Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: 4wOmM3iX1U1YoWH3E6y1YhAwXXGPgz7CXVt/m8SOT7E=
Subject key identifier: 1A:FE:E5:2A:72:D0:BB:AA:91:34:72:52:7F:99:34:1A:6D:B7:41:20
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 01A08979BAAC770875349B4421FB25DF15DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 04:00:51 +0000
Manifest this update: Thu 10 Sep 2026 04:00:51 +0000
Manifest next update: Fri 11 Sep 2026 04:00:51 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: NDXREPnGvWOa6IXKaOU44jCFAimnPSJSUIz6Q+c9KMw=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:ba:ac:77:08:75:34:9b:44:21:fb:25:df:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Sep 10 04:00:51 2026 GMT
Not After : Sep 11 04:00:51 2026 GMT
Subject: CN=1afee52a72d0bbaa913472527f99341a6db74120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:28:f8:15:72:78:b2:40:36:7e:dd:13:a7:
d9:b5:74:39:ae:cc:0a:06:22:e5:c5:2c:5d:84:51:
01:4e:bf:3d:f0:3e:ee:da:7c:ec:10:68:7d:0c:9c:
43:4a:a8:fa:27:7f:ce:b3:9d:67:7d:9a:14:e5:95:
3c:8b:9a:17:d7:2e:41:66:76:7e:e1:74:bf:d4:53:
89:f6:f3:b1:53:45:7f:20:9b:6f:bd:53:04:be:8d:
28:a0:3d:e1:0c:17:71:89:38:3e:3c:63:e1:4c:a7:
28:7d:02:f4:24:4d:ac:63:48:8d:5f:44:5d:74:e0:
4d:cd:07:68:75:45:6e:9f:c5:f7:45:f9:23:cd:33:
fa:d0:f8:3b:38:93:67:19:a8:7b:67:46:8b:f4:3c:
ca:a6:a0:09:72:02:dc:19:c0:bd:4a:05:2b:bc:b2:
84:33:f0:c5:4b:e1:44:5c:d3:29:ee:db:2b:2c:11:
4b:c0:c5:7d:01:fc:30:45:a6:e3:36:ba:22:34:31:
04:0c:4d:f4:e7:f1:5d:4d:6a:45:d0:06:54:20:54:
36:7c:fd:8b:98:3a:f5:dc:25:57:b3:bd:db:48:62:
88:85:2b:13:3e:15:95:98:e9:38:62:5e:e5:4f:56:
c9:ac:74:15:44:44:b0:40:8e:9b:24:1b:22:ae:92:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:E5:2A:72:D0:BB:AA:91:34:72:52:7F:99:34:1A:6D:B7:41:20
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fe:9b:91:3c:1f:75:23:08:37:f3:0c:34:36:f4:03:5c:51:
ba:b5:4e:5e:bb:c9:08:66:10:39:f7:6c:1e:69:73:a8:6b:aa:
47:81:4d:5e:41:a3:7b:d9:49:d5:8f:31:e9:b7:75:1c:98:4b:
92:bd:52:e5:71:85:0e:54:69:06:3a:57:72:63:a5:7a:92:47:
9d:5b:5d:af:a2:aa:aa:fc:aa:d3:25:63:32:e0:1f:b2:cf:27:
43:44:e2:fa:73:c6:f8:52:5a:83:5e:c5:b2:6c:15:e1:03:03:
7a:38:62:46:35:35:a4:d1:69:a1:f4:91:2d:d5:78:7b:fa:ba:
f1:86:c9:48:15:0b:a0:80:ce:78:8d:29:61:f0:f9:74:7b:fa:
91:b3:99:c5:df:37:bc:f9:0a:9f:de:a5:03:b4:85:c6:f8:07:
ba:46:e5:8f:0e:0c:3a:ff:20:3f:fc:05:36:15:e8:3e:58:e1:
cf:ab:c4:0b:1e:c4:73:8b:0f:28:a9:ad:e3:09:d8:99:5c:8d:
e2:ce:0b:74:fe:b7:22:ff:6b:da:92:df:5e:38:4d:f1:74:b5:
4b:3b:26:93:42:a8:c3:54:74:9e:b8:1c:8e:fd:8d:39:7d:cf:
c5:4c:a6:5a:cf:d1:52:cb:69:ad:6b:47:87:bc:2b:be:e5:f6:
c9:d4:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:09 2026 by rpki-client