Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: cx7cryMYK0wCmkuPK6vZkTDOnS92ytaT2pn4lngEchg=
Subject key identifier: 14:AE:A0:8E:7E:97:FE:7D:06:7E:81:C9:CB:31:0C:3B:A0:92:3A:39
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 01A08BD65CB9A457AAFB799A7085C9C032E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 0430
Signing time: Thu 10 Sep 2026 15:01:16 +0000
Manifest this update: Thu 10 Sep 2026 15:01:16 +0000
Manifest next update: Fri 11 Sep 2026 15:01:16 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: 63Dxd5igY5VQZm/v15tjw5YubD0Bg3pgwepZV2qpXQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:5c:b9:a4:57:aa:fb:79:9a:70:85:c9:c0:32:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Sep 10 15:01:16 2026 GMT
Not After : Sep 11 15:01:16 2026 GMT
Subject: CN=14aea08e7e97fe7d067e81c9cb310c3ba0923a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:a6:9d:ca:72:a3:36:33:b4:e5:ef:1a:52:
74:1f:93:8a:5f:50:1a:0b:d3:8d:08:27:23:13:a7:
88:31:6c:92:02:6c:33:6b:f1:8b:7a:49:8a:77:19:
f1:c1:a4:00:f8:f9:13:c2:40:4f:1e:6e:72:6a:f1:
6b:14:bf:7e:57:dd:a9:03:23:33:0a:53:50:80:d6:
ec:31:2e:72:2e:33:39:53:40:de:c0:0f:4d:c6:2e:
e6:f5:8c:ba:04:70:bf:76:3d:5e:53:4d:b0:7d:09:
39:96:13:0f:47:1f:d3:a8:9f:d9:3b:d6:45:4c:d7:
7f:f6:75:73:dc:ab:21:70:99:d3:c8:cd:7f:bc:37:
9a:68:71:bd:1c:0f:4f:87:c8:30:ae:4c:44:ce:ad:
73:4a:47:a5:ee:c6:94:80:dc:b6:bf:b9:52:3b:c8:
06:c3:24:c4:cc:03:5f:b4:6a:82:3f:50:75:f9:8a:
34:e1:47:9f:e7:23:b4:2a:b4:ec:1a:5b:33:d9:c4:
9a:29:80:26:bd:c0:1b:31:5d:42:0a:75:28:92:74:
d0:73:14:20:db:a7:4f:dc:34:d8:e4:b7:6c:1d:e1:
0c:e6:e1:c5:3c:93:bb:e4:61:5b:ad:42:36:7b:a8:
73:84:ff:74:83:57:64:87:93:66:47:2d:49:ad:2f:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:A0:8E:7E:97:FE:7D:06:7E:81:C9:CB:31:0C:3B:A0:92:3A:39
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:74:e1:f6:71:d0:23:4e:7f:4b:cf:8c:39:62:0b:5c:a3:
21:69:4f:05:0d:13:57:43:08:70:79:20:a4:0b:41:5f:6c:91:
1b:66:f7:39:1b:a4:23:ad:67:b8:65:83:64:41:2c:8f:ac:ac:
08:4e:bc:a5:e1:1e:74:dd:e7:17:79:fc:9c:eb:ee:cd:0b:b9:
7e:ec:0f:3c:8c:1b:67:11:31:71:89:ad:22:a3:42:20:f1:ee:
b9:61:0b:1e:05:80:e8:04:57:b2:0d:c2:26:b3:0d:98:eb:0e:
1a:d0:8c:27:a7:42:e8:13:9b:42:f9:b1:ae:c3:f5:c7:cc:78:
2f:61:e6:51:9d:71:43:4c:3c:9f:27:00:36:65:f8:b9:d7:ba:
c4:03:01:66:7d:e8:26:6a:2d:6a:d6:47:ac:c0:02:37:18:89:
ad:79:4b:00:6b:c0:9b:73:43:39:a1:ff:1b:00:71:f0:7f:65:
56:2f:f6:96:98:09:e1:88:b1:76:b8:8f:2b:38:95:88:b8:89:
d7:e5:f2:7f:67:ce:9c:d5:f5:d2:0e:7b:92:80:36:d3:2d:f5:
b1:5f:81:ab:78:0e:dc:1c:27:99:32:93:7c:67:ce:bb:c0:73:
7a:82:04:0f:3a:02:2c:40:7a:50:8d:71:b7:4d:41:5e:4d:69:
01:37:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:21 2026 by rpki-client