Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: xSgsz2vBLdy1Jr0O7inmSicDHWDCKQn+4g9BrkQh3Gs=
Subject key identifier: 6D:D8:03:BE:DE:DD:03:F4:40:08:2A:BF:48:17:8B:3F:F2:8C:AD:B3
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 01A0CD47EC5ED8349B11B77E735EC28B48DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 08:00:37 +0000
Manifest this update: Wed 23 Sep 2026 08:00:37 +0000
Manifest next update: Thu 24 Sep 2026 08:00:37 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: nU/86g7gHMAUjFHeU1uudRGdMG4eFqu7Ci12Jf4qtQY=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:ec:5e:d8:34:9b:11:b7:7e:73:5e:c2:8b:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Sep 23 08:00:37 2026 GMT
Not After : Sep 24 08:00:37 2026 GMT
Subject: CN=6dd803bededd03f440082abf48178b3ff28cadb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:a9:68:51:97:dc:e7:a7:d8:6e:79:1a:df:
7a:7e:18:fe:02:0b:40:fe:f7:8c:82:5d:ab:d8:1f:
5c:7b:a1:59:b1:6d:67:b3:65:d0:16:cc:a0:a0:98:
2f:8e:11:e7:ee:bf:d9:74:86:33:d9:e4:b0:ca:28:
11:3c:35:7b:9c:d6:fa:b6:a7:32:b5:b6:36:e7:ff:
bc:5d:12:82:bc:a1:f9:b9:31:80:c2:8f:cd:bd:17:
b0:61:ea:06:0c:27:8f:05:3b:8d:5b:db:43:ff:f6:
b9:ad:4e:e2:5b:92:56:9a:c6:d8:51:a0:7c:cb:35:
85:c1:aa:9c:45:e4:cb:43:bd:e6:46:92:77:21:3b:
62:79:af:fc:e0:e6:70:57:0d:fb:e2:13:b7:03:fd:
cb:27:16:5f:fc:47:1d:d1:a0:81:b5:61:40:ad:0d:
d5:1c:8b:d3:c9:02:75:09:b2:ff:98:02:02:6d:2d:
fb:20:59:77:ea:ea:51:9b:0a:ec:15:5d:64:68:f3:
c3:67:f7:55:96:9d:f1:a9:c9:7f:a4:62:75:30:6a:
45:8c:27:04:4e:9e:1d:cc:65:cd:ea:2d:5e:f0:1b:
b2:a2:12:fe:9c:cd:73:db:48:0d:20:51:d4:3e:dc:
5a:00:c1:83:dd:43:f6:89:1a:97:be:c2:ca:3d:da:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:03:BE:DE:DD:03:F4:40:08:2A:BF:48:17:8B:3F:F2:8C:AD:B3
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:63:c4:75:1c:07:04:16:ed:4b:50:11:9b:63:59:f4:31:
54:a9:8b:7c:e4:5d:df:42:b1:1f:8a:4c:1d:22:9d:8e:e9:54:
56:af:55:c2:74:47:a1:85:16:03:32:b0:80:c2:29:7f:c5:ca:
89:84:0b:89:72:9c:32:bb:4c:3e:e4:8b:06:94:89:10:36:6e:
cd:4d:f8:71:65:ea:c3:32:39:74:26:b9:53:ed:0b:11:af:88:
85:d7:e4:73:7d:71:50:1a:1e:08:bb:bb:0c:f5:57:95:da:24:
e0:26:9e:cd:ba:83:5f:8d:c7:27:3c:34:0b:4a:5f:92:79:aa:
c1:1e:75:b9:28:38:52:e5:6d:7a:5c:24:e5:89:90:3f:c3:61:
36:1e:76:36:b7:2a:a6:ba:45:b8:01:df:d2:1e:1d:e4:d3:c9:
95:7e:c9:8a:93:93:be:be:43:ad:cf:54:76:ff:a2:60:a2:05:
7a:ff:f2:a7:8d:d3:98:ee:0c:93:46:38:da:f4:17:a5:b0:01:
77:7d:3b:45:1a:1d:ed:b1:70:66:48:eb:1b:43:d9:99:95:4c:
39:a9:8a:f2:3e:58:45:28:05:13:da:cd:1d:4b:c2:c0:b0:c3:
e8:7c:a0:95:9b:fe:1c:3c:e2:99:87:89:e2:1e:86:ab:87:5c:
35:b5:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:19:12 2026 by rpki-client