Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: ANG3zBPXseZ0lZfbWoOSJkuUV7eXeP4RR81h80E2rTo=
Subject key identifier: 10:6F:BB:5A:A2:19:56:CF:C4:51:C9:70:6B:1B:AE:92:6F:87:7D:5C
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01A1238B51D9A317AF64002129F3305208A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1A2A
Signing time: Sat 10 Oct 2026 02:01:35 +0000
Manifest this update: Sat 10 Oct 2026 02:01:35 +0000
Manifest next update: Sun 11 Oct 2026 02:01:35 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: oMbsxGfGBx8SAtMgcJRyyo/uT5CZnctN1VXCHYAI2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8b:51:d9:a3:17:af:64:00:21:29:f3:30:52:08:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Oct 10 02:01:35 2026 GMT
Not After : Oct 11 02:01:35 2026 GMT
Subject: CN=106fbb5aa21956cfc451c9706b1bae926f877d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:bb:ee:5b:82:11:06:71:b1:f6:a5:7b:1d:
e3:bc:9a:39:6c:d7:3c:01:d3:d3:69:56:33:be:03:
68:f9:f5:35:12:86:a2:29:e9:0d:d8:ef:8c:d3:dc:
87:32:dd:36:fb:d9:5a:5f:40:bd:e4:c6:ce:06:f9:
5f:11:e8:b0:73:d6:33:cf:f6:6d:f0:b6:eb:3d:c1:
30:e0:a7:6c:29:cb:e1:d8:0c:15:50:76:28:e0:ed:
db:5a:12:ea:18:c4:d3:30:1b:3c:d5:50:78:d5:a6:
87:e1:15:96:62:6d:da:49:e7:ed:1b:7d:82:d3:3f:
e9:f3:41:59:e3:80:cb:a2:14:a1:a5:db:46:d9:b1:
ff:59:c8:b0:0c:48:f0:5b:ca:14:74:2c:e5:66:e4:
b2:52:44:ad:5b:23:db:af:2f:c8:2e:f9:b5:78:40:
65:28:0f:80:a3:0c:10:9f:39:e0:e0:f3:c7:f8:e7:
d5:8a:78:eb:d8:b0:2e:96:5c:4e:ab:ef:48:3e:40:
23:46:1f:aa:96:a6:42:39:ba:e7:a7:f9:19:31:9d:
98:49:d7:c7:2a:dc:9e:fc:fc:e2:ce:d5:7e:63:2e:
dd:e6:ef:5e:22:88:e1:3e:30:cd:97:73:70:bb:09:
b7:b4:2a:b1:cd:5b:b0:6c:b7:28:92:fc:93:a7:6b:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6F:BB:5A:A2:19:56:CF:C4:51:C9:70:6B:1B:AE:92:6F:87:7D:5C
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:15:d2:53:97:a7:0b:a9:32:b8:2d:4b:3d:9a:cc:29:3d:7b:
ae:34:e4:ff:0f:6d:27:8f:24:0d:c7:a8:3f:e3:28:b3:2b:9b:
d1:01:9d:74:4b:15:a2:6c:88:fb:cf:94:ec:90:a8:51:73:e8:
10:ed:61:32:de:4f:5a:c1:33:29:27:68:9b:50:c9:77:a9:7e:
e2:79:4e:65:fc:82:0a:21:7d:35:c0:da:43:04:bd:69:50:8a:
31:4b:33:56:09:c6:bc:36:b0:b2:9e:0d:b8:dd:53:35:60:a4:
da:d9:72:be:67:8f:7f:39:68:be:6b:14:a0:60:88:e0:bb:2f:
b9:a8:af:c3:b4:ae:e0:b4:97:d9:06:98:63:27:c2:b2:0b:2e:
b3:d1:ae:0d:65:07:5b:fb:02:9f:90:39:50:72:eb:f7:be:0e:
a4:ca:c6:60:bc:2f:2a:e0:8a:69:d4:e7:56:c7:39:9d:6c:22:
b9:f5:5e:dd:b3:ec:e8:57:f4:98:de:95:52:82:f2:e8:e4:fd:
92:bc:6d:09:f5:c9:b8:cd:c9:51:2d:e3:6e:78:c8:c2:56:ec:
c4:37:67:02:51:64:e0:dc:33:a7:18:43:e2:e4:a1:71:03:97:
47:53:70:45:74:03:ed:77:e2:1d:ea:9a:cb:44:a5:1f:79:f6:
40:73:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:33:41 2026 by rpki-client