Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: It7YlS6r9V+sXzR/T1DH6WC+b0Uf0UYVtMh4WqAPwUA=
Subject key identifier: 14:7B:4C:0B:17:F5:84:E7:CF:DB:0A:3C:13:F5:CF:D9:78:0B:C6:4A
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01A0DDCEA10696BFF51BA4C097FDBC38EDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 133E
Signing time: Sat 26 Sep 2026 13:01:41 +0000
Manifest this update: Sat 26 Sep 2026 13:01:41 +0000
Manifest next update: Sun 27 Sep 2026 13:01:41 +0000
Files and hashes: 1: 2yM5Do3zWOnr0yQBZ1vtd1vIjV8.roa (hash: xC4pizZCJao9T4oTMaaLUU+A5wr8fDYQOCKbRN4Gjs4=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: XJLsFAA83EXc1jrfnCh2GSMTenoh6yDhgLx7CrSBnw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:a1:06:96:bf:f5:1b:a4:c0:97:fd:bc:38:ed:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Sep 26 13:01:41 2026 GMT
Not After : Sep 27 13:01:41 2026 GMT
Subject: CN=147b4c0b17f584e7cfdb0a3c13f5cfd9780bc64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:95:a5:77:25:7b:7e:d5:9d:ef:3f:18:98:4a:
2a:cd:7c:7d:64:14:cc:69:54:8f:41:ab:e9:4f:dc:
4c:f0:da:f7:07:f6:42:e9:de:08:60:b7:d1:3f:e2:
19:3e:9f:fc:0a:08:85:8f:6e:b9:d9:90:88:43:e9:
44:60:de:d2:49:4d:52:67:15:c8:1f:48:17:27:ed:
87:16:16:aa:11:48:36:d0:78:92:1f:42:da:a0:e0:
a3:88:b4:9a:9f:97:f4:c1:9a:39:60:68:05:77:a0:
fe:15:a4:12:37:4f:e9:3d:c9:d8:ec:9d:1f:4c:88:
3a:49:60:16:80:ad:4f:f1:52:24:d0:dc:01:db:e1:
7b:b5:cf:55:b7:53:e2:39:5a:96:b1:7e:ea:04:c0:
80:53:5f:ca:20:d3:af:c9:e4:e4:0e:98:54:94:af:
c6:81:02:fa:6e:ac:0d:49:07:24:b4:3e:44:da:dd:
25:11:90:3b:96:f6:b6:b8:61:0c:9d:50:7d:4c:de:
78:08:28:2a:35:f0:87:be:24:bb:86:d8:48:5e:d9:
94:12:6a:cd:06:4f:97:bf:6a:73:06:a5:4d:93:a0:
81:41:ac:93:84:f6:53:36:b8:59:53:0b:6f:b7:c4:
65:b3:28:45:36:4a:a2:ee:0e:26:85:6d:14:39:40:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:4C:0B:17:F5:84:E7:CF:DB:0A:3C:13:F5:CF:D9:78:0B:C6:4A
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:df:30:30:31:08:5b:0a:3a:cb:50:59:ba:77:b9:01:c3:71:
f1:18:c2:14:98:f9:52:2d:a8:94:10:aa:17:89:e0:e2:eb:92:
c3:e8:b3:e7:47:9b:32:b8:86:2b:69:71:c8:df:a5:80:8b:29:
39:7a:f2:e3:66:42:3b:34:d2:32:62:37:68:ef:aa:f3:85:78:
3e:79:7a:e5:0e:76:42:e5:e4:ea:3f:59:a5:08:6a:7f:18:78:
a9:27:85:8e:1f:db:e6:5e:ed:58:9e:39:b5:9e:2f:dc:65:21:
bf:8a:b0:fb:c4:cc:77:b9:7d:2a:b5:92:c2:fc:d9:6c:8d:48:
9f:e5:33:7e:a2:eb:9c:a4:88:a8:3c:ef:0c:03:ed:9a:55:26:
b1:53:b1:bd:31:a7:e6:18:07:3a:4a:e3:e2:eb:b5:6d:a4:84:
5b:ba:11:5e:26:56:fd:46:a3:01:34:79:6d:0d:7f:7a:db:ff:
05:1e:1d:0d:c0:e7:a8:ab:8b:15:e0:7a:ba:61:ed:6e:71:c6:
38:b4:24:2b:e7:c6:0d:b4:60:fd:dc:ab:6c:49:63:c0:6f:a2:
5f:36:d5:14:85:9b:74:77:c3:91:91:99:99:73:2e:96:e9:fb:
8c:a2:99:17:bf:ff:4f:5d:1b:eb:91:bb:54:ce:42:c4:56:c4:
c5:9a:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:42 2026 by rpki-client