Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: 43C0MuA5y16GvYGBHS9zG1WkLhEPcMRhCS4BnJPuZlw=
Subject key identifier: 25:3C:C4:8D:B5:E5:53:DE:5E:81:45:6C:DF:40:1A:ED:CF:5D:B3:50
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 01A0BEB16B040F2E3CE3CB7F4F486D38897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:33 +0000
Manifest this update: Sun 20 Sep 2026 12:01:33 +0000
Manifest next update: Mon 21 Sep 2026 12:01:33 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: dZRAn+tsmzovLP/CYk0SPdXRoRclN6n5S9q9Zk2nPjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:6b:04:0f:2e:3c:e3:cb:7f:4f:48:6d:38:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Sep 20 12:01:33 2026 GMT
Not After : Sep 21 12:01:33 2026 GMT
Subject: CN=253cc48db5e553de5e81456cdf401aedcf5db350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:b6:16:f4:1c:0e:e7:34:34:21:84:03:41:
2d:65:5c:1b:a0:a1:63:ec:57:5f:d8:88:2a:d8:a0:
91:37:be:33:2a:0e:3e:75:02:1c:84:67:b0:5a:a6:
78:d5:0d:85:20:2e:cf:cc:25:f6:bb:a3:73:c6:9d:
ab:43:f4:fe:4f:ed:58:42:1e:18:5d:d3:f8:31:e8:
40:2d:10:43:82:42:b9:aa:96:ba:d4:8a:a4:60:4b:
a5:5e:02:b9:60:58:3f:8b:f4:12:bf:1b:ac:8f:f1:
5f:b9:0e:42:37:50:8a:32:c2:2e:d6:a0:ff:2e:5d:
71:47:54:62:4c:d7:4a:56:31:55:24:d2:30:de:89:
76:bb:2a:4f:74:b7:da:a9:a4:bd:f6:60:35:29:1d:
93:ab:12:49:24:96:3d:4e:7e:2a:3c:82:11:45:cc:
46:d4:b3:a7:03:e2:77:0b:f6:2e:43:da:66:56:54:
41:5c:31:5c:5d:33:92:04:d5:72:17:3c:0f:ad:c3:
fb:a5:c5:7c:71:c4:9c:32:ac:ef:bb:b6:e8:1b:00:
b5:96:96:db:a8:86:28:df:8c:d5:e0:66:a9:aa:69:
e7:4a:33:1c:4c:0b:e3:21:dd:6d:02:bb:33:bd:d1:
a6:9f:06:00:9c:53:b5:1c:fd:bd:7f:6f:40:31:2e:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:C4:8D:B5:E5:53:DE:5E:81:45:6C:DF:40:1A:ED:CF:5D:B3:50
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:3a:86:f7:7a:3f:fa:f8:25:e7:1f:b2:26:71:cd:62:07:
1e:a1:8d:33:d8:2b:cd:c0:33:63:3b:35:7b:50:d4:10:0f:13:
2a:8d:e6:2f:f3:99:b2:76:cd:74:46:90:33:ca:65:21:c1:20:
62:c2:ea:6c:1f:f9:d9:8a:27:0b:e4:66:c8:69:26:f3:f8:c8:
d9:ac:1f:4c:0e:62:7c:9b:0d:27:42:9e:b0:d7:a2:cb:22:8e:
31:23:30:89:8d:b8:4a:f3:26:3a:63:0f:70:54:09:c3:0f:2a:
85:66:e1:77:e4:e3:08:1b:da:9c:08:41:3d:1b:44:34:af:7d:
ff:b2:28:0d:4c:10:1e:ae:72:be:e0:68:73:52:07:1a:fb:43:
c5:2e:38:98:b4:75:c6:5c:70:5e:05:5f:b0:fa:ee:90:ec:6b:
21:15:ab:d5:2e:06:10:1b:ae:ec:18:30:40:3c:fd:a3:ea:10:
ee:af:65:bf:e9:8d:e6:68:b9:04:47:f8:1e:9f:c1:6d:af:70:
59:a4:0a:4b:45:a9:c2:a3:53:49:d8:0f:3a:1c:f8:4a:52:9c:
77:ed:54:fd:29:dd:e5:3b:b4:3e:0f:1b:b5:ad:f6:11:93:ec:
2f:22:36:1e:de:47:c4:45:af:13:22:60:26:22:f5:42:eb:c3:
5e:92:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:45:41 2026 by rpki-client