Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
File: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft (raw, json)
Hash identifier: 0oCG6Q3nD6XYI8Na4xjJLIhukMh5PQb8WQGOE9KbtQk=
Subject key identifier: C8:0A:E2:58:C9:6A:52:5E:76:34:62:1B:CE:D2:B0:54:14:5A:38:EC
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Certificate issuer: /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial: 01A0E8C0A2F136A160F34C7B80B865BF9DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
Manifest number: 01E8
Signing time: Mon 28 Sep 2026 16:02:13 +0000
Manifest this update: Mon 28 Sep 2026 16:02:13 +0000
Manifest next update: Tue 29 Sep 2026 16:02:13 +0000
Files and hashes: 1: J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (hash: Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=)
2: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl (hash: 3Gxxa/RET2NlQzFLnc9ynIdgRSHonUssiy2g4mprN3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:a2:f1:36:a1:60:f3:4c:7b:80:b8:65:bf:9d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Validity
Not Before: Sep 28 16:02:13 2026 GMT
Not After : Sep 29 16:02:13 2026 GMT
Subject: CN=c80ae258c96a525e7634621bced2b054145a38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:b1:22:66:6c:fd:c2:75:63:4c:8e:ff:ca:
4b:41:39:81:44:19:16:34:05:51:23:ac:c7:52:78:
b4:de:ae:b3:32:63:81:f3:a7:c4:8a:fc:fb:ba:b6:
cc:18:6f:43:5d:52:f5:e1:2c:76:d4:f4:bf:54:8c:
ff:bf:76:b6:95:4d:28:f0:ad:14:3e:2f:95:5c:1a:
71:4a:5b:44:ac:45:0b:cd:f0:3e:e9:08:24:71:c9:
e0:f3:d9:3c:24:96:33:13:0d:56:ba:87:32:35:8b:
83:77:d9:75:e0:bc:71:b4:b5:e8:17:6c:f4:37:25:
93:10:78:eb:71:be:7e:e7:dd:f5:6a:6a:98:0b:de:
2c:fa:7e:ab:f2:43:be:53:bb:b2:00:cc:17:24:54:
e9:da:15:e2:f9:4e:50:71:49:8c:0e:e3:9d:1f:70:
98:50:a2:73:e4:c8:7b:62:0a:4d:b0:8a:0d:58:fc:
14:7b:f5:11:59:84:11:aa:90:4a:bc:6c:bd:f2:e2:
fd:92:de:d4:86:06:5b:9b:75:49:db:83:82:3c:17:
c9:7c:cd:3a:57:ca:2a:c0:bb:06:d2:48:db:2b:d9:
47:e9:45:6e:05:7d:8c:db:02:b2:00:73:ef:e8:78:
5a:e2:90:02:64:03:7f:9a:64:ec:f3:52:8d:5f:7c:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:E2:58:C9:6A:52:5E:76:34:62:1B:CE:D2:B0:54:14:5A:38:EC
X509v3 Authority Key Identifier:
keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:17:30:30:27:38:28:b0:25:e6:0f:27:11:ca:b2:dc:27:eb:
eb:d3:88:88:d6:b0:37:c1:51:03:79:82:7b:a9:4e:fd:8b:09:
6f:cc:8f:4a:72:cd:aa:72:50:67:ba:f2:bf:55:3a:f4:37:bd:
dd:9a:fe:76:3d:d8:e3:66:ca:61:64:75:50:6c:8c:d0:8e:10:
7a:df:01:94:87:ad:07:ef:5e:ab:70:b8:60:4e:25:17:5b:63:
3c:28:9e:43:11:d1:ea:24:5a:e5:df:47:50:54:da:d9:34:79:
60:14:93:39:ff:1b:0d:fa:7f:75:6c:1a:b5:28:9b:f8:ca:8e:
12:c1:05:50:15:e1:17:3b:0b:6e:3a:da:2c:d6:36:fe:a2:e2:
8e:db:94:01:77:9c:9d:a4:20:1e:93:76:42:a1:aa:37:d3:a7:
bc:d0:c6:6a:19:9f:34:fe:da:8d:9c:fe:80:be:dd:5a:28:7e:
fa:ab:be:23:2b:70:e1:91:d2:a6:e3:71:51:d7:87:7c:63:17:
01:91:da:14:d4:ad:5c:57:8f:e8:ad:99:e0:10:71:a0:27:07:
a9:ca:35:73:af:61:45:5a:53:b1:ae:b3:d6:21:99:cb:cc:47:
18:b7:7f:42:3e:02:af:17:63:29:60:73:0d:94:e4:e7:a4:44:
67:bf:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:53:36 2026 by rpki-client