Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: FJWQjfmfiFwWs3RetE0PB5FMFBvssnPwJBkC+7hF+0Y=
Subject key identifier: D9:E0:0C:B9:8F:4E:4B:86:06:86:2C:3A:8D:4C:5C:2D:C3:21:A3:B5
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 01A180AB1809E67F853ED8D1A2D85A46188B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1529
Signing time: Wed 28 Oct 2026 04:00:58 +0000
Manifest this update: Wed 28 Oct 2026 04:00:58 +0000
Manifest next update: Thu 29 Oct 2026 04:00:58 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: GsBV//FaqRYI/F5+ZoU6u6+P4V+3dNijGs5UbDcmaOg=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:18:09:e6:7f:85:3e:d8:d1:a2:d8:5a:46:18:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Oct 28 04:00:58 2026 GMT
Not After : Oct 29 04:00:58 2026 GMT
Subject: CN=d9e00cb98f4e4b8606862c3a8d4c5c2dc321a3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:71:cf:98:87:b3:f9:4c:23:f9:1d:54:ef:
9f:ef:b8:3b:75:12:64:8f:15:b6:d8:a0:fd:1c:48:
70:84:36:f6:85:4e:88:43:e2:91:f8:04:c3:d8:88:
bf:10:aa:a8:2e:05:53:23:fc:bf:b4:1b:18:50:bb:
e0:37:14:bf:8d:8c:ee:8e:65:37:d8:32:bc:c8:d5:
fb:c5:dd:00:61:c3:2c:87:3a:82:e6:19:01:9a:fc:
41:b2:2e:44:70:69:6e:9b:0f:82:c3:18:99:61:98:
10:6f:cc:67:b4:a5:16:d1:b4:b5:32:2a:c6:60:78:
51:b2:c0:42:a3:7f:50:fb:9b:6a:c2:00:11:d5:14:
21:59:58:79:70:20:53:c4:17:9b:f6:1c:c8:7e:7d:
e8:8a:0a:7d:36:ca:5d:60:f1:86:a7:45:9c:e1:28:
d4:07:7b:fc:57:6c:f6:c6:82:8b:f4:8f:0d:82:bc:
74:22:43:ec:eb:68:07:b5:65:79:ed:71:19:ec:10:
0b:92:03:e3:fe:66:a3:70:a4:8b:39:a1:f8:dd:5c:
b3:80:44:b9:b3:b3:52:9a:be:c1:63:b0:47:b9:2d:
d0:ea:8e:be:f1:c0:64:36:05:fe:9d:53:3c:64:f8:
ea:c9:71:39:9d:3b:81:29:b9:9d:0f:78:56:1e:86:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E0:0C:B9:8F:4E:4B:86:06:86:2C:3A:8D:4C:5C:2D:C3:21:A3:B5
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:55:fc:74:fa:5c:3f:0c:37:d9:25:a0:a5:b7:46:37:70:
49:db:1b:15:01:a0:82:b9:7d:91:19:76:55:7a:23:be:44:f4:
ca:58:d6:80:96:5f:79:e3:7b:0b:38:cc:3e:3a:0c:37:88:7f:
07:6b:6a:df:85:f1:30:61:76:70:3a:3f:6b:6f:dc:d1:a1:7e:
33:ab:f3:79:b7:6d:73:e6:47:87:64:c6:d9:ab:da:9d:49:06:
a1:0a:3a:81:de:b3:6f:a4:c3:87:d4:7c:84:c4:29:8e:e0:89:
fd:bc:5a:73:63:8b:8b:fb:9e:26:1a:05:0b:9d:f3:83:dc:c5:
91:a5:31:88:49:8a:c0:9d:16:6a:35:bc:b1:52:e2:4e:a0:43:
ea:3e:79:1a:77:14:71:a8:db:d6:9e:b6:62:39:42:8d:e6:c6:
ac:bb:e0:ee:ad:32:f1:db:35:0b:dd:14:ff:e6:8f:59:08:57:
8e:05:dd:6d:1a:65:27:c2:01:98:db:56:8f:a2:53:b6:60:e2:
db:26:15:2b:15:cf:e9:37:bb:b0:eb:fc:e9:d2:65:ed:15:82:
83:e0:fb:c9:ab:29:0a:4c:7b:e7:8d:11:a7:20:bd:3b:af:be:
72:77:33:00:42:33:9a:29:38:95:77:43:e5:04:4c:ba:33:84:
2b:92:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:42:48 2026 by rpki-client