Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: DOm8MI6i170DAi6RuHxygxcuNPBWTdBmTrkr4rGOmuI=
Subject key identifier: D5:E6:6C:CA:AA:33:B5:24:DA:CB:95:49:CC:6A:90:8E:DA:C3:B7:EA
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 01A1803DF7CCABE766C6C9C914124C1B4C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 13F2
Signing time: Wed 28 Oct 2026 02:01:47 +0000
Manifest this update: Wed 28 Oct 2026 02:01:47 +0000
Manifest next update: Thu 29 Oct 2026 02:01:47 +0000
Files and hashes: 1: RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa (hash: BE+VwtKl7zKClVOQGTL8tdfzuTZ8z6XoZx7cFV+84EA=)
2: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: QyttAWDJjAH2hlbtEs2/zSZdQMuxJyPjGAr/1P9/wJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:f7:cc:ab:e7:66:c6:c9:c9:14:12:4c:1b:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Oct 28 02:01:47 2026 GMT
Not After : Oct 29 02:01:47 2026 GMT
Subject: CN=d5e66ccaaa33b524dacb9549cc6a908edac3b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:aa:fe:6d:37:59:10:18:52:71:4a:0a:65:
34:f8:c7:e3:ce:e5:ab:5c:32:81:83:0e:3b:dc:cc:
d8:72:f7:27:45:e8:17:2e:7b:12:44:10:58:19:ad:
a7:2d:ef:dd:ee:48:72:a6:69:ba:40:2c:87:ea:34:
21:c1:8b:1b:bb:a5:8b:37:e4:7f:f5:84:df:d7:37:
ab:7e:06:66:33:2b:b2:f1:5a:c9:c8:ef:25:c3:58:
be:4c:8c:3f:03:38:7f:ca:16:78:8e:ad:11:69:da:
a0:09:98:b8:5f:4e:51:60:de:a9:de:58:cc:50:3c:
5f:51:04:40:13:08:9d:c5:37:73:26:04:0a:ae:7d:
79:b6:cb:1a:76:69:e2:7c:81:5b:49:ce:9a:41:92:
66:3c:72:65:95:8d:18:c7:ba:54:28:b0:bb:8e:c9:
a3:0e:60:80:e8:60:d0:48:d0:4f:ab:29:0f:c8:b6:
cf:6f:16:d7:e8:db:bc:c6:3d:6c:ce:a9:bc:db:40:
bc:6e:fb:c2:72:70:3c:6e:ee:77:18:21:0a:b6:79:
27:b6:82:15:21:b9:2d:fd:eb:c3:82:2e:0d:8f:02:
d2:45:5c:d5:e6:17:2c:69:95:14:b5:79:5b:ae:91:
a6:d3:d8:09:46:1f:71:91:92:ca:85:b1:79:ef:ed:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:6C:CA:AA:33:B5:24:DA:CB:95:49:CC:6A:90:8E:DA:C3:B7:EA
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:fd:4c:74:56:6f:fc:ea:3e:a4:b4:59:71:4f:46:76:d2:
b5:6e:f3:85:06:b3:16:d0:c9:50:35:b8:2f:b8:e2:38:fe:1b:
eb:f4:e0:f7:e9:59:55:26:42:02:19:b4:fc:7b:b9:00:29:6a:
d4:bc:b3:95:38:7f:40:59:cc:15:91:d8:1b:4c:0b:0f:b2:ea:
c8:7d:47:db:1b:f0:ba:6b:fb:bf:ab:49:73:dc:5f:1c:a2:1f:
c7:59:1d:19:4a:98:e5:ec:6c:f6:73:b9:55:1a:fa:ae:a6:c5:
89:1e:1f:ff:a5:8c:13:b1:16:5f:e1:c4:68:4a:14:1b:63:71:
cc:b5:e4:9e:6f:5c:c0:08:85:73:83:4a:d4:65:c1:c1:09:75:
96:a1:4c:cd:4b:77:38:a5:6c:e0:bf:a4:14:3f:35:29:ac:a9:
34:60:e3:c4:c4:bc:aa:0f:14:97:63:87:f1:db:2b:ac:b1:09:
70:58:f9:96:a1:86:42:78:43:26:3c:b5:bb:64:73:02:8e:a8:
f5:c4:bb:4c:d0:32:3b:d2:ec:1c:69:22:76:98:d1:08:93:6c:
80:c4:cd:5e:70:fc:d4:9f:d3:4e:6c:71:c8:57:93:3c:4e:fa:
64:6f:25:c9:6a:86:b4:0c:cc:47:56:19:ad:e8:ab:37:22:6f:
43:78:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:53 2026 by rpki-client