Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: FNeMMFYipBX2p475l0drc+cL1Ka7oQIBqdS7+YUB30Q=
Subject key identifier: 8A:C4:E0:54:92:89:09:5F:03:24:5D:F7:BA:5D:39:19:0E:74:0F:D3
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 01A0C47C10E6C52C1D053FB10F2EC2F8319D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 15:01:00 +0000
Manifest this update: Mon 21 Sep 2026 15:01:00 +0000
Manifest next update: Tue 22 Sep 2026 15:01:00 +0000
Files and hashes: 1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: Z+85qH17sdElo0WtUJvPOckwFBqPhgFJhbcUTvGiNsw=)
3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:10:e6:c5:2c:1d:05:3f:b1:0f:2e:c2:f8:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Sep 21 15:01:00 2026 GMT
Not After : Sep 22 15:01:00 2026 GMT
Subject: CN=8ac4e0549289095f03245df7ba5d39190e740fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:92:f6:da:43:4d:05:93:f8:a3:d2:6f:b7:
9e:f6:38:40:6c:fc:64:31:9e:22:8b:55:f6:7e:0a:
da:42:ce:7f:2e:b2:6c:12:96:0e:9c:b0:76:34:b1:
42:7b:d6:ff:ec:ae:48:32:de:f1:6c:c5:d6:87:98:
14:d6:db:76:b6:5a:21:c7:ac:e7:0d:d4:8e:1e:b9:
24:57:a0:b7:a1:e4:5f:5c:74:19:92:18:f7:2f:74:
13:a3:75:5e:64:70:61:b7:d7:88:8e:8e:8b:38:03:
30:ef:1c:ed:4c:55:ff:12:4f:b3:a2:d3:cd:8a:bd:
47:f9:32:0f:11:a8:ab:d5:1c:d3:b2:fe:df:58:67:
9e:e8:f6:e7:1f:ad:61:3d:0e:f9:e4:cb:c7:cb:f6:
c2:68:d3:52:61:08:ac:b6:0a:7e:19:b6:de:da:89:
19:bf:e2:3f:ed:5a:e6:95:77:1b:b1:c4:de:5e:d3:
c7:f4:7d:84:b0:03:79:1c:94:e7:5c:3f:81:5c:7f:
20:1f:23:48:42:3c:ae:28:9c:76:73:03:7d:cf:aa:
02:b8:92:36:cc:56:ed:94:92:f6:ff:77:e1:d4:a0:
ca:1e:06:a9:98:f1:b3:fd:47:2e:a2:ba:8b:1e:9f:
18:a2:15:ee:55:f0:87:ca:f8:a5:1f:4f:c9:41:74:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:E0:54:92:89:09:5F:03:24:5D:F7:BA:5D:39:19:0E:74:0F:D3
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:23:57:cf:92:f7:e4:9a:98:fb:71:cd:41:56:4d:bd:9d:1f:
62:79:bb:c2:52:8e:4e:67:85:46:0b:57:40:21:6b:3b:08:06:
ad:16:3a:74:85:21:3d:61:4f:31:b9:53:75:55:2b:7d:57:32:
56:2b:f1:fb:65:40:47:28:34:5d:b8:4c:a6:4c:c4:97:ee:ed:
2a:60:51:08:a7:2c:f4:73:28:20:ce:4c:ed:fb:47:a8:9e:91:
8c:52:d1:ba:ad:79:1d:4e:86:39:88:c8:cc:4d:5a:87:30:1e:
76:b2:80:77:fd:50:58:ce:3f:c6:4a:49:02:af:f7:63:68:c9:
be:10:b4:e8:47:3c:12:a2:bc:75:fd:60:eb:80:59:b6:a6:93:
5b:e2:75:20:ed:b2:d2:c1:64:33:4d:b7:5e:84:4d:da:15:4e:
99:31:19:13:8d:05:76:b2:ff:c1:b0:80:a7:28:6e:23:d7:59:
d8:09:a1:c7:a5:8d:b1:4f:85:44:01:7d:f6:a9:8a:76:b5:89:
54:d3:fe:9a:f5:73:b8:e8:c5:9f:d8:29:a2:46:40:86:d8:e2:
03:1d:74:f6:95:bf:09:23:f6:a8:35:ba:ad:7f:5d:7d:8d:da:
47:a1:a3:71:12:3c:54:01:a9:a0:42:f5:aa:e3:1c:2c:a3:2c:
3f:af:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:44:44 2026 by rpki-client