Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: PLP4Gq8ujja0END9f4jLRErLTjtA/nWmfl3+CQiDgcw=
Subject key identifier: EB:6B:77:58:3B:7C:C7:0C:A0:29:E9:33:47:AC:0E:20:D0:3C:B0:F6
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 01A106CA948C767BB9E0F2980A930E33F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 025E
Signing time: Sun 04 Oct 2026 12:01:41 +0000
Manifest this update: Sun 04 Oct 2026 12:01:41 +0000
Manifest next update: Mon 05 Oct 2026 12:01:41 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: OyNkJeSjZjvbGUHT8TBEQnYM9VFl3bT4qRpiPo6+RzQ=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:94:8c:76:7b:b9:e0:f2:98:0a:93:0e:33:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Oct 4 12:01:41 2026 GMT
Not After : Oct 5 12:01:41 2026 GMT
Subject: CN=eb6b77583b7cc70ca029e93347ac0e20d03cb0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:8a:82:be:4c:25:a9:36:51:87:1f:4f:1e:
07:8e:83:e1:6b:c7:8b:d8:18:1e:65:0b:11:51:c5:
dd:df:a3:40:ee:eb:b7:a8:ba:7f:57:f8:d8:c0:ba:
36:52:22:76:53:f4:16:1c:47:a2:ad:1f:ac:f4:2a:
82:2c:8a:29:85:00:6e:c0:68:5e:07:18:95:af:2d:
ee:b0:69:c9:7d:f1:34:0b:83:24:ac:3b:c3:cd:ee:
13:b9:13:35:9f:8d:e2:62:23:09:00:d4:ec:39:e8:
d3:62:bb:5d:1d:0f:de:66:66:03:05:ed:b9:0f:6a:
86:63:94:82:b3:e6:75:3d:00:ba:e0:7c:13:ad:71:
dd:2b:ef:9f:91:5f:1e:2c:6b:0f:b6:57:ae:b6:fb:
f0:86:3c:29:d5:63:7b:44:2f:78:b6:0b:f7:31:c0:
f4:77:46:31:f0:97:31:9b:62:eb:f0:91:be:c0:25:
4d:80:05:be:bf:fc:4b:e8:b6:38:c5:d1:94:be:b2:
e2:f0:6b:67:80:85:10:af:33:0e:00:53:a6:39:c3:
b0:dc:11:11:d3:6a:6d:ed:02:82:d6:17:b5:93:d8:
21:6a:44:70:69:5c:ef:c4:5f:43:ff:8a:91:5b:2f:
75:b2:93:89:58:eb:5f:89:f8:f9:c8:7c:93:37:c9:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:77:58:3B:7C:C7:0C:A0:29:E9:33:47:AC:0E:20:D0:3C:B0:F6
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4d:fa:7e:32:38:99:19:59:70:cd:c4:8c:31:07:19:c7:d3:
03:c4:27:f2:8e:6a:d5:7b:14:c5:0b:54:e0:34:14:02:ab:a4:
81:82:dc:d9:26:f8:8a:55:3b:30:ea:d3:83:b6:e6:cf:e5:b5:
1d:3b:c9:dd:33:7c:8a:a7:dc:fd:04:f4:fa:03:82:0a:e2:09:
56:3c:b0:fa:98:f5:c2:6a:14:0e:a0:a1:8a:d4:77:f5:55:84:
99:4e:ea:bb:5f:85:6c:f9:4b:60:ee:da:7f:7f:0c:16:f9:90:
f0:15:90:b2:1e:61:a1:77:21:9e:45:65:e3:1d:d2:7e:94:26:
8a:e7:0c:67:0d:ef:1c:fe:fd:de:01:19:24:07:58:d7:8e:f8:
26:40:ae:bb:cd:a4:15:53:ef:f7:e1:3b:8a:88:5f:73:60:21:
29:79:79:52:13:97:a6:31:b1:c1:c8:4f:61:e3:d2:d0:b4:ea:
20:bc:db:f1:be:12:14:80:c6:39:4d:b3:0c:b6:b5:8f:97:49:
ca:35:96:9a:e7:e8:c7:f2:61:7b:fe:4c:8e:df:33:38:12:6d:
e5:06:f4:a4:cc:12:4d:86:b8:24:df:a4:c7:b7:a2:df:03:06:
7c:81:15:b0:d5:ca:1f:12:2e:f5:58:0f:fa:22:b9:2f:6b:94:
ae:bb:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:05:04 2026 by rpki-client