
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: 58sxbl1D35mtOVlj3q7k3LbTcaOYKH62t2C8evPqhtE=
Subject key identifier: 2F:8D:16:EC:58:CA:10:06:A7:44:C9:DE:C8:C6:DB:7E:B4:44:E4:51
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01A08DC459C0B52B8622D8B638DF2117840B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 178D
Signing time: Fri 11 Sep 2026 00:00:50 +0000
Manifest this update: Fri 11 Sep 2026 00:00:50 +0000
Manifest next update: Sat 12 Sep 2026 00:00:50 +0000
Files and hashes: 1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: 1v9mPSyEycpb6kSfYRx9WA2vfgQoNnY5Wdu9e069uRU=)
4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:59:c0:b5:2b:86:22:d8:b6:38:df:21:17:84:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Sep 11 00:00:50 2026 GMT
Not After : Sep 12 00:00:50 2026 GMT
Subject: CN=2f8d16ec58ca1006a744c9dec8c6db7eb444e451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:8c:c6:6c:2f:be:7a:32:87:00:09:3a:93:
73:5b:2b:ac:24:c1:0f:27:f4:ce:57:93:c0:08:67:
67:e6:61:44:58:f7:32:67:ce:1b:7d:20:cf:4a:e9:
47:f9:9f:d5:5f:da:2d:df:ec:08:e8:20:5d:f7:75:
81:f6:fe:32:f2:2c:62:ac:b0:30:8f:f1:1c:9e:37:
19:69:fd:51:e9:df:0f:79:41:0a:c2:a2:62:1c:9e:
e1:b4:a4:24:5e:68:e5:bd:39:58:b1:31:24:ea:ad:
26:bb:f5:5c:66:b2:10:23:58:fa:4e:ef:30:cb:8e:
d1:46:51:2e:4c:7b:f5:5b:ea:b3:d0:71:d1:e4:c4:
38:ef:04:63:50:31:70:70:ab:74:81:a9:30:da:04:
48:43:4b:cf:b4:be:8f:08:45:fc:6d:7c:63:65:d4:
ce:09:76:d8:44:61:a2:4a:67:ad:d9:15:ca:e2:4a:
34:88:3a:04:77:0c:c2:23:57:7b:64:e9:ba:f4:f2:
56:03:91:66:a8:e8:1b:77:85:32:02:5b:8b:83:a2:
dc:b2:35:76:4f:9f:12:4a:f6:c9:ff:16:37:16:10:
d1:d1:db:92:d0:81:74:b1:9d:9a:a8:ce:0f:cd:64:
6b:0c:51:2c:87:6d:b9:5d:64:d8:5f:4a:7f:97:60:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:16:EC:58:CA:10:06:A7:44:C9:DE:C8:C6:DB:7E:B4:44:E4:51
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:a2:98:de:b8:62:09:e1:b0:a3:2b:d4:45:71:f1:8b:71:
84:2a:d7:e5:22:ec:af:b5:05:cb:75:57:aa:61:85:a3:7a:33:
5a:f5:e2:66:a2:f8:6d:2d:28:38:13:27:8d:2f:cc:a9:28:77:
d4:24:61:5c:02:19:e8:48:19:93:cd:b8:b1:c7:84:5b:6f:f8:
e7:3e:7e:c3:1d:5f:3c:f3:a8:d7:2e:d7:a3:9f:37:b0:bf:48:
d9:3f:cc:77:72:4d:4e:cf:5b:c7:b4:42:72:64:58:56:ae:ac:
e5:99:d8:30:fc:21:78:9d:ae:93:cb:10:0f:a8:65:e7:b8:45:
33:6c:86:94:05:cf:85:b9:a4:a9:34:e3:7d:76:44:5b:8d:46:
d8:5f:72:be:83:83:c4:82:ce:0c:8c:83:a5:40:7a:15:d2:e3:
4e:98:12:55:ec:bf:19:48:2d:ab:a8:90:3a:47:b3:88:b6:4c:
18:6c:5c:ff:81:c7:5f:c5:e9:1a:11:df:fb:be:2b:2a:d2:18:
00:79:20:25:d6:21:e3:fa:1d:eb:36:6a:9d:16:b8:62:c2:9d:
37:d5:af:62:63:2e:88:1b:e9:2f:ac:42:60:db:c8:bf:71:fb:
a7:a4:fb:dd:8b:33:9c:b0:7e:a2:62:c8:2e:c6:fe:f5:b8:0a:
fa:db:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:43 2026 by rpki-client