Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: xTAaaaLl2DOJobkNf97I+PUW4yKWBwPl0jUwzHZLSkE=
Subject key identifier: 90:D1:DE:E9:9B:38:C8:49:94:9C:BF:81:99:EA:E1:9A:40:9C:6F:4D
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01A001A5D560241EAC232FC6CB81F6B36957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 171B
Signing time: Fri 14 Aug 2026 19:00:40 +0000
Manifest this update: Fri 14 Aug 2026 19:00:40 +0000
Manifest next update: Sat 15 Aug 2026 19:00:40 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: t3K2R9EvOXXlv1BeCb4m0dX8WccHh/7URydLRnU8MH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:d5:60:24:1e:ac:23:2f:c6:cb:81:f6:b3:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Aug 14 19:00:40 2026 GMT
Not After : Aug 15 19:00:40 2026 GMT
Subject: CN=90d1dee99b38c849949cbf8199eae19a409c6f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:13:e5:df:16:7f:d5:c8:27:51:2c:1c:8a:
c3:72:4e:f2:e5:76:99:9a:fa:c5:4f:5a:61:f7:7f:
6b:da:cc:60:d4:71:c8:5e:07:6f:14:0f:72:60:14:
9e:20:b7:3f:91:f2:f5:60:c4:7e:b2:9c:e5:33:78:
f3:2c:1d:ad:b5:6b:79:86:e5:f7:3f:97:c0:db:94:
71:47:b1:e7:22:13:ac:ac:0c:0b:33:04:2a:b9:a5:
20:fc:ee:1b:2a:25:73:d3:70:ae:c0:b7:86:87:6b:
57:9c:b0:6f:94:c2:5f:9f:6b:f4:e3:57:a0:ff:1e:
04:87:58:2b:44:a1:6c:9a:6f:34:34:05:78:27:3c:
ff:30:d9:f1:12:6c:e1:65:68:af:fd:e6:15:07:f3:
4c:bd:34:30:50:52:f9:a6:59:95:e5:b6:05:6e:e3:
bd:21:42:74:fa:07:2f:5d:92:58:7d:e0:77:9b:b0:
1b:23:68:a4:18:8f:f2:38:6a:55:bd:9c:3e:83:ab:
a5:ef:d6:31:0d:9d:39:e3:b6:75:f8:b4:34:30:8c:
7e:7f:29:6a:fe:14:7a:86:bd:75:d6:52:47:0d:08:
8b:60:90:34:d6:ae:bb:4c:5a:75:20:a1:64:9a:72:
65:ff:da:52:62:be:54:2c:4d:a1:68:ac:0c:2d:59:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:DE:E9:9B:38:C8:49:94:9C:BF:81:99:EA:E1:9A:40:9C:6F:4D
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:70:57:52:90:56:3c:a0:b4:70:eb:85:63:44:d2:0c:fb:a6:
9d:c1:87:2d:84:2c:1f:25:98:e1:0b:df:4a:63:7a:10:98:6d:
90:fd:73:e0:d3:ec:6e:8a:f5:1a:9a:15:df:c8:22:c5:57:9b:
0b:c1:20:26:c9:46:e3:54:29:1c:d8:35:01:0e:5b:c5:47:58:
0d:a1:c4:3d:d2:7c:cc:8a:ee:e0:fa:36:fd:9a:86:23:0e:36:
e9:e9:07:bd:99:37:b7:15:79:c9:ef:89:05:9d:c3:a7:76:d5:
d9:73:a2:d7:ec:ec:a9:b0:f8:6a:ff:2d:81:26:66:34:de:19:
a1:f4:24:4a:c7:e7:20:e5:ab:2e:17:e4:45:7d:ba:1b:2d:d1:
90:2d:d3:01:5e:34:0c:b4:a5:53:ce:22:10:6f:e5:8d:0f:ff:
17:0c:79:04:29:a1:96:86:7e:64:ad:36:e8:ef:f3:a1:86:27:
1b:59:d3:27:23:67:7d:ec:86:7c:a3:9a:79:f7:91:23:2b:45:
45:e7:c3:cd:a2:45:25:be:6b:82:28:a1:90:18:5e:d1:20:57:
ee:5a:b2:27:7c:bb:c0:5e:30:4b:05:9d:b3:9f:b5:34:a7:2b:
98:11:1e:ae:28:c1:ea:73:cd:d8:34:b5:12:dc:39:4e:7b:33:
eb:32:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:53 2026 by rpki-client