Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: rGiu5OIfGSYKiYoBqHZsuel7JeABHmmxPHFhcIdHxBY=
Subject key identifier: 95:3A:B3:32:A1:06:95:BD:84:08:B2:8B:07:71:08:33:B1:B6:51:D5
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01A0C47BA111561695C0BFE6EA68DED20F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1A73
Signing time: Mon 21 Sep 2026 15:00:31 +0000
Manifest this update: Mon 21 Sep 2026 15:00:31 +0000
Manifest next update: Tue 22 Sep 2026 15:00:31 +0000
Files and hashes: 1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
3: SFvSBBGYgzySNxIeXKtpNZOhU9Y.asa (hash: xMj44N87N0PalBE7ni1eUf0bLqqLwE4xJyf40B4J5dg=)
4: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
5: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: HQHp4Ja7VJz8I29wT3O4XLYrJbFQ+JAu8cNNgRAYPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:a1:11:56:16:95:c0:bf:e6:ea:68:de:d2:0f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Sep 21 15:00:31 2026 GMT
Not After : Sep 22 15:00:31 2026 GMT
Subject: CN=953ab332a10695bd8408b28b07710833b1b651d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:53:2a:ca:b5:d1:7a:7e:41:cb:33:aa:c2:
47:69:03:5f:14:e9:7b:cf:9b:04:ad:91:d6:81:10:
66:2b:a8:cf:02:ef:d8:cd:5a:fc:be:cf:08:6e:bb:
07:30:7b:a9:24:c1:fc:21:4e:07:fe:af:68:2f:6e:
b1:88:cc:c1:9b:2c:0b:b4:6d:5d:55:20:a0:c6:93:
76:bf:5a:5e:c4:8e:70:30:25:dc:81:36:8a:cd:3e:
78:30:4c:e4:75:10:ff:d4:50:0d:2a:ad:74:3f:c3:
a0:d3:47:3a:27:9f:22:14:87:28:a9:84:3e:fc:8e:
de:f6:5a:96:ce:a2:a6:3d:b9:69:60:e1:df:9d:bd:
61:8f:7f:f8:28:47:aa:bd:7b:7c:4f:81:32:e7:e1:
a0:11:d5:8e:b3:48:78:7c:64:63:a6:70:d7:9e:a8:
4d:0a:4b:5c:c5:de:ea:78:3a:65:f3:be:47:91:b5:
4f:39:53:08:2c:dc:a5:5e:f3:3a:e1:40:c7:a0:91:
c7:88:cb:1e:8d:ac:6f:02:3a:96:45:41:56:da:e5:
85:82:bd:47:b2:5d:78:34:1b:fc:9b:6c:70:9b:7d:
86:39:af:a4:a9:89:f1:69:b5:bd:00:09:2e:11:0c:
18:4f:e4:34:af:b0:25:59:26:f6:52:36:3b:a3:5c:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3A:B3:32:A1:06:95:BD:84:08:B2:8B:07:71:08:33:B1:B6:51:D5
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:fe:b2:91:f2:72:d8:24:8c:d8:35:ec:c7:1d:dc:8a:03:
fe:ef:9a:88:cb:51:5a:13:4e:10:d4:88:fd:f1:e9:de:8c:ba:
85:e0:bc:33:fc:dd:ca:71:97:98:dd:6a:39:43:f3:ad:13:10:
3e:9d:75:7f:aa:9f:52:0c:35:5b:88:93:7f:dd:ea:23:0c:5d:
27:52:d9:b0:88:1b:49:17:7e:d1:48:76:52:39:b9:fe:77:c5:
ff:ea:e3:52:89:de:17:b5:77:f2:5a:0f:6c:7d:f3:13:32:2c:
74:e3:4f:19:3a:24:1d:9f:6f:d7:58:10:7e:97:80:a4:7e:3a:
7e:0a:b3:a8:88:ce:af:5f:78:f3:d2:99:2f:71:ae:a4:94:f1:
b1:60:39:b0:8a:c1:20:2a:af:f1:2d:27:26:a2:ef:a6:b5:4e:
83:17:12:a4:34:d5:b9:4c:36:94:da:d5:55:67:39:a0:21:04:
ea:6f:8e:d3:d2:ff:cb:66:75:3d:16:67:f6:15:c1:9d:da:1f:
f0:2d:0e:01:cb:af:a2:2b:9b:5d:7d:77:40:5b:4b:33:a6:d4:
6a:87:25:48:89:a4:41:87:d7:7e:a9:5f:34:bd:e5:06:cb:19:
80:36:ca:01:90:be:d2:f3:09:55:61:14:44:ac:a1:e0:8d:2a:
99:0a:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:17:33 2026 by rpki-client