
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File: cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier: Xjr0JtoGSaTHuoGPpySwnUeRa+MlVX4AVZSxJvWy4Uw=
Subject key identifier: 04:0A:A5:A0:EC:4A:62:F8:C6:8B:99:EB:BE:14:08:55:AC:2E:C5:B2
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01A151E3B809F7331BDEB0129AB43F2B37F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number: 1AAE
Signing time: Mon 19 Oct 2026 02:00:40 +0000
Manifest this update: Mon 19 Oct 2026 02:00:40 +0000
Manifest next update: Tue 20 Oct 2026 02:00:40 +0000
Files and hashes: 1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: IekiB04rdIRtW92vIh7XCUW6Boiuf4P8BsMqLLoyIFk=)
4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:b8:09:f7:33:1b:de:b0:12:9a:b4:3f:2b:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Oct 19 02:00:40 2026 GMT
Not After : Oct 20 02:00:40 2026 GMT
Subject: CN=040aa5a0ec4a62f8c68b99ebbe140855ac2ec5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:0a:11:26:8b:ab:63:66:ea:3e:b8:a5:28:
3d:a7:0c:ed:65:bb:fe:3c:70:85:73:e6:df:2a:63:
90:94:48:b1:d0:cf:bb:21:0c:cb:9e:71:29:51:5f:
b2:2c:73:f4:a6:30:d2:14:f2:15:f9:e3:a0:58:9d:
bd:f4:73:d0:bd:04:d1:38:81:87:c9:75:b5:5f:16:
51:b5:70:69:e1:be:82:8a:13:3d:2f:49:6a:65:60:
b2:b5:e3:14:02:2f:1d:ab:17:57:36:b3:a0:dc:6a:
c1:16:70:5c:c6:c0:34:05:8b:75:4c:0f:6b:19:b3:
02:8c:f9:fe:46:19:56:6c:36:dd:50:d7:bd:8e:01:
b6:11:76:dc:cc:5b:bf:1c:78:07:0f:d4:c6:7f:01:
82:f5:c8:6b:8f:5d:03:4c:c0:72:15:a2:b2:bb:5f:
0c:86:1e:b9:86:06:59:e4:ed:28:4b:14:bb:fa:3e:
ed:9e:32:94:62:e8:ff:31:88:d8:a7:5a:91:bf:68:
7b:ab:00:fd:54:a6:ed:43:68:68:32:90:29:d7:74:
0e:b1:20:c2:a6:01:2c:85:51:24:8c:67:6d:fa:20:
96:de:55:88:04:9e:1f:c3:ce:c4:5b:6a:55:22:0c:
9d:05:09:79:29:a0:be:39:58:2e:32:25:15:8d:0d:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:A5:A0:EC:4A:62:F8:C6:8B:99:EB:BE:14:08:55:AC:2E:C5:B2
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:b0:18:fb:62:2d:f2:c2:25:3d:f4:87:91:45:87:d1:d3:
b5:98:a7:62:a8:29:b3:01:7a:9f:c2:73:2b:63:13:93:d7:9c:
bd:f6:3c:49:1c:6f:0f:28:e2:67:f7:4d:2f:af:f8:11:29:33:
6e:aa:b3:f2:f5:db:0a:4e:8e:81:7b:af:fc:a1:97:4f:a9:94:
14:88:f6:85:5d:54:06:4a:c0:1e:d8:3f:b9:00:62:7f:99:86:
38:df:4e:d8:17:2c:be:d8:4e:ce:f3:a1:67:31:f6:9b:b8:c1:
d1:d7:09:b5:30:8c:40:e9:d2:ff:29:5c:47:95:23:ac:00:10:
41:8c:bc:bc:26:5f:b8:21:f6:ee:2c:36:0d:94:62:91:2d:32:
4a:e3:64:52:35:fc:eb:a8:4d:1d:b1:eb:8f:6b:23:30:1b:05:
3b:f2:65:cb:f9:60:42:b8:39:1e:17:e2:e3:c5:ee:af:c6:46:
31:1a:d5:1b:57:39:51:bf:cb:8a:6c:5f:b6:f4:3a:e8:b5:05:
7c:4b:6d:98:9d:eb:e5:5b:a1:dc:ad:18:c0:51:a9:16:d9:d8:
a0:3a:f1:77:55:11:2b:45:e8:98:26:bf:f0:a1:52:2f:17:36:
5f:5b:51:dd:6b:e7:54:8c:b6:50:17:b6:a0:ce:89:66:48:9d:
b8:e1:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:33:17 2026 by rpki-client