Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: Excqvgbi67lhZPZqD3H/lJGqf2Lml/dN3LK9oERoimU=
Subject key identifier: 73:37:DA:0B:CE:B1:80:18:68:B4:54:24:9C:AC:8E:22:72:D2:5F:2F
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01A1852D014C6429FD6A92F6322AD49AB0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0C28
Signing time: Thu 29 Oct 2026 01:01:21 +0000
Manifest this update: Thu 29 Oct 2026 01:01:21 +0000
Manifest next update: Fri 30 Oct 2026 01:01:21 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 2vcUzyOdiHpiSq1j+6JydM/9G6XXifiX6Z8CCsE64Y8=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2d:01:4c:64:29:fd:6a:92:f6:32:2a:d4:9a:b0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Oct 29 01:01:21 2026 GMT
Not After : Oct 30 01:01:21 2026 GMT
Subject: CN=7337da0bceb1801868b454249cac8e2272d25f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:df:ed:5c:29:aa:47:a9:dc:f7:c8:eb:f7:
b8:f5:2f:4e:ff:97:1f:00:a3:45:db:90:a6:d6:93:
e0:53:34:80:c3:22:52:06:e6:4f:a7:86:18:ea:3e:
7b:b7:ae:fd:e7:ef:88:37:53:1e:78:d2:34:12:56:
0c:1a:45:21:b4:c4:33:45:5d:f0:27:2c:e3:4f:1d:
88:1c:42:c6:87:cc:a7:11:9b:9b:7c:58:3c:99:4f:
f3:19:3c:cb:0e:5c:c5:77:2b:a2:92:71:7d:a0:07:
0d:80:8a:73:9a:20:55:5d:27:67:fb:43:8e:0e:86:
b0:ee:ea:59:ce:f4:c4:30:73:3b:6f:3c:33:a4:36:
59:ed:26:8d:fd:b1:7e:fd:a9:79:0f:22:1b:b8:16:
50:46:ce:93:19:80:b2:6b:14:7d:df:dc:0a:a9:ef:
ad:c9:a3:4c:de:0d:13:36:b2:2d:cd:ca:13:cc:35:
c2:44:6c:34:43:33:18:27:4f:90:74:f9:ee:ac:27:
b6:3e:c3:c5:e6:7d:08:8d:ba:ca:b9:dc:66:f3:0c:
34:9e:76:bc:d0:3a:19:c5:59:c7:8f:32:6a:9c:be:
c2:f7:b3:a6:9f:f1:56:d2:0f:b2:85:0c:51:9b:17:
d4:3b:22:fd:9a:5d:8c:53:e9:2b:8e:f8:aa:f8:79:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:DA:0B:CE:B1:80:18:68:B4:54:24:9C:AC:8E:22:72:D2:5F:2F
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:97:19:b7:27:4f:01:33:2f:48:12:6a:d6:1e:46:5c:84:
8d:3e:8e:1b:56:12:2f:1c:72:93:a4:c0:da:58:ee:8b:f7:99:
4d:38:65:98:37:fe:61:8c:f9:9f:f2:00:23:92:ec:a1:91:71:
de:e6:88:d3:95:a6:46:dd:0c:d7:22:aa:14:20:41:08:e4:31:
e6:2d:ef:e6:b9:2a:a2:e3:be:f3:30:70:ad:92:b6:ae:2f:2e:
8d:19:67:af:90:10:18:53:60:73:ea:d0:3b:8e:14:38:19:9d:
a5:f6:c3:19:0b:2d:1e:c6:cf:d9:a8:a5:aa:e6:f1:c6:7c:5c:
05:ff:ea:5f:9c:8e:f4:f3:3e:90:12:c2:96:8e:b3:a6:f8:f4:
f8:1e:37:d2:70:a2:2e:a9:2d:1c:79:af:15:0c:24:a2:e9:09:
4c:1c:40:92:ec:9a:1b:27:63:ab:9e:2c:2d:bc:fc:d8:bc:db:
ff:90:a5:fa:7c:ab:63:4c:bd:08:a9:45:57:d9:2c:91:38:55:
55:53:1f:23:fe:b4:25:3c:6c:aa:5e:bb:fd:39:21:42:48:78:
7b:ae:22:78:5c:b4:22:08:16:ea:49:d7:53:fa:98:14:90:1e:
e2:ca:52:5f:d2:bf:2f:fd:9a:6b:7c:ae:04:89:17:06:71:1b:
fe:4b:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:48 2026 by rpki-client