Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: 0U7+fmVRt9XcDW8BSYOisyyymOp1I8Zd6YQYxgBsXgY=
Subject key identifier: 26:66:49:E4:28:5C:B7:1F:A5:69:36:BA:3A:BD:4A:A2:D3:99:AC:9A
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 01A04205F1FC6CACF5BB781D3D6E9727FD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1484
Signing time: Thu 27 Aug 2026 07:01:20 +0000
Manifest this update: Thu 27 Aug 2026 07:01:20 +0000
Manifest next update: Fri 28 Aug 2026 07:01:20 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: 3pPQ5rdwM6+oBfLxM1vUt5fDHvC1PADdqEQP/5V+Hes=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:05:f1:fc:6c:ac:f5:bb:78:1d:3d:6e:97:27:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Aug 27 07:01:20 2026 GMT
Not After : Aug 28 07:01:20 2026 GMT
Subject: CN=266649e4285cb71fa56936ba3abd4aa2d399ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:83:12:be:7f:6b:09:a0:4f:56:04:33:cc:
00:dd:55:af:50:e7:0a:15:d6:c3:06:41:af:cf:14:
03:9f:2c:41:9c:11:f9:b5:7b:50:f2:97:eb:3c:50:
d4:d2:62:e8:13:a3:a7:19:ae:87:09:0c:0f:ca:bf:
d5:b2:b6:f6:33:57:60:d6:ec:d1:82:26:44:25:57:
0a:14:cd:a3:3c:fa:24:07:f4:29:38:c2:17:8c:69:
72:43:92:4c:c7:6b:b3:1f:62:7a:c8:cc:33:c6:6c:
08:a5:3e:63:6f:21:df:c6:99:16:94:a6:d9:15:08:
98:91:51:50:e4:cb:a4:79:9c:7b:2f:b0:5b:b4:94:
ec:65:7d:6b:90:6a:e9:cb:06:ad:bc:10:8c:4d:5b:
60:43:fb:0f:91:08:16:56:9a:74:7a:cc:32:36:bd:
a5:ce:a0:95:03:5f:99:0a:c3:06:f4:d5:8f:c2:69:
a3:9c:ee:5f:24:1b:b9:2e:71:cd:47:80:1e:91:d8:
9a:0a:51:76:26:95:dd:23:fe:13:b9:24:da:ac:b9:
c7:1a:1a:63:77:31:ed:b0:1c:7e:d6:73:43:fa:70:
e7:10:59:14:07:9b:3b:f0:2a:76:7c:98:b4:ef:a3:
3a:81:00:a9:a6:3b:03:b4:ec:a1:25:41:b9:b5:40:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:49:E4:28:5C:B7:1F:A5:69:36:BA:3A:BD:4A:A2:D3:99:AC:9A
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dc:90:73:46:28:f7:3d:de:30:db:9d:4d:00:95:b8:bd:77:
a5:0a:52:c9:1c:62:6b:9e:f6:eb:e8:71:06:c4:07:78:ec:d4:
7a:68:63:63:6d:e2:ff:be:74:b3:2f:f3:dc:3d:e2:e0:86:cb:
cc:f7:ef:7b:22:0a:aa:0f:bf:08:a5:3b:44:71:32:be:cf:4f:
f4:ae:a2:2d:f0:7b:ae:bb:33:10:13:01:25:83:b2:07:98:02:
18:fb:30:25:ae:ae:31:db:2b:4d:af:47:5d:fd:78:d7:b2:40:
79:ab:ce:f3:2d:f8:ef:f2:57:b6:7a:9b:1e:ae:53:28:dd:83:
67:ce:96:84:c1:32:45:e0:69:5a:c7:35:f8:ad:63:1e:5a:97:
77:72:9b:23:b7:16:04:b5:05:36:b8:6c:88:c2:b7:d8:3c:cf:
28:b4:73:8a:a9:ad:79:f2:9e:10:bf:ca:62:2f:d3:f5:99:0b:
70:50:af:d7:82:8f:6a:ca:ad:35:05:1e:03:ef:ec:04:49:20:
9f:f7:ec:5a:28:d7:6b:b4:18:99:0b:09:eb:52:70:67:c8:b1:
fb:53:10:40:b2:c8:f5:34:1c:35:f0:d6:ce:a2:16:81:fc:af:
e5:9f:88:4c:b6:5e:41:89:80:a1:50:c4:a9:93:35:d5:d0:83:
70:99:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:40:23 2026 by rpki-client