Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: qnsHQN0EUBGRDzcUgvCrEebuM297jnXJSdseDwxJpuA=
Subject key identifier: 5B:12:67:FB:AE:BB:FA:32:8A:58:DA:2C:0C:F1:0B:DA:92:54:64:9F
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 01A1664731FC04E152415E7B9A4FAE88F683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1AB8
Signing time: Fri 23 Oct 2026 01:01:44 +0000
Manifest this update: Fri 23 Oct 2026 01:01:44 +0000
Manifest next update: Sat 24 Oct 2026 01:01:44 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: HlsVO+7QmykmwYfX184e0hr4zpk18U6xwAkJbstml9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:47:31:fc:04:e1:52:41:5e:7b:9a:4f:ae:88:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Oct 23 01:01:44 2026 GMT
Not After : Oct 24 01:01:44 2026 GMT
Subject: CN=5b1267fbaebbfa328a58da2c0cf10bda9254649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:b8:ce:42:90:5f:56:ce:44:83:1f:c6:c4:
fd:b3:55:4f:57:b5:99:23:32:59:b0:07:f7:8d:85:
99:ed:25:2b:c4:90:95:cf:52:c2:14:1e:e7:b3:94:
7e:58:26:8d:d6:89:10:14:18:0f:f4:c4:e0:77:ae:
5e:c8:56:44:b4:4f:2b:a9:c9:f0:ae:e1:bf:6a:a1:
8b:40:80:f9:24:b2:40:c1:57:18:b5:d0:0c:4f:31:
73:ad:eb:30:50:91:7d:66:95:74:c6:05:2a:8e:5d:
17:f8:e8:7b:12:a7:4c:0a:f2:d4:74:9f:74:19:0b:
d1:b9:e9:75:b3:bd:e9:84:60:b4:c1:67:49:09:46:
e7:4e:a0:00:69:eb:3e:09:15:96:38:14:b4:8f:69:
90:bc:63:5c:e5:9a:44:b1:26:27:9a:57:8b:7c:a0:
32:17:b3:92:fc:c1:37:6a:7f:23:25:70:aa:75:4f:
e2:e8:d9:1f:d7:6e:2c:2e:e5:f7:71:0a:6d:ed:16:
f0:6e:66:95:7a:de:31:f8:56:09:65:9c:06:95:43:
44:34:a3:1e:eb:c9:18:f3:5e:31:db:96:0b:c4:c0:
f5:f6:d2:8c:cd:83:c1:d3:e6:9d:22:b4:ef:78:71:
ab:75:fe:ca:92:62:7d:fb:aa:5d:b8:69:3c:e5:de:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:67:FB:AE:BB:FA:32:8A:58:DA:2C:0C:F1:0B:DA:92:54:64:9F
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:41:ea:d8:d1:d2:92:99:f8:1b:7a:d8:4e:e0:cb:bb:41:
15:4e:86:19:b2:18:92:c8:04:2d:4d:11:a0:d5:0f:53:0e:7d:
c8:99:39:75:20:bd:99:3a:2d:1c:66:99:89:82:27:bb:8e:7c:
74:f1:08:ed:e2:57:47:70:bf:5e:92:07:d6:5e:2e:c7:e8:97:
29:09:01:a5:ae:8f:40:0b:e3:bc:bf:76:12:0f:f5:36:91:8c:
4b:1f:b0:f0:c6:9a:6d:29:22:ab:13:9c:d8:04:4c:44:ba:1e:
f4:ed:9d:2c:c6:4f:37:80:aa:ad:ea:77:72:6d:e6:00:c0:ec:
18:34:9a:05:fd:12:6c:48:39:58:98:e4:16:df:72:86:25:c9:
30:fe:d2:e1:6d:57:5e:47:65:0b:b3:76:79:9a:bf:f1:cf:f7:
a9:e6:93:1e:86:3f:a4:b3:6b:2a:f8:85:71:b6:18:3c:0d:fd:
57:16:89:ad:d5:24:7e:f7:d7:65:59:8b:58:a2:5c:4f:cc:87:
78:77:3b:08:47:00:04:e8:b0:ca:a1:bd:f7:65:65:be:62:cd:
55:1c:69:d7:90:d0:4f:62:c8:0b:68:04:a8:19:91:63:9f:21:
67:41:8b:b8:f9:e9:2c:08:f7:e1:c7:a2:fd:5f:70:c8:c8:04:
7e:7d:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:39 2026 by rpki-client