Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: vmXQ/EAk3Fai5EUqfotw1Eh+lbrm8VvPw8RVa5ukpqA=
Subject key identifier: 53:08:93:F5:B8:01:52:2E:08:A5:DA:BD:BD:07:DC:93:9F:F0:53:27
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 01A183079528A219E80F592043DD05E741E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 04B0
Signing time: Wed 28 Oct 2026 15:01:14 +0000
Manifest this update: Wed 28 Oct 2026 15:01:14 +0000
Manifest next update: Thu 29 Oct 2026 15:01:14 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: zSCpxGVdgPoHIexVcgT1LdM+BQ5ZaSm/uWKV6zElJbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:95:28:a2:19:e8:0f:59:20:43:dd:05:e7:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Oct 28 15:01:14 2026 GMT
Not After : Oct 29 15:01:14 2026 GMT
Subject: CN=530893f5b801522e08a5dabdbd07dc939ff05327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:76:87:38:ae:7b:37:d4:73:34:70:7c:b6:
89:55:32:bc:e7:b9:67:ac:2b:00:3d:8c:5b:f2:b3:
84:b2:a2:76:b9:c8:87:7f:74:3b:fb:8f:56:a1:1f:
43:85:8e:f9:22:5f:68:96:5e:0e:d9:c0:0c:d2:2f:
79:3a:22:53:ec:0a:9e:ed:9b:bb:44:0b:8c:73:67:
81:8b:ab:6b:44:a5:27:49:69:23:47:d2:de:ee:15:
d2:b5:45:c9:fc:3a:a5:80:3f:41:cc:e0:f9:7c:60:
32:a8:7b:37:9f:b7:d7:38:0f:85:1e:82:6d:48:07:
ef:01:18:35:d4:22:1c:7e:4d:65:67:3a:5d:e6:7a:
9f:f6:aa:d2:b6:1e:b1:49:66:6a:cc:b1:e4:c7:87:
88:74:12:90:a9:7a:8c:7b:39:90:c8:15:16:fa:8f:
61:5c:45:a0:8a:b5:4d:a8:ba:ef:34:8c:54:c5:83:
bd:1e:e1:71:5a:96:19:5c:ef:0d:e8:d6:e2:08:27:
8a:8d:9d:dc:dd:80:bb:98:9f:f7:1c:00:28:ef:9b:
7f:d3:c4:c8:7b:1f:58:6e:2b:ca:4a:ac:d3:f1:ca:
e1:80:33:6c:9c:77:bb:f6:22:30:5f:bf:c2:b7:ca:
9f:16:95:be:14:83:c4:c9:37:ca:3c:6f:af:c6:1a:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:93:F5:B8:01:52:2E:08:A5:DA:BD:BD:07:DC:93:9F:F0:53:27
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:ed:26:51:48:23:4f:09:0f:91:68:32:93:0a:d7:83:15:
f7:8f:f7:74:e9:01:35:74:96:29:eb:df:5d:a7:73:e5:a7:fa:
94:49:7a:8c:7c:44:54:3c:15:ad:b1:2b:9b:5f:06:8c:0a:27:
f8:56:73:81:01:66:5e:f6:e2:3d:c9:e0:6b:3d:72:b1:07:4a:
91:43:24:f9:42:65:a5:66:28:95:6c:6f:99:99:51:a9:d0:a3:
6b:b3:77:43:40:9b:b7:eb:a5:ca:13:a9:03:f1:26:2c:20:80:
2c:db:ac:dd:11:14:b6:03:c2:f5:aa:f1:db:68:dd:87:dc:67:
73:30:d9:ff:bb:ad:65:9b:d4:01:f2:f4:2a:fd:a9:70:6c:ca:
5b:b9:47:a3:2f:84:f7:6e:be:74:83:99:38:06:43:8d:9a:2d:
80:8d:6f:d1:05:c6:20:d3:c0:8d:7c:a7:14:9e:61:3b:8f:e1:
26:56:a7:06:25:19:cd:ca:2d:d2:ba:e0:c4:76:c6:56:a8:14:
1b:59:f8:ba:83:be:3a:27:1c:ab:b6:86:a5:24:8b:67:3e:20:
04:b9:da:b5:a4:4e:bd:e5:a5:65:87:10:a1:fe:75:0e:e0:65:
8a:6a:f6:90:02:fa:22:aa:ae:bf:11:63:0d:1d:9e:94:69:ff:
60:2f:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:21:31 2026 by rpki-client