Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: pUjNimWjbzjpQbH5f549zVwsnPtXGCWG3ywdqUWOcKI=
Subject key identifier: 5C:DD:6E:FE:81:AB:24:59:45:AF:CA:ED:E7:F3:9F:0B:74:61:3B:F7
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 01A0CA46A8282364F585CEF700D21691BE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 18:00:23 +0000
Manifest this update: Tue 22 Sep 2026 18:00:23 +0000
Manifest next update: Wed 23 Sep 2026 18:00:23 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: ohFNmH5zJ+0jIcKI3mcJLIaxoKR8ogY/x5czOdsdI9c=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:a8:28:23:64:f5:85:ce:f7:00:d2:16:91:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Sep 22 18:00:23 2026 GMT
Not After : Sep 23 18:00:23 2026 GMT
Subject: CN=5cdd6efe81ab245945afcaede7f39f0b74613bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:17:44:e1:47:14:d6:b9:b0:a4:fc:03:74:
5a:f6:22:f7:fa:36:74:21:5e:75:e6:49:59:07:57:
f6:16:18:3f:89:1b:78:91:59:fb:2e:e8:bd:e3:6f:
fb:80:23:bc:32:0f:77:19:95:8a:58:9d:e0:8e:cb:
ff:99:3b:a1:8f:1a:fd:be:33:d3:2d:d4:b9:c2:76:
e2:00:d2:61:cc:c4:a4:69:5b:6b:b9:ef:bb:f7:12:
d6:48:9e:23:1f:e9:63:a0:0d:17:96:2c:d1:23:7e:
49:68:8e:a6:e6:b7:8c:c3:c6:ab:32:e9:fc:86:d7:
0f:a4:c2:4e:9d:c4:e5:71:fa:02:eb:a0:11:9c:15:
c9:cd:3b:02:7d:3e:34:50:d9:a4:62:c4:a0:3c:00:
0a:20:12:5d:06:ed:7e:09:c4:fb:ef:50:6d:24:77:
8e:3f:6a:c5:5d:ad:da:4f:bb:fc:c6:45:b2:24:fa:
c5:7a:4e:8f:fb:f9:c3:3b:d6:ee:c3:2b:bb:83:02:
99:92:db:75:c9:5a:34:19:f5:9d:65:28:eb:38:de:
34:84:9d:db:fa:c3:e9:3e:92:58:06:a2:9e:ae:34:
8f:8e:21:3d:3d:89:62:b9:39:b2:74:f7:96:47:f0:
3c:03:c2:58:7b:bd:b1:24:38:ee:8f:2f:2a:bb:b1:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:6E:FE:81:AB:24:59:45:AF:CA:ED:E7:F3:9F:0B:74:61:3B:F7
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:cd:df:2e:b2:c2:da:13:1f:e2:54:20:63:10:1c:1f:64:
ab:2c:c6:6f:30:b5:2b:91:14:39:44:cd:b5:9e:95:74:9a:bc:
a1:61:c5:01:59:fc:50:bc:ef:36:27:25:8e:2d:e7:8f:71:51:
ce:e4:b5:63:1c:b9:02:2a:32:a3:6b:2e:03:c6:16:c5:fa:71:
94:1b:b7:66:52:66:1a:81:d0:75:de:c1:4e:0d:5a:02:22:51:
85:dd:23:93:c0:a4:8d:d7:24:25:9e:c2:2e:77:1d:5c:b0:f4:
85:fe:0e:13:9a:e5:83:62:69:8b:c5:65:6e:cc:f1:ad:bc:de:
03:33:53:19:62:b3:d2:f5:3e:9f:53:ab:cd:19:38:72:1c:e9:
0c:20:5b:3c:eb:b4:50:c1:34:d7:48:8b:dc:2c:06:25:51:cf:
74:81:4e:f5:f4:ee:9c:01:dd:19:51:db:40:a2:9a:6a:64:e5:
c3:5e:33:ac:b7:89:ff:2b:f9:f5:36:6f:df:a1:b8:b3:a4:61:
cf:3b:7b:f2:1d:b7:bf:d5:7a:37:c9:af:73:56:e3:f0:47:1c:
27:a2:70:fe:b1:cb:50:84:32:db:c0:78:3c:39:3b:b4:e9:17:
08:48:55:bb:08:bd:cb:66:4a:bf:7d:6f:af:cf:c9:5f:06:54:
ec:db:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:39:51 2026 by rpki-client