Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: nXULbBlFd4l5BfbuCwFXjqWy1Dly4MQ1oGN0vU1q5Dw=
Subject key identifier: 00:09:25:90:1D:C3:F4:26:87:79:76:C9:7A:E0:F7:B6:1A:D5:23:08
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 01A12A3184C132C6AB47B2E498322E1C2163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 01BC
Signing time: Sun 11 Oct 2026 09:00:50 +0000
Manifest this update: Sun 11 Oct 2026 09:00:50 +0000
Manifest next update: Mon 12 Oct 2026 09:00:50 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: YHiTksoUsE85WNjKHSkiq58oiDIjdCq6lRdmlYntuCM=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:84:c1:32:c6:ab:47:b2:e4:98:32:2e:1c:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Oct 11 09:00:50 2026 GMT
Not After : Oct 12 09:00:50 2026 GMT
Subject: CN=000925901dc3f426877976c97ae0f7b61ad52308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:78:e6:86:9a:23:a1:5e:28:47:dc:3c:42:
fc:70:a0:17:e6:ba:bc:b8:a9:e4:2f:1b:7e:de:78:
8d:da:53:c6:ec:fe:90:3f:4f:67:b1:cf:d7:82:a2:
f0:2e:08:7b:54:11:2e:f3:2d:70:30:81:ce:1a:92:
7e:3f:82:9d:3a:2a:cb:c2:8a:05:0f:e3:c4:64:2f:
4d:bd:10:ed:ed:7b:3f:b6:34:96:46:e8:e2:19:f9:
4f:9f:bc:e8:e8:9d:42:2c:4a:61:db:05:16:99:05:
9a:32:38:0d:c6:45:75:b1:08:30:33:09:0d:07:bc:
bc:be:f9:ee:6f:6e:30:01:71:d1:c8:42:64:20:50:
a3:a8:53:80:6d:82:6f:9e:04:6f:35:48:3d:f7:16:
4e:97:23:63:96:59:db:d3:b2:1f:cb:56:5d:b4:8c:
a2:e8:27:0f:16:5c:79:1f:05:8d:56:6b:17:2e:69:
c1:5d:17:2d:59:c1:68:bd:27:79:93:64:af:b6:0a:
b4:0f:f6:82:b5:f6:7f:8e:35:71:17:aa:45:81:1a:
61:c1:98:23:ff:78:c1:d6:b2:ac:b5:8d:b6:63:59:
f7:00:43:0c:c4:bb:c4:c1:be:51:6a:20:57:77:32:
fa:23:02:fe:fc:c8:7b:99:68:08:2d:27:b2:51:51:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:25:90:1D:C3:F4:26:87:79:76:C9:7A:E0:F7:B6:1A:D5:23:08
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:81:08:07:6b:dd:0c:e8:48:c4:df:11:f6:c5:14:d0:b2:6c:
ed:31:5a:dc:d7:6e:f5:cd:5d:f3:bf:ba:6f:55:fa:35:da:95:
51:4b:e7:4d:a0:c0:e9:24:b3:c0:fe:ea:cc:4e:54:03:af:62:
c6:34:9b:e8:cb:62:5f:42:41:e6:ed:8d:11:2d:0e:ab:7a:f2:
9a:41:22:a9:da:3e:e6:a8:db:e5:5f:b4:31:2c:27:00:a8:09:
3c:bd:fe:dc:98:05:f3:a7:34:d4:10:22:24:cc:d8:64:94:40:
cd:43:c6:7b:80:a9:58:49:b3:f6:50:b2:51:a0:35:2e:e5:d1:
e4:91:ec:d9:a5:1e:ee:64:35:f0:ae:57:c9:79:d0:ab:f8:c1:
65:0a:ec:94:31:ac:18:f9:56:9d:4c:71:48:1b:3a:3e:bb:44:
1a:71:f9:c3:18:97:d9:ff:01:ae:d0:e3:80:87:55:66:9b:8d:
c6:67:58:c6:c2:42:76:df:46:97:23:f1:f6:aa:c9:ea:56:5d:
e5:48:1d:38:20:4f:8e:c2:1d:ef:32:e6:6e:1d:a3:1b:5f:54:
5e:1a:1e:7e:22:62:0a:f7:f8:3c:a5:30:66:d4:be:56:91:30:
38:8c:13:2e:30:eb:4f:bc:60:d3:bb:1f:b8:33:f7:18:a5:01:
c0:f1:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:29:25 2026 by rpki-client