Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: vGP49Fn0nbr4muNltDwfvmD5j7hYgenIiGTYjkDE50A=
Subject key identifier: 28:05:48:51:E0:32:8F:99:55:CF:A3:1D:CC:C6:8A:05:EA:20:F3:6E
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019FD15EA207B5A75EAC47E26DCFA48C52E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 0B28
Signing time: Wed 05 Aug 2026 10:01:07 +0000
Manifest this update: Wed 05 Aug 2026 10:01:07 +0000
Manifest next update: Thu 06 Aug 2026 10:01:07 +0000
Files and hashes: 1: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (hash: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=)
2: Jl_sYXdLZY6LvwTOjI4Ivkon2zc.roa (hash: UfbfdfYRRXhEErXk2SVvIxQQ/2IYnFtsKwlFklKvl10=)
3: XRNvoKreqEdZEhJbOno-5BqPGEE.roa (hash: z4A5c3Ug9WBluQD4ssGRXcELVIDjB7HhErsV07uP9GQ=)
4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: t1QFG5xHEggeLAJuWhzQw1Y9MF/Jo9sgWEhVWB5Js+Q=)
5: cMhJe9vMQdQscfbNYoY-RkxcY2s.roa (hash: 93wi+LrRWDjLqjvMhMNKSnr4mEg4br0bsv0cTgfuNiY=)
6: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
7: p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa (hash: tChmnA2OZ6ar9x3H+45dejO4Gb9P462WbOfjtPU/W8w=)
8: r_ZJyy1H5Ytar0NlqRrjDEm17lM.roa (hash: +sYf7FlHcDL4+/H52w762XwNy7Z8plqNAAGvu5Wp3Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:5e:a2:07:b5:a7:5e:ac:47:e2:6d:cf:a4:8c:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Aug 5 10:01:07 2026 GMT
Not After : Aug 6 10:01:07 2026 GMT
Subject: CN=28054851e0328f9955cfa31dccc68a05ea20f36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:24:cb:62:1e:2e:a6:16:81:ac:fe:fa:e9:
45:a1:6e:d0:5b:fc:5a:d0:10:c1:a2:7c:80:1c:35:
9b:bb:7d:58:cd:57:04:d4:76:35:26:31:7b:9c:3d:
1f:4f:f4:43:99:69:d9:84:9b:33:8c:2d:bd:35:72:
2b:d0:41:1d:88:8d:ad:04:3b:29:09:78:85:6c:92:
43:b8:52:b6:ee:f4:bd:75:5f:75:09:24:c4:6e:ae:
1e:08:e1:75:39:90:1a:93:c7:db:14:21:5c:d4:95:
70:55:23:c3:87:37:38:85:24:7c:53:07:c6:ee:d8:
55:89:4e:9d:12:3e:34:00:fe:07:e4:9d:bb:13:6d:
4c:bc:9e:99:1b:fa:8a:53:5a:ec:2a:67:14:ff:d9:
01:35:e0:5e:d0:8c:57:b0:e8:9b:6c:d5:0f:86:ee:
9c:38:dc:9c:18:e7:0e:91:07:06:11:79:0e:cf:76:
3a:dd:6b:f1:1c:94:79:aa:fc:9c:7b:8a:4c:3d:8b:
e8:75:d2:18:bb:64:b9:f2:18:78:98:f8:1d:66:9a:
0a:0a:ce:92:59:9f:50:15:5a:9b:b9:83:19:76:6f:
41:32:89:4f:57:dc:eb:46:ed:b8:cf:1a:b6:74:4b:
32:11:5d:0c:44:e4:fd:f1:b6:f1:12:cf:c5:ef:7f:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:48:51:E0:32:8F:99:55:CF:A3:1D:CC:C6:8A:05:EA:20:F3:6E
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:66:7a:3d:59:87:e9:7f:07:67:75:75:9e:fd:9e:ad:da:
55:73:2f:08:81:fe:36:ef:98:6d:63:d5:73:24:93:18:78:0a:
3c:47:e6:10:fe:b0:d5:9b:d8:b2:50:eb:91:bc:a1:27:d3:1a:
47:a7:45:b6:1e:35:d5:fc:f2:e4:3e:ba:16:30:cd:91:13:e7:
d4:69:8d:9a:72:8c:6d:00:4c:52:db:27:47:f7:11:9c:da:51:
45:a3:f5:35:e0:40:10:08:49:21:10:ca:af:fb:9d:84:0d:ee:
6f:e3:90:cc:32:bc:6f:5d:7d:d4:07:b1:60:cd:70:99:21:65:
73:d1:63:b8:ef:79:b4:0e:01:f6:09:21:98:16:87:0d:b1:cf:
09:01:32:a7:13:94:60:b2:9c:77:f8:40:dd:5e:b1:2f:65:e5:
b2:f6:a3:a7:33:d5:2f:e8:c1:48:f8:7d:6b:59:e6:8a:fb:3c:
a4:ec:37:c2:3b:23:d5:2e:41:be:1b:3c:b4:16:ac:9c:d2:d0:
de:e2:c6:1c:a5:99:72:e8:70:04:92:a6:c6:1c:4e:60:5d:62:
2f:44:e2:94:05:fb:d5:57:62:d4:24:97:dd:5e:e0:1a:7d:d5:
53:53:54:fa:b0:23:ac:95:4e:28:78:09:5d:f2:da:c4:f9:51:
af:85:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 14:37:22 2026 by rpki-client