Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: c8dRFgfgLrqRsL6CkHg8PGW5wTcMOYWalYr01wEp9/8=
Subject key identifier: 67:42:40:D1:F1:54:09:AD:4C:28:7C:33:FC:B6:29:1E:2D:BC:ED:19
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 01A0BB0A450E46503C678D035D0B725D8BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 1A6D
Signing time: Sat 19 Sep 2026 19:00:07 +0000
Manifest this update: Sat 19 Sep 2026 19:00:07 +0000
Manifest next update: Sun 20 Sep 2026 19:00:07 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: q8QRhqh36GjDNhrmuXm4cUt83VkdJjJ76R20FALF8Y0=)
2: hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa (hash: SQ1vYGdBYZkb25PtDITYpjzEq+82KcEcQFwySA/C4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:0a:45:0e:46:50:3c:67:8d:03:5d:0b:72:5d:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Sep 19 19:00:07 2026 GMT
Not After : Sep 20 19:00:07 2026 GMT
Subject: CN=674240d1f15409ad4c287c33fcb6291e2dbced19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:77:c0:4a:48:29:0d:bb:ac:38:41:3b:18:
83:67:c1:cd:63:6c:24:b5:6b:36:98:36:44:f4:78:
fa:91:39:6b:b7:43:a6:1a:a2:d8:36:cb:7f:41:fd:
2f:bd:5d:5b:63:c1:d3:86:9c:41:d7:8f:1e:48:1f:
39:11:ae:99:cb:52:25:e4:25:52:83:15:6e:2a:a1:
23:09:ab:ff:c2:43:22:c6:aa:15:7d:61:0f:2b:97:
82:f7:af:ce:04:2b:fe:63:c6:f8:bf:fa:81:41:0a:
4c:2a:c1:e3:b6:f0:ca:42:82:0a:ef:27:81:e3:79:
df:00:dd:61:aa:46:bc:42:71:55:07:a2:6d:60:82:
56:06:a2:5f:74:37:bb:b2:73:91:ba:77:50:a6:83:
c6:e6:4b:91:d2:ab:f5:62:72:13:47:bf:db:19:14:
30:d6:ef:b7:cd:51:b4:5e:9a:8e:d8:5f:2b:ec:fe:
6e:52:89:d6:84:8c:6d:f1:d6:9d:22:ea:a2:42:fd:
6f:fe:3d:19:91:44:2e:06:4a:b9:ca:30:7a:b6:6b:
32:1a:e3:35:02:bc:13:7a:ec:c0:1a:0d:88:1e:7a:
62:c9:11:a6:13:75:b1:fc:36:55:ac:e1:43:05:ec:
4c:05:ed:62:73:6c:aa:e2:22:a5:f0:c1:e6:53:80:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:40:D1:F1:54:09:AD:4C:28:7C:33:FC:B6:29:1E:2D:BC:ED:19
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:ba:ca:6b:92:63:7e:eb:97:44:40:18:55:61:0a:59:aa:
8a:fc:54:2c:00:64:1b:16:ff:93:b0:85:a7:5f:c3:d4:5a:8b:
e0:1d:38:53:d4:0d:16:55:17:77:a0:8a:80:ad:6d:e4:7b:a7:
7b:ca:e4:c0:42:83:55:68:5a:0e:c8:ce:f7:b2:a8:e6:31:bd:
77:8d:9a:55:cd:33:12:a9:d6:dc:a8:26:2b:7f:4b:1b:8a:cd:
5d:99:53:8b:bd:dd:c9:72:79:ec:01:77:c9:14:eb:09:4a:f4:
33:8e:dd:c3:03:4c:08:2b:18:d1:21:98:e5:59:fb:71:c7:b5:
a8:e6:ff:f3:c3:c5:48:d3:72:b5:76:e0:26:e9:38:65:f3:42:
53:9e:d1:e9:9b:d7:49:47:06:0b:93:62:31:60:12:54:57:db:
f2:83:d5:3f:53:0e:bb:95:b1:d6:f7:da:25:fc:2c:f4:ee:02:
c7:04:ef:9f:6a:e2:cc:d1:06:9c:85:59:6b:f8:ab:df:a5:d4:
ee:ef:3e:1d:d8:ec:21:71:38:28:44:ae:18:84:32:7e:67:35:
a0:12:fa:04:2e:df:44:1e:84:49:97:08:7f:8d:67:15:04:ba:
fd:d0:c4:b7:b7:33:a6:b1:6d:16:a2:95:53:ac:79:d2:7b:bc:
64:a0:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:42 2026 by rpki-client