Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: jDgpY7d3pD6Y9TTR3K54By3rdaaF+MYttoBongCxQHE=
Subject key identifier: 29:E7:98:4B:4B:D8:3C:6F:2D:AA:6E:47:86:BF:35:AA:C8:4F:DD:67
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01A08C0D6113730C70A0EC0EB9EF17CC978E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0BA7
Signing time: Thu 10 Sep 2026 16:01:21 +0000
Manifest this update: Thu 10 Sep 2026 16:01:21 +0000
Manifest next update: Fri 11 Sep 2026 16:01:21 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: tvaaQTOMbKvvaJ7T7BzR0ESbVqrpk9T5ISXgtNcm9K4=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:61:13:73:0c:70:a0:ec:0e:b9:ef:17:cc:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Sep 10 16:01:21 2026 GMT
Not After : Sep 11 16:01:21 2026 GMT
Subject: CN=29e7984b4bd83c6f2daa6e4786bf35aac84fdd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:35:3c:5b:6d:9b:a0:2c:6e:2b:1c:64:fa:
8c:a2:c2:56:ab:d0:25:e4:33:e0:ea:e1:e0:16:26:
a4:dd:45:ca:41:9a:1c:19:1d:7c:d6:f2:7f:c3:05:
fc:c6:89:41:b8:6f:10:6b:b1:5f:41:c9:c9:98:c6:
01:8b:0e:26:ce:fb:25:8f:fd:50:56:11:a0:6c:c9:
27:96:3c:df:65:6a:e1:a7:08:20:70:fc:01:79:9b:
e2:13:98:fd:e3:1e:06:61:e9:99:a7:90:b8:76:fa:
68:4e:c2:47:a4:74:50:48:a8:1f:7f:0c:55:80:99:
82:6d:97:bd:cf:e9:bf:a8:0c:24:5d:d4:60:ca:da:
c4:f8:0d:61:a5:a8:69:f3:8c:8a:74:d9:24:1c:a2:
c9:46:a3:18:5b:a6:fe:5c:9c:c9:c6:42:5c:94:08:
37:a9:76:b8:b6:c8:ae:d8:2f:30:22:47:9c:b7:9e:
2d:ef:6e:df:3b:47:40:d3:5f:38:bf:8b:e6:4c:09:
5d:36:fb:db:dc:ad:18:db:11:b5:a0:1d:45:2b:74:
2d:ba:df:96:57:6d:89:ef:a4:55:58:44:20:43:21:
c3:3d:98:d7:8d:36:df:0b:ce:ab:19:a4:38:8a:12:
69:be:4f:5c:35:f0:48:90:b8:14:fe:25:4a:2f:7e:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:98:4B:4B:D8:3C:6F:2D:AA:6E:47:86:BF:35:AA:C8:4F:DD:67
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:14:97:ef:bc:22:2d:3a:9b:43:c6:28:99:4f:77:14:dd:0b:
0c:ba:e3:cb:77:b1:0c:de:df:fe:ff:cd:fa:74:4c:47:33:46:
35:6c:f1:e5:fc:76:96:2d:40:e7:c8:f1:55:71:71:89:e6:75:
b5:df:23:76:d9:79:95:56:c6:74:28:fe:b8:12:cb:40:e2:c1:
dc:7e:d3:4a:c8:62:d2:f2:61:46:aa:d4:29:ca:f6:d5:61:56:
a0:10:0a:c6:2e:0a:66:56:24:97:da:9a:af:77:67:5e:d0:15:
b3:d1:5a:b9:c5:ce:4f:c4:aa:05:f2:9e:21:ca:16:89:a1:85:
26:40:d1:cf:19:52:58:18:3d:86:29:09:3f:c6:78:30:6a:32:
22:6b:a6:ff:f3:e0:1b:8f:49:33:b7:8f:13:b6:59:9d:6e:a5:
bd:00:c8:eb:e1:2a:91:43:2f:83:7e:14:5a:78:21:87:d9:a5:
f8:90:ae:e3:8f:a0:eb:82:ec:c6:5d:ce:1c:9e:aa:0a:d8:6b:
7f:1e:c5:2e:75:40:52:45:b8:ab:8c:75:25:f9:4c:a2:cb:18:
05:70:91:73:f1:a2:c6:c8:22:34:75:77:5a:9c:5f:e0:e9:83:
55:8b:29:1d:91:af:60:84:a9:f0:d1:1e:67:e0:37:17:44:49:
5d:9f:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:26 2026 by rpki-client