Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: A4de6ehIgQFbRtfT7vQ2k5dO39m+bX7e3r5GiKV6X80=
Subject key identifier: 91:D0:41:A9:DF:FC:79:B6:34:88:79:D9:83:D0:F1:71:8C:1C:A2:EC
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01A0C55813AC3A9D195DDDE9746904B72F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 19:01:18 +0000
Manifest this update: Mon 21 Sep 2026 19:01:18 +0000
Manifest next update: Tue 22 Sep 2026 19:01:18 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: NrSKXRvxcPjGwxuzmzioYc6LISntDPJNzCer7QblcBk=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:58:13:ac:3a:9d:19:5d:dd:e9:74:69:04:b7:2f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Sep 21 19:01:18 2026 GMT
Not After : Sep 22 19:01:18 2026 GMT
Subject: CN=91d041a9dffc79b6348879d983d0f1718c1ca2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:70:c1:31:53:68:60:14:64:46:50:fe:58:
aa:28:35:93:6e:8d:30:2f:64:97:2a:59:ee:81:23:
70:78:50:06:e5:0e:be:05:2f:53:02:a5:aa:3d:48:
1c:32:64:51:1e:b7:b6:4e:d2:7d:87:1b:be:ad:ee:
55:56:24:88:6b:a3:71:11:a3:3b:ba:67:7a:00:86:
dc:81:96:e4:83:9d:72:c5:bc:86:e7:e6:e6:a5:3a:
47:43:56:fe:30:ee:e5:04:80:0b:c2:96:ba:6f:79:
42:17:53:ff:74:af:27:35:57:1f:6d:ce:25:05:93:
2d:e3:3b:6a:86:21:53:72:45:5f:eb:8f:0b:31:f6:
ee:d8:77:0e:69:10:40:00:31:ad:64:ff:01:ff:b8:
af:71:21:19:d7:36:6d:27:e0:e8:2e:bf:b7:67:96:
a7:e6:5d:73:c2:10:5d:23:cd:39:e7:55:52:9f:5c:
67:42:13:5e:a6:50:d9:71:96:57:bc:67:6e:fa:29:
b8:25:e5:30:b7:8c:4d:5a:df:63:e6:22:26:70:b7:
ec:d7:c3:8c:b3:7b:03:74:6e:24:28:c3:79:f1:ef:
9b:3c:be:a1:1f:d8:85:51:88:bf:96:6f:89:d6:3f:
7d:27:47:db:7d:b1:0d:ed:48:f5:99:fe:7a:33:19:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:41:A9:DF:FC:79:B6:34:88:79:D9:83:D0:F1:71:8C:1C:A2:EC
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:77:9e:b8:b0:1f:fb:08:b9:da:80:47:a0:c7:6f:e1:9e:4b:
36:fb:f7:25:d8:65:a8:d2:6d:53:14:45:3a:a8:f6:61:70:65:
ba:56:fe:b2:79:cc:da:33:e9:db:53:46:b8:4e:b5:d2:ba:bc:
b2:40:70:54:a2:6e:77:fa:db:25:63:d7:96:5e:99:ac:1b:77:
05:24:e9:a3:61:d9:64:46:ee:fd:4c:78:f7:3b:fa:d5:bd:73:
27:29:08:99:19:3f:8d:40:c4:59:73:39:cd:d7:1c:41:1d:84:
bd:9e:7c:7d:d8:59:cf:62:d2:b7:c3:d5:8b:87:b5:b2:14:e2:
6b:c3:5e:2f:be:10:f0:ec:34:a0:6b:3c:23:14:86:92:98:b3:
2f:47:f0:51:11:97:73:07:ad:e1:70:7d:7a:72:cf:a6:0c:b4:
9a:e5:f7:47:6b:e2:88:1c:61:db:bf:c4:03:3e:bd:48:22:fd:
1f:81:42:92:01:b8:20:5a:0c:6a:bd:08:9d:94:ff:c0:33:c0:
fd:b6:8f:30:f9:5a:a0:ad:0d:92:59:2f:68:56:82:4f:4f:78:
ee:b6:2d:72:5b:8f:58:f9:a6:76:07:76:9a:98:e8:5b:9a:c0:
03:14:4d:27:14:e0:4a:98:37:75:d5:c7:e0:bc:a5:af:3c:a8:
41:d9:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:32 2026 by rpki-client