Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: T+/hchn8J/MH2OUmHbJCnZlyzbm7SM37veRvgpNTb2U=
Subject key identifier: 16:A7:32:61:63:E2:E2:4B:FE:9D:B1:49:78:81:86:4C:93:98:41:5B
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01A0D15B7C4FAA4E626D7B668DFED4F953D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0A87
Signing time: Thu 24 Sep 2026 03:00:28 +0000
Manifest this update: Thu 24 Sep 2026 03:00:28 +0000
Manifest next update: Fri 25 Sep 2026 03:00:28 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: wvdFgoV0b+lvjj00/iUzfg9YCT8tmI0zr684V4z0AEw=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:7c:4f:aa:4e:62:6d:7b:66:8d:fe:d4:f9:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Sep 24 03:00:28 2026 GMT
Not After : Sep 25 03:00:28 2026 GMT
Subject: CN=16a7326163e2e24bfe9db1497881864c9398415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:2f:67:0c:f0:29:1f:d0:28:d7:92:e6:b8:
15:8e:14:f7:17:27:9f:fd:de:4c:2a:ba:46:8e:90:
23:ad:31:ca:85:2d:e7:6f:dc:dc:38:9d:77:7f:88:
02:71:6e:9f:ee:46:6c:c3:be:39:d6:55:1b:cf:d9:
27:64:1d:77:7e:e2:25:73:5b:49:ad:99:61:8a:b6:
09:01:d2:3f:2f:0b:eb:60:64:48:7f:46:1f:4f:9b:
85:87:96:dc:d4:f3:82:9b:eb:df:9e:df:5b:b4:fb:
7f:88:e5:fd:d8:3c:26:6f:a3:93:03:cd:4d:98:37:
82:88:ec:c6:be:fb:53:d0:a7:22:11:bd:06:89:34:
2a:ad:35:47:64:73:74:3e:e8:62:5f:dc:95:e8:ee:
fc:db:f8:0d:8d:3d:d1:bb:b6:13:27:a8:64:e0:3b:
24:ec:1b:02:43:7b:e9:0e:7b:a5:2b:9b:5f:a2:f5:
c9:44:33:73:11:46:ef:67:21:ab:36:a8:69:f3:70:
7a:cd:b6:e8:d1:8a:fa:4c:16:a5:a9:fa:fd:dd:67:
7a:fc:27:a0:55:9e:e4:15:7f:76:83:1f:66:3a:23:
b1:52:88:31:f1:25:78:a9:c0:ac:51:d1:d8:fb:32:
8b:7f:0f:92:e9:4a:46:34:3e:bd:7a:72:ea:4a:41:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:32:61:63:E2:E2:4B:FE:9D:B1:49:78:81:86:4C:93:98:41:5B
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:59:e1:37:34:62:85:f0:6b:3d:74:8e:d1:17:fa:d8:b1:d2:
e5:3b:b0:ea:05:f4:10:a1:af:a5:36:e5:18:04:ee:ba:09:46:
80:26:6f:95:ad:6f:bf:a5:6b:f1:fa:97:73:8e:0f:57:bf:9c:
eb:f6:63:91:03:76:2b:fe:eb:81:3b:20:72:a4:3d:c0:50:13:
31:c5:d9:98:e7:9b:31:ac:90:8e:d2:b6:1a:33:89:29:b6:db:
9d:14:52:94:5c:6f:ff:78:9b:be:6f:0b:c4:0c:18:23:17:30:
aa:a0:95:8c:37:55:b0:6e:b2:1c:fb:4a:14:23:01:2a:84:ea:
7e:9f:58:78:3a:9d:d1:0c:91:46:d5:a9:22:fc:9d:34:ad:c0:
dc:e2:0c:d4:c4:26:01:7a:92:be:13:cf:04:6d:aa:70:fe:95:
f8:b1:71:f7:8d:5f:dd:b5:5a:78:3b:2e:46:5b:b1:3a:2a:18:
e6:5c:b8:1a:83:82:58:06:55:83:d3:7d:6c:a3:fc:76:cf:25:
28:28:2e:6c:58:96:2a:89:4a:a2:77:04:79:95:b1:69:b4:c8:
14:41:ec:8f:e4:55:6b:9c:66:6f:1f:68:65:40:79:72:26:dd:
c0:bc:f9:55:c6:88:63:66:7d:ac:c6:2f:1c:d5:6f:f5:9b:07:
80:27:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:51:36 2026 by rpki-client