Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
File: Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft (raw, json)
Hash identifier: c/lBZt/yoWvdwQQFr4M+Y8B8093iZvEDsE8aq+/mNUc=
Subject key identifier: B5:C9:52:89:0E:91:A0:C5:D0:B6:C5:05:27:46:4D:F9:C2:C2:58:BB
Authority key identifier: 01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
Certificate issuer: /CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Certificate serial: 01A0E55105021C56A58DDC51FE225B62560D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:01:27 +0000
Manifest this update: Mon 28 Sep 2026 00:01:27 +0000
Manifest next update: Tue 29 Sep 2026 00:01:27 +0000
Files and hashes: 1: 9FnedNLGy2qGufqg39zhdRMwEdI.asa (hash: eeM2HVe0C2trzp/vP7ZN9Dek8/mPhMXDy97rUY+CGQ0=)
2: Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl (hash: oFxwI+r4weaz/YV/6+Daulp5LDIGp/vFjEp5dg97YT0=)
3: P7X-TFQrNBUmDTPrSg8Uycv95BA.roa (hash: JWrwg1jchmmpIeyFsH/GcYXJUkYLKUH8jhZQ6YCaBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:05:02:1c:56:a5:8d:dc:51:fe:22:5b:62:56:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Validity
Not Before: Sep 28 00:01:27 2026 GMT
Not After : Sep 29 00:01:27 2026 GMT
Subject: CN=b5c952890e91a0c5d0b6c50527464df9c2c258bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:3e:60:b1:58:fb:2e:29:14:a8:5a:a0:10:
75:e6:30:b8:7d:7a:96:12:ab:68:01:0b:4a:c5:26:
6d:f8:03:08:af:23:bd:f9:3c:cf:06:38:6a:85:a0:
7f:9d:ef:6c:fe:10:35:bb:a1:45:49:bd:70:7a:fd:
1f:90:75:0c:4e:58:65:20:de:86:e6:34:01:57:41:
17:94:f4:33:bc:4c:35:b9:23:be:41:8a:5f:b8:15:
1b:2a:72:39:47:4a:26:e1:6c:b3:88:87:61:3b:9b:
40:3e:63:21:08:00:92:d1:e3:c6:92:c5:76:f6:f8:
b5:c1:f9:ab:be:d5:84:86:82:9c:61:87:9b:d9:21:
03:c7:7e:30:43:a9:59:db:0e:d2:a1:90:2d:28:fc:
58:13:70:5b:f2:8e:a9:35:60:01:91:a6:bc:97:a5:
ba:46:4c:a5:59:aa:7c:2c:50:27:76:e4:b9:8a:0a:
7a:10:f9:95:6a:06:8a:65:04:e6:66:28:29:2a:9a:
ce:2b:cc:7d:db:78:84:cc:52:00:f4:30:bf:74:86:
14:1a:29:79:77:1f:77:96:2f:39:d3:d9:c4:c3:c8:
64:9f:44:cc:1c:ea:64:f9:f0:7b:0f:6c:47:d5:e8:
72:d2:35:40:12:86:5e:64:e0:cc:53:a8:60:5c:b4:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:52:89:0E:91:A0:C5:D0:B6:C5:05:27:46:4D:F9:C2:C2:58:BB
X509v3 Authority Key Identifier:
keyid:01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fc:42:21:12:81:17:d5:58:81:81:8d:2a:f3:52:60:4c:b7:
3f:35:d5:77:58:76:ed:34:9e:3c:b2:2c:a3:3f:38:f0:de:ec:
29:cb:dc:c7:16:a0:8a:f5:a0:a4:b0:b4:02:98:90:4a:7a:b4:
de:5a:4a:87:2c:86:c0:ed:b6:39:40:23:78:5d:d0:a7:4a:7f:
c8:b4:78:06:c2:79:00:bd:2b:88:f8:be:6f:24:2e:d1:54:2a:
00:bc:2b:82:94:00:b4:78:19:b5:61:9a:27:a6:8d:38:a3:6d:
1c:36:ef:d5:c4:d6:73:d7:f0:19:1c:a1:1e:93:ae:1c:9b:5d:
69:00:65:9e:6f:ca:44:d3:9c:f3:4d:5c:a0:de:e1:83:71:8e:
68:84:1c:a8:71:64:72:7a:f3:d1:bb:7c:c0:fb:4a:90:a7:d0:
5d:13:f0:38:f1:80:1a:34:3e:e6:14:cf:e9:0b:53:32:85:ef:
03:22:41:1a:80:af:a0:2e:e0:61:0b:b3:e9:00:6f:34:fa:e1:
e3:6f:76:c5:95:29:e8:fb:60:0f:d7:1e:af:59:fc:ef:7c:23:
fc:f8:f5:12:2a:48:60:d8:ff:01:7f:73:d9:d2:68:60:6e:dc:
71:a3:04:69:31:e0:34:c8:87:28:b4:c9:ff:df:6d:ec:9f:a0:
17:32:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:47:32 2026 by rpki-client