Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: HfSDEo6VNEFM8u+fX6jIKqolvJQacM5xPNGn8l7Wn0U=
Subject key identifier: 59:48:2A:2D:67:33:AF:9D:DC:50:86:45:74:4B:E6:2A:E4:D4:47:9C
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 01A186E35900882199443E833E8D841ADA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 04B2
Signing time: Thu 29 Oct 2026 09:00:08 +0000
Manifest this update: Thu 29 Oct 2026 09:00:08 +0000
Manifest next update: Fri 30 Oct 2026 09:00:08 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: dk35r36ennhXc0+1ypJ/uAOK5cZvCsUTveIty8yhOJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:59:00:88:21:99:44:3e:83:3e:8d:84:1a:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Oct 29 09:00:08 2026 GMT
Not After : Oct 30 09:00:08 2026 GMT
Subject: CN=59482a2d6733af9ddc508645744be62ae4d4479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:f5:2f:c4:30:ae:7a:a8:79:9c:b2:91:28:
6c:9a:69:19:ee:96:39:ce:00:e4:15:1b:96:27:27:
3c:4a:cb:4f:e8:e7:8a:48:63:b1:d0:42:25:5f:25:
f1:b3:91:48:32:11:bc:80:af:fe:77:7b:69:46:60:
7e:75:c2:8d:25:1b:d8:1b:fd:bd:ce:34:46:f2:93:
9f:43:d0:a3:2c:c6:29:58:b3:b3:b6:b1:03:f0:cc:
af:cc:ff:55:2d:47:c4:30:5a:9c:05:3c:fe:16:f2:
d9:ef:15:30:25:35:96:66:86:6a:6a:f6:0e:06:17:
5f:f2:c9:aa:1b:1c:b1:b6:38:ec:c2:56:71:d3:f2:
44:aa:a8:1a:2c:b4:88:79:55:54:a4:e6:1b:07:38:
bc:ba:62:3e:60:d1:83:25:2e:4f:6d:d3:0c:3f:9c:
5f:2f:5e:20:57:58:90:95:7a:aa:7e:49:e4:db:9c:
15:4a:c7:ca:60:4d:11:84:77:db:39:dc:14:06:4c:
61:69:de:42:49:e5:cc:c3:24:5f:56:63:0f:eb:d0:
77:77:9e:8f:45:a7:43:cf:b3:27:e0:5a:59:1b:56:
bd:b9:28:36:f8:1f:ad:f4:c9:36:48:71:12:b8:2f:
e1:d0:5e:c4:8a:ae:cb:97:69:0e:bd:9e:cc:da:6f:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:2A:2D:67:33:AF:9D:DC:50:86:45:74:4B:E6:2A:E4:D4:47:9C
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:18:92:91:07:92:2f:6a:6e:cd:6e:88:c7:09:c6:93:c6:
07:f2:4a:ef:22:f7:da:42:69:6f:96:dc:5f:ad:f5:0e:2b:8c:
1b:08:3b:3d:dc:5b:85:da:42:14:b7:b1:46:37:90:be:8e:7a:
40:a8:22:10:80:74:47:94:0f:20:60:ec:b4:f8:37:74:25:23:
86:f8:d3:c9:d6:79:3c:47:95:fe:55:ae:b8:3d:4c:15:ad:e9:
ab:f7:fe:db:02:da:0d:a9:c9:be:20:cf:f5:39:f7:1b:10:d7:
d3:62:c9:e6:86:fa:da:4d:cb:e4:f5:d0:9c:a1:da:b9:fe:48:
8d:33:bd:75:18:eb:c6:03:73:a2:7d:69:d7:68:5f:af:54:49:
0a:0e:9f:0a:7d:55:fa:52:5a:77:c6:65:23:62:82:22:70:a3:
11:04:22:78:20:0f:24:16:0f:7a:58:65:cb:99:bc:6f:96:e9:
fc:a3:9c:ef:a2:69:91:21:68:b8:ed:b1:31:8e:a0:ee:74:8e:
66:eb:50:dd:9d:08:81:67:ca:72:d4:bc:26:09:00:c6:49:47:
66:11:04:80:7e:68:f5:72:85:a6:a1:b7:c0:77:63:6a:74:b8:
0b:c2:a9:76:6b:0b:a2:da:5e:83:1e:55:1b:1f:22:c5:bf:8a:
a4:36:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:05 2026 by rpki-client