Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: 3SBD/UxPg9b1DGfM4kL/lGzoCDJPNWqQSM4Y3CPXkoU=
Subject key identifier: 94:4F:A3:77:B8:26:10:95:6C:BD:99:C8:10:32:BD:EE:94:07:20:D8
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01A0C17A818C0B3970627B28401CCF6B4AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 01:00:26 +0000
Manifest this update: Mon 21 Sep 2026 01:00:26 +0000
Manifest next update: Tue 22 Sep 2026 01:00:26 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: EQT2R6X1A8uKbyOEYGAp1UtUVZ/b/5Vv24vaD8lcJSA=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:81:8c:0b:39:70:62:7b:28:40:1c:cf:6b:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Sep 21 01:00:26 2026 GMT
Not After : Sep 22 01:00:26 2026 GMT
Subject: CN=944fa377b82610956cbd99c81032bdee940720d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:4b:d8:69:fb:74:5f:c3:13:90:07:39:fb:
80:17:ff:e1:ca:0b:cc:e6:2a:66:9a:3a:e7:49:6c:
c9:87:a5:a1:8a:7d:75:2f:e6:e4:47:0f:57:3f:56:
ee:24:ae:03:c7:3b:0a:5d:8b:7f:e9:0e:f1:56:c9:
69:11:04:fa:3f:d7:87:4e:8b:45:ea:93:9e:fd:78:
61:d1:4d:3f:04:01:6e:85:fa:46:06:e6:32:c7:fc:
75:36:7d:58:ea:3a:9c:7f:15:fd:40:bc:52:db:af:
4a:a1:22:92:5b:a2:14:d1:4a:4f:9b:29:67:60:0f:
4d:39:64:2e:de:d5:31:72:07:0b:02:d9:24:5d:aa:
4e:26:04:b4:96:12:70:a6:07:05:c1:94:da:a1:bb:
32:8d:dd:d1:64:5c:d4:da:ad:87:de:85:93:96:5e:
e4:fc:cf:e7:d9:ad:2a:cc:23:27:cd:e9:c4:d2:1d:
c6:d8:77:b8:4c:e7:e6:84:68:a8:68:9b:13:cc:8a:
19:ef:ec:92:df:e2:b7:59:48:a6:12:a0:fa:15:4c:
8c:c4:4b:0e:c6:87:5c:90:a1:27:ec:01:bf:d1:d2:
c0:50:91:32:34:b8:bd:99:c0:86:a7:f7:45:bd:fb:
e1:21:72:e4:ff:95:90:8f:e0:c9:f0:03:6e:4b:2d:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:A3:77:B8:26:10:95:6C:BD:99:C8:10:32:BD:EE:94:07:20:D8
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6f:a6:f4:44:9a:34:dc:88:fd:21:ae:ee:a1:7c:c2:df:93:
bf:fb:13:95:45:25:a3:68:24:9d:f1:fa:9b:16:85:4a:28:51:
eb:a2:d6:f9:2b:22:01:c7:aa:18:d1:0f:46:f8:fb:75:0e:a4:
c5:d5:36:14:df:22:a3:12:d2:55:31:06:72:ca:06:67:fd:63:
6b:e4:90:1f:57:25:0d:a4:1e:4b:a7:0a:f4:a8:31:90:90:67:
e9:ea:6f:0c:e2:3e:e7:f1:18:f0:3c:f3:b9:50:80:19:7a:f5:
b6:a0:2a:28:a6:0e:6f:c9:e4:3c:f7:52:84:07:09:a2:f6:63:
fe:31:13:84:a0:75:5b:bf:1b:62:86:f4:28:d5:76:1f:8c:1d:
8e:17:0d:fd:43:85:8d:14:d9:ef:b6:44:24:41:1e:1c:3f:e1:
e0:42:22:64:f1:37:44:a7:be:85:7e:f8:6a:a9:cd:c5:5c:c1:
fc:41:73:a4:5d:a6:d1:bd:1b:d2:df:c2:5e:25:a2:9c:a1:f7:
b9:14:f0:be:6f:3a:68:7b:c5:29:db:42:e9:a3:cd:95:a9:30:
5d:85:81:40:cc:82:77:9f:ba:ec:6a:b6:fa:71:ab:1d:ce:88:
80:38:5d:31:cb:f5:5c:68:04:f2:6c:84:f1:ac:b7:a5:1f:78:
1c:c9:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:59:45 2026 by rpki-client