Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: RhM94GuHUb49tPRdDZZ5aqMFZ9EfDqF5jmq4OicQJt4=
Subject key identifier: 2A:D4:20:05:1F:2A:EA:C7:F0:01:A9:0F:B4:D1:FC:6D:48:9F:ED:4A
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01A08AC3854AFFE277580E1CD4290D94E9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 10:01:04 +0000
Manifest this update: Thu 10 Sep 2026 10:01:04 +0000
Manifest next update: Fri 11 Sep 2026 10:01:04 +0000
Files and hashes: 1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: RGCCMAI7XzM2uA1ieqR6NiDWQmc6X8tY3SQ8iSEB6Mk=)
4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:85:4a:ff:e2:77:58:0e:1c:d4:29:0d:94:e9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Sep 10 10:01:04 2026 GMT
Not After : Sep 11 10:01:04 2026 GMT
Subject: CN=2ad420051f2aeac7f001a90fb4d1fc6d489fed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:45:7e:6a:c9:40:50:cf:b1:1f:ca:b8:0f:
d6:94:79:f7:8c:0e:c2:28:c6:d2:f7:a0:9b:23:b9:
89:b2:c1:b9:50:9e:c3:19:66:8c:27:65:cf:5a:f0:
97:90:c5:20:68:81:61:29:df:b9:a1:88:0a:56:e5:
b3:11:b9:40:9e:65:f6:88:16:53:cc:1d:f1:1e:41:
ca:9d:d4:3a:c8:85:f1:9b:a8:21:4e:6d:1d:d6:25:
1f:06:58:e1:91:f1:d3:6d:ec:78:9f:98:58:79:67:
3c:89:7c:b6:82:79:5c:e2:85:c9:c0:87:8e:ba:1d:
94:a7:f9:a2:32:7c:88:24:3f:f5:70:39:4e:67:0e:
94:1e:fb:37:41:f6:94:ab:3f:71:a7:f7:14:60:4e:
c3:14:c1:b9:2a:4e:61:5d:30:6a:e0:3b:b3:a8:cb:
7f:d8:04:06:ad:60:9d:aa:2d:28:4c:25:45:77:9b:
a7:cb:e4:81:0f:2c:56:7d:a3:e4:36:93:7b:de:2a:
e9:00:89:31:b2:0d:82:89:b0:4f:2c:41:11:c5:bc:
53:5c:43:81:d0:18:11:ac:e3:c4:96:12:90:27:04:
07:14:a2:40:43:e3:dd:40:1d:e0:b0:a2:36:c5:26:
0e:64:8a:a3:88:d0:32:f9:9a:ed:cc:07:6d:f3:d0:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:20:05:1F:2A:EA:C7:F0:01:A9:0F:B4:D1:FC:6D:48:9F:ED:4A
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:b1:b7:70:49:b7:14:19:22:c0:50:88:d4:e7:8b:92:a4:
34:5c:f4:eb:5c:9f:1c:cf:23:0e:b0:ed:df:22:be:44:a4:1f:
07:74:48:f4:27:78:07:ff:3f:f9:24:a3:80:49:59:61:4e:0a:
bd:7a:60:fb:08:44:69:b7:e1:83:9c:28:f3:ab:ec:86:00:df:
fb:90:0c:2b:45:b8:41:68:bb:d0:d3:a6:23:c7:b7:3f:74:5d:
50:80:4e:cf:ed:de:29:8b:f0:f8:29:0a:dd:ca:6e:75:7d:ef:
9a:16:dd:27:5e:03:46:59:94:8f:2a:64:e9:c3:9b:ba:18:71:
4d:59:d1:91:4c:f0:c2:5a:c6:29:16:b3:f5:42:b2:ee:0c:38:
6a:bf:d3:83:44:83:98:5e:83:05:c5:12:93:d2:4a:46:3f:87:
58:de:01:c5:58:bc:60:6c:d3:1f:c0:d0:25:c5:68:04:0f:ee:
c1:87:52:e6:bc:ac:b6:d0:5d:7f:2a:f2:18:b0:6b:7b:13:8a:
69:a8:d5:c6:35:67:cf:64:51:57:be:ce:c2:77:4a:83:7d:0e:
cc:ea:92:dc:22:dd:a3:20:e3:03:ce:d0:23:53:c0:87:1c:91:
66:f4:90:42:13:72:b7:00:a8:5d:bb:01:f1:b2:4d:e4:e4:24:
0d:84:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:14 2026 by rpki-client