:AA:AB:AE:77:43:9B:7B:6E:CD:8D:D0:5D:E7:20:73:4D:66
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer: /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial: 01A0C52047366C474455F188FBCF0FEDCA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number: 01D6
Signing time: Mon 21 Sep 2026 18:00:21 +0000
Manifest this update: Mon 21 Sep 2026 18:00:21 +0000
Manifest next update: Tue 22 Sep 2026 18:00:21 +0000
Files and hashes: 1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: dqo5xZoQv7Yi124RvkLC416oOutITjtT3hcvIt4JAJI=)
2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:47:36:6c:47:44:55:f1:88:fb:cf:0f:ed:ca:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
Validity
Not Before: Sep 21 18:00:21 2026 GMT
Not After : Sep 22 18:00:21 2026 GMT
Subject: CN=aa1721aaabae77439b7b6ecd8dd05de720734d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:ac:5a:f2:00:22:52:b6:a6:50:14:16:d6:
6f:09:18:6f:b8:2b:b9:05:e4:35:cb:e0:6f:71:04:
21:9c:4d:3a:77:82:6d:e3:5c:7b:f5:04:7e:dd:4b:
78:04:16:e2:c3:10:ad:7e:d5:a8:da:44:99:62:e5:
1f:72:02:20:ef:f4:42:7a:88:89:3d:e6:db:d4:61:
1b:fb:f0:48:b7:77:03:8e:25:af:6d:da:5f:19:84:
2a:ab:53:fa:85:dd:ea:d9:d5:20:c7:82:76:3d:1b:
df:2c:6d:00:72:bd:7a:9d:0b:f0:71:9c:0b:9d:cd:
e8:d6:ab:b4:69:fb:56:09:3e:97:39:a8:03:b9:39:
c9:7a:61:da:09:8e:7a:fb:99:4c:25:30:f3:13:18:
be:51:16:d9:1b:fb:8a:79:1a:10:4e:f4:aa:32:4c:
2b:dc:d3:30:5d:a9:64:98:86:7d:86:69:c1:97:00:
55:40:e9:fc:f5:05:c3:af:9a:a1:f8:28:57:61:9a:
6e:e6:f8:12:e9:fc:e5:e1:8e:2f:a0:e2:5c:dd:4b:
cc:2c:6c:14:87:e2:46:79:ef:af:d9:13:88:56:9f:
f0:95:7f:f0:27:b9:19:47:fe:d6:2c:07:2d:f2:df:
58:3e:76:56:f0:81:ee:40:8d:d4:50:d0:de:70:e2:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:21:AA:AB:AE:77:43:9B:7B:6E:CD:8D:D0:5D:E7:20:73:4D:66
X509v3 Authority Key Identifier:
keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:dd:c0:ca:dd:3b:05:a9:60:3f:b2:4b:65:b7:fa:46:67:
c3:8f:f3:e7:47:1d:f3:b7:50:5e:8b:e5:7e:5a:3b:dd:2d:85:
ef:f7:3c:92:0d:30:64:41:4a:b5:cf:e7:1b:3c:1d:8c:44:85:
dd:5a:39:80:95:77:1e:88:bf:d6:b7:29:86:be:7e:4a:34:5d:
0b:96:49:a6:59:85:ba:73:24:81:d2:81:93:68:59:42:05:8a:
ea:12:d0:0a:2b:bd:5c:f5:51:94:9f:be:92:2b:d0:b9:17:45:
ba:bd:73:5d:03:26:96:ed:df:c1:f9:87:08:40:46:ee:08:18:
c5:8f:cc:52:13:5f:37:ae:6a:a5:4b:38:12:d8:e4:0e:a9:a1:
85:45:b5:b5:16:99:33:79:37:ed:23:9a:30:31:f8:c5:dd:08:
eb:a1:87:3a:34:63:04:92:57:7f:a1:a0:99:7f:94:e8:94:74:
5f:28:b9:a9:92:18:f0:95:57:7d:f1:a5:84:f8:28:01:9a:ff:
d3:07:dd:65:97:9a:8d:3b:a1:56:09:d1:d1:63:4e:d7:e0:b2:
d2:05:1e:53:64:b4:70:16:fe:bc:ad:8b:aa:68:32:6b:0c:a1:
7e:81:0d:0e:44:b4:67:a8:05:8f:a4:48:14:c6:49:9b:b9:84:
ce:71:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:30:26 2026 by rpki-client