Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: GfOiStizDPk+Qiol5P5JeSwtpiKKayMRmGB6NKoYEXQ=
Subject key identifier: 81:C1:FC:AA:B8:88:C9:9F:F9:61:B7:97:19:F0:23:2D:B1:38:50:BD
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019EFD5FE6934BBAC458AEB26E08BE7C5FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 0150
Signing time: Thu 25 Jun 2026 06:03:01 +0000
Manifest this update: Thu 25 Jun 2026 06:03:01 +0000
Manifest next update: Fri 26 Jun 2026 06:03:01 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: jn6MjZuaEuK66Xob90650cn1CgX2K0PvXTmcRp09QL0=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:5f:e6:93:4b:ba:c4:58:ae:b2:6e:08:be:7c:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Jun 25 06:03:01 2026 GMT
Not After : Jun 26 06:03:01 2026 GMT
Subject: CN=81c1fcaab888c99ff961b79719f0232db13850bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:91:23:db:75:b9:7a:b0:8c:38:d0:53:6b:
0f:02:30:25:80:0d:c3:0d:13:73:04:7a:80:1b:3f:
66:b7:27:6f:a9:08:cd:c2:51:cb:32:2a:d7:c9:6c:
6d:00:26:0f:5b:dc:1a:89:25:63:3c:27:4f:ea:60:
eb:f7:c5:db:fe:fb:9a:fc:15:d3:9a:be:1a:3a:f0:
8a:76:e3:ec:2a:27:ae:3b:b0:e4:b6:92:39:0a:55:
26:0f:71:0e:11:70:ae:fd:dd:e6:71:fc:0f:ac:02:
57:c9:c8:45:b7:d4:c4:df:c0:f6:ee:87:de:55:c3:
49:02:61:10:8f:f8:16:b5:30:73:44:63:38:d9:d2:
d9:74:bd:57:ad:40:c7:db:da:15:1d:82:d2:8c:2c:
42:c9:32:8e:8b:47:c5:a2:b6:fd:26:3a:d4:aa:b9:
29:d5:ad:0f:e7:ba:0d:d5:b1:86:5f:97:9f:6a:df:
9e:71:d8:6f:0c:fa:4e:6f:ac:7a:27:39:04:0d:54:
a0:e5:31:c3:ed:2b:9e:17:fd:41:a8:09:43:e3:7d:
2c:0c:3b:2f:cc:f5:c8:37:4e:9e:7e:d7:3a:fe:01:
cb:16:de:93:19:18:2f:18:ca:55:3d:12:28:db:f3:
9d:5e:cd:f0:f8:d0:84:a9:27:85:d1:2f:e4:93:63:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:FC:AA:B8:88:C9:9F:F9:61:B7:97:19:F0:23:2D:B1:38:50:BD
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:51:97:8d:a8:d0:b1:f7:39:67:84:48:94:42:49:a6:82:
fd:2f:1b:e5:21:75:65:5b:0a:62:b3:be:96:7c:74:c2:35:a6:
9a:fb:2c:96:84:61:79:0f:64:42:63:52:73:f2:7b:21:6b:7e:
ec:2b:01:11:1e:ff:93:6f:61:99:84:2f:e3:62:62:64:1e:f2:
3b:b6:73:ac:16:5a:f2:9c:95:84:ae:a4:66:ed:73:38:d2:3a:
16:11:bc:30:01:f4:5d:a9:9b:3f:84:ff:cd:5a:f9:cf:88:ff:
ff:03:f1:04:0c:3e:8d:53:88:b2:d0:9d:f6:44:a0:d8:06:ce:
81:33:8e:66:21:2d:f8:a3:73:8a:2a:18:53:15:ef:71:65:c5:
ae:38:94:ba:10:83:74:39:43:38:5b:27:9a:0d:dd:20:af:22:
d0:96:18:b8:7b:a6:b0:8b:0b:ac:3b:b4:fb:50:9a:03:41:6a:
2f:5e:e3:2f:af:d6:f5:e5:3d:b7:6e:21:ea:70:1a:00:bb:33:
0c:d4:49:1d:af:d0:0a:bb:bb:2a:e2:40:42:2f:7a:46:e9:77:
ef:ef:53:e3:b1:cb:0e:46:8e:aa:e7:0d:18:15:f3:47:dd:81:
77:5b:02:7f:1e:79:b6:28:3b:43:e1:29:07:4e:fe:70:31:a2:
6f:2e:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:40:05 2026 by rpki-client