Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: Fu/o5/YNUn4rIePz6xjwbuCHb7Jcd7rgo4FkOsRFdcI=
Subject key identifier: EF:72:6A:6D:58:5F:42:AD:3A:CA:71:20:86:E5:CE:E8:C8:B2:9B:0D
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01A17E17D5D74382844CF88D27092633DBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 16:00:53 +0000
Manifest this update: Tue 27 Oct 2026 16:00:53 +0000
Manifest next update: Wed 28 Oct 2026 16:00:53 +0000
Files and hashes: 1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: F92u6GmHPM5pe5g7cGoU+CX0vqCr1z8tMO8+69VCNIc=)
4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:d5:d7:43:82:84:4c:f8:8d:27:09:26:33:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Oct 27 16:00:53 2026 GMT
Not After : Oct 28 16:00:53 2026 GMT
Subject: CN=ef726a6d585f42ad3aca712086e5cee8c8b29b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:13:ed:74:d3:f2:49:cc:48:90:ca:06:49:
85:44:da:bf:d9:ef:a9:0c:1d:1e:5f:0f:81:89:9c:
93:9c:57:1a:c2:da:a2:9c:59:2d:6d:9e:51:57:d4:
a7:a8:d2:04:c2:9d:16:89:bf:19:ae:77:c0:0d:07:
65:09:82:30:63:87:9e:fa:b9:8f:2d:a2:db:c0:ec:
5c:bb:5e:75:8e:69:62:ab:61:ff:62:cc:01:06:f2:
9f:d1:b0:17:2a:f8:55:7e:f9:61:3f:07:04:bd:2d:
9b:4a:1e:5d:ef:80:30:ca:19:66:ff:d0:8e:f2:32:
07:e0:2d:38:34:49:b0:fd:7d:53:9f:78:74:64:14:
5d:74:87:f6:63:0a:47:9d:38:44:71:8f:4a:e5:1e:
20:24:af:ff:39:6d:7e:ad:d6:ee:01:40:b4:39:52:
e4:25:2b:5c:61:71:2f:9a:a1:df:ef:4c:e7:e0:1d:
da:ee:d8:1d:e6:0b:c8:d4:31:46:10:06:10:69:69:
60:bf:c1:a4:e1:18:d6:e9:d3:73:80:c2:6a:78:10:
d6:64:33:1f:6a:12:27:0b:8b:e0:40:0b:2f:cb:65:
ae:f5:3b:50:fb:d6:2a:4f:9a:f6:97:65:38:bd:f2:
c1:c0:f5:1a:ac:71:21:e8:23:0e:85:b0:8b:0f:64:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:6A:6D:58:5F:42:AD:3A:CA:71:20:86:E5:CE:E8:C8:B2:9B:0D
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:46:a5:58:99:9a:7b:7b:52:e7:f7:7e:0b:f6:c6:14:3d:0d:
71:ea:10:1c:37:61:bf:7b:ab:b8:dc:6d:57:34:48:fc:9f:81:
4e:73:a9:18:16:6b:e3:b9:a1:a7:6f:5e:ab:49:c1:ab:b9:47:
b3:02:de:11:dc:74:5e:86:43:37:91:44:3b:da:9c:8e:c3:ee:
89:7d:c0:c5:3c:26:f6:38:6d:95:25:21:01:7b:10:0f:76:94:
fd:1f:04:78:71:0d:1b:47:f8:14:8e:20:b5:84:71:f7:1b:2a:
ae:e3:8d:8b:8d:79:fd:a4:40:08:80:74:32:10:ed:ea:99:38:
e4:1a:5e:72:47:cd:0f:51:df:b5:2b:9e:2c:42:ca:2f:8d:b3:
dc:fd:1e:b2:aa:ae:29:dc:bb:03:02:66:4e:48:7e:83:e1:62:
37:85:90:82:3d:fd:9c:1c:a9:6c:2e:95:12:17:7c:ee:b6:a8:
70:4f:a9:ce:6a:8a:7a:24:3c:85:a0:3b:07:24:c2:64:bf:2c:
68:ee:e5:45:67:fa:15:41:03:95:0a:d1:33:37:e0:50:63:2a:
2c:9a:4a:9f:cb:d0:1a:d2:b0:a8:bb:17:df:74:c9:29:50:1d:
09:d7:97:f5:6c:e4:20:0e:ac:46:aa:6f:12:45:02:7a:ce:c3:
ee:4e:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:03 2026 by rpki-client