Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: RKxo6gsBWk6673Amsu5HxMdWJxTxxcXTyV//Dyy76tU=
Subject key identifier: 5E:69:F8:89:FB:3D:82:B5:7E:5F:76:D2:37:EC:F6:D5:E5:00:A1:5A
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01A0C77D083382C62B74E23E4D017BB6B378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 114D
Signing time: Tue 22 Sep 2026 05:00:55 +0000
Manifest this update: Tue 22 Sep 2026 05:00:55 +0000
Manifest next update: Wed 23 Sep 2026 05:00:55 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: K3aFn5KlqJb6RvYKXxfW/JxH/c7gSKbAAUEMtszWER8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:08:33:82:c6:2b:74:e2:3e:4d:01:7b:b6:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Sep 22 05:00:55 2026 GMT
Not After : Sep 23 05:00:55 2026 GMT
Subject: CN=5e69f889fb3d82b57e5f76d237ecf6d5e500a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ad:a2:cc:33:bb:2c:86:97:0f:35:47:76:
63:ee:10:0f:f3:04:a0:60:5d:4e:3d:98:a0:f8:a4:
ca:81:a7:a7:90:98:8d:ab:e7:32:c5:85:65:a5:47:
65:16:4f:ff:fb:a7:c5:3f:9f:5f:7c:6f:24:2c:01:
46:18:67:0c:d9:d6:69:63:f9:64:4b:cb:79:ee:07:
5c:a2:1a:c9:6a:b9:fc:b8:c6:96:c6:17:73:54:a8:
63:d9:2e:fc:58:23:d9:74:50:00:82:83:33:e4:46:
e5:ec:0b:8b:2e:67:92:9b:0e:2c:77:eb:e5:55:0f:
74:ba:59:bc:7c:d9:41:7c:b9:a3:ce:1b:be:9b:8f:
80:66:ba:39:e0:1a:6c:5e:9a:62:35:c9:25:47:13:
93:42:f2:70:10:6b:d4:b0:c5:e3:e5:07:e7:24:d9:
16:a8:93:4b:fe:e8:cb:db:dc:3b:d0:5e:e6:0a:96:
6b:4f:71:1f:19:26:ed:b3:fa:99:22:74:3a:b4:cc:
a9:56:e0:18:05:b0:d7:10:13:b3:76:d0:2d:8e:ec:
7b:6f:77:1a:b5:80:cd:75:8b:c6:0e:e4:b6:a0:fd:
68:e2:b3:41:19:3b:7e:6f:fe:12:4d:f9:fb:01:b3:
83:7a:a2:53:d9:fe:7c:ba:ec:50:5c:ba:58:1d:4b:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:F8:89:FB:3D:82:B5:7E:5F:76:D2:37:EC:F6:D5:E5:00:A1:5A
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f6:10:ea:fd:e3:37:8c:fc:39:e8:b3:a0:b0:32:0d:a9:e7:
7f:c8:21:8d:01:cb:cd:01:b1:03:67:61:72:29:87:04:24:5b:
86:78:d4:4b:d5:a1:e0:ee:4c:88:f0:2c:78:98:ce:f7:c7:64:
7e:42:1b:3f:81:5a:74:a8:96:e8:c4:36:39:9a:cb:c9:32:c5:
58:1b:ff:7c:3d:d7:1b:6b:3d:05:7a:bc:50:2b:96:3d:f1:83:
e8:05:f1:ff:4f:53:3f:bb:38:33:03:06:77:ca:e5:42:15:e5:
85:de:b8:16:9f:60:0c:d3:4e:8f:b3:d5:62:ce:59:96:49:20:
19:2f:17:97:26:b1:ba:b9:70:46:10:06:55:b5:fd:31:43:52:
23:8b:cd:1f:68:ce:15:a2:b6:5d:06:ea:c4:78:24:36:4e:15:
59:f0:12:16:d4:c5:2a:d0:de:ca:0d:82:e3:88:fd:7f:4a:c4:
82:49:0f:5f:a9:b5:bf:ae:b6:e2:1c:0a:53:b9:d9:ee:cf:69:
6d:78:52:51:0b:37:ec:19:ef:cb:59:32:26:29:19:08:8e:4b:
b1:80:a6:11:07:d1:13:e3:de:75:18:fc:31:66:51:8e:d9:c0:
49:03:5a:5a:20:6b:f4:6d:9e:f1:ed:89:d8:8b:c0:ed:60:73:
e3:23:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:11 2026 by rpki-client