Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: O96Mn+vQWqRJDZnhudUWX/Mrbb77o0qjx+6lUgTcELo=
Subject key identifier: BE:D9:CD:09:A2:F2:8D:09:9F:EC:43:B7:42:E8:F5:89:AB:EB:BB:B8
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01A0C96B385E98F1BF1A2366FE3D01B336F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 114E
Signing time: Tue 22 Sep 2026 14:00:42 +0000
Manifest this update: Tue 22 Sep 2026 14:00:42 +0000
Manifest next update: Wed 23 Sep 2026 14:00:42 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: srRlMErtbjuh3tercOGKU1VjtE773eIHnXiM8ShlzrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:38:5e:98:f1:bf:1a:23:66:fe:3d:01:b3:36:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Sep 22 14:00:42 2026 GMT
Not After : Sep 23 14:00:42 2026 GMT
Subject: CN=bed9cd09a2f28d099fec43b742e8f589abebbbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:03:a0:cb:aa:ae:39:3e:42:b5:6f:5d:01:
21:39:18:d9:ea:32:e0:60:0a:65:98:3c:f4:fa:50:
db:f4:5e:b9:8d:61:79:3a:85:3e:cb:06:e7:f3:57:
d9:bc:f8:d6:6a:54:11:37:b8:72:83:e6:b0:25:c1:
2f:79:f2:62:09:2a:db:2e:ed:72:28:a1:3d:52:f7:
4d:d5:77:e9:8d:44:2e:e2:ea:c2:e1:c8:c3:cb:2e:
ac:6b:14:44:b1:dc:15:e1:3a:b8:18:9a:fb:da:fe:
ff:19:99:c2:5c:76:9f:7d:47:f9:95:56:4e:cf:3e:
73:5c:31:0a:f7:cb:2c:c7:a7:1b:72:c4:fd:86:cc:
5c:2b:f4:bc:fc:d9:29:0f:18:ec:1f:5b:fd:cb:eb:
ea:e5:bf:b2:3e:ad:2f:11:11:69:ba:0c:2a:45:25:
e9:78:29:c5:26:12:4d:c6:f1:d9:35:b6:f4:86:0d:
3d:3e:22:98:4c:89:02:6c:85:36:15:82:c3:72:64:
e8:45:0f:f4:a4:99:97:d2:d4:87:65:33:e8:d0:a7:
8c:e8:09:f3:9c:8b:5c:08:f9:8e:4c:17:b5:5f:03:
80:5b:ea:f4:54:bb:a0:ba:a0:26:38:33:0b:0f:fd:
ac:d6:e9:a9:4a:d2:f6:a9:04:5e:a5:ef:ae:e2:20:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:CD:09:A2:F2:8D:09:9F:EC:43:B7:42:E8:F5:89:AB:EB:BB:B8
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:9b:9c:3b:d7:0d:3e:6a:3a:18:2b:70:49:c7:ad:fe:72:
fc:0b:17:b6:b4:d4:d0:18:54:5a:b3:74:03:6d:e2:82:2b:5f:
82:d6:21:6d:8b:d0:b2:d6:1e:4a:86:3c:2a:c9:6d:5f:1d:ae:
0a:02:d8:58:10:ed:17:3c:56:9b:57:1a:09:83:31:71:7c:48:
b9:55:69:80:6d:d2:8c:08:0f:58:70:c4:06:48:42:fd:4c:6b:
8f:9e:df:66:df:95:c4:a4:6b:7e:b4:26:6f:1f:9f:a6:db:71:
c2:87:ed:72:0b:b3:09:18:cf:ca:87:e5:ac:47:a9:6c:d3:a6:
2f:d2:b1:1e:c4:9b:6c:cf:e5:9b:fb:5d:94:cc:df:11:99:a2:
b0:e1:73:fe:ee:72:07:ab:02:89:69:46:88:83:71:66:e4:38:
d9:7b:e2:40:0e:ab:f6:7f:fb:69:98:b8:09:54:3e:fc:e6:f9:
f4:07:19:14:2c:8e:0a:a6:8b:57:0d:01:aa:e3:ae:77:22:3b:
46:38:af:a2:94:3c:fc:c1:70:15:e4:43:34:e3:ca:98:8f:dc:
8e:76:e3:6a:e4:6e:ed:f9:4c:c0:3b:71:8d:19:70:b7:d9:55:
fd:16:dd:75:cc:07:2e:d1:8f:12:fe:a1:40:6d:be:4a:38:a7:
b4:2c:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:29 2026 by rpki-client