Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: tnHes8aolGAdmt5KlsemgJ4Rb9KiLFUIaa6NsXKTRw0=
Subject key identifier: 95:19:88:B4:49:94:DC:F8:30:C4:89:BA:CF:92:5D:C1:C7:38:44:B8
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 01A0C858A21A481DAF5CF06FB7E22A2C98FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:46 +0000
Manifest this update: Tue 22 Sep 2026 09:00:46 +0000
Manifest next update: Wed 23 Sep 2026 09:00:46 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: iP3e6oeOrff/mU8b6z5fULak5jpQzLz9pwds/4XY8Rs=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:a2:1a:48:1d:af:5c:f0:6f:b7:e2:2a:2c:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Sep 22 09:00:46 2026 GMT
Not After : Sep 23 09:00:46 2026 GMT
Subject: CN=951988b44994dcf830c489bacf925dc1c73844b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:e7:09:fb:17:a1:ac:24:c9:6e:32:cb:d2:
ea:c6:4e:f5:90:46:15:56:16:5b:89:c7:e3:bf:7b:
e0:e7:89:18:28:2d:c9:61:cf:dd:f1:d6:00:29:8e:
2c:e8:35:35:79:15:eb:c0:73:51:01:f3:9d:e5:bb:
bf:3d:c8:83:6f:f9:54:78:13:18:d2:b4:13:d6:66:
f1:13:34:a7:7b:45:cb:c9:b5:22:06:ff:28:88:14:
33:4c:df:c4:a5:58:1b:e3:40:91:30:a8:a0:dc:0c:
42:32:b1:c2:13:dd:95:f1:a2:04:a1:a1:a9:4d:ff:
b7:eb:b7:cc:49:eb:bd:76:6a:84:92:2b:fe:42:f9:
fc:bb:17:13:27:fa:fb:1d:e9:2f:08:28:d0:2e:c3:
55:ed:a6:0b:27:67:72:3f:7d:20:1a:11:f2:ca:59:
3b:46:c3:6a:2e:72:83:2f:b6:7a:a8:d9:23:09:56:
ce:21:1c:3d:f8:47:32:40:cc:3e:a5:7e:02:5f:dc:
af:41:a5:75:de:38:64:ef:94:61:6f:6e:23:90:3a:
2d:41:f0:f6:bf:46:02:ae:b5:3f:82:04:51:62:38:
b2:0e:ee:37:8f:60:22:80:04:16:f6:37:3c:16:1c:
90:d6:e8:7d:44:72:d1:e5:1e:c6:ff:d9:2b:a4:8c:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:19:88:B4:49:94:DC:F8:30:C4:89:BA:CF:92:5D:C1:C7:38:44:B8
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:65:01:de:40:8d:b4:db:aa:6b:b2:74:93:f0:5f:dc:c9:
92:be:10:d7:a1:4c:c5:2f:59:45:3e:93:42:93:a0:01:92:2a:
8c:be:c7:44:01:99:1b:cc:26:2e:cf:f4:0f:2a:64:58:f5:e8:
69:d1:32:d0:dd:4c:48:ea:fa:0c:ff:2d:b8:d2:db:54:1a:49:
0d:0e:cd:b2:41:93:b1:ca:88:35:b6:e9:d5:27:0f:ee:fd:c1:
a3:21:4e:f5:56:7a:72:df:f0:12:22:c4:e5:24:d1:f1:aa:b3:
e5:85:0a:08:14:41:7b:43:fe:01:2f:a3:42:ff:b6:e5:11:00:
8b:2a:32:01:73:26:fc:9b:59:df:42:0e:ba:bf:49:1a:2c:70:
fb:31:6e:91:ff:07:d3:e1:8a:e9:9a:7b:b1:59:3a:da:16:ac:
20:a2:41:a4:ec:2b:b2:27:1e:bc:db:1c:91:d6:eb:42:16:06:
cb:e9:5b:c0:c5:06:21:3c:f2:4d:e2:62:4b:b1:1a:ec:61:90:
5f:e1:a1:ee:7e:5c:11:92:f6:fb:95:4e:26:d8:b6:b3:f1:60:
52:a7:61:aa:7b:ac:bf:56:33:95:e4:43:5d:d3:ae:ff:92:ea:
62:a2:86:ad:6b:7c:c2:8d:ce:0c:49:7d:c0:73:f2:28:2b:d7:
d8:2e:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:26:34 2026 by rpki-client