Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: fYPULioagpvAYmXUQr1MYLOTEn4dCu71JUYY5+9p5Kk=
Subject key identifier: F6:4F:A3:1C:44:8A:C6:BA:7C:CD:5C:C0:E3:50:7C:6B:1A:A2:14:8A
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01A172819A5E5A614DEEB02B63C6C0D42F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 17DA
Signing time: Sun 25 Oct 2026 10:00:58 +0000
Manifest this update: Sun 25 Oct 2026 10:00:58 +0000
Manifest next update: Mon 26 Oct 2026 10:00:58 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: J16PEmdiPL8xtpWxjjhM5BqRfYF5Ht2fgWEvnEW+vNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:9a:5e:5a:61:4d:ee:b0:2b:63:c6:c0:d4:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Oct 25 10:00:58 2026 GMT
Not After : Oct 26 10:00:58 2026 GMT
Subject: CN=f64fa31c448ac6ba7ccd5cc0e3507c6b1aa2148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:c0:2c:cf:03:a5:5d:29:f9:fb:67:94:04:
27:c4:94:12:d2:d9:56:69:ad:9d:07:98:92:b0:f2:
06:21:32:f1:dd:0f:8a:44:b5:73:32:6f:6d:e3:47:
7e:ad:54:e3:19:c0:0d:29:86:6e:12:4d:29:39:7e:
75:c6:54:87:a3:40:e4:42:07:31:48:74:04:b8:78:
bf:bb:b8:f6:89:99:bc:b3:e9:4f:b8:7d:05:0e:cb:
6c:2d:c1:4d:58:87:80:9e:b7:ac:15:a4:b5:b5:54:
22:96:8e:73:df:37:1d:de:d8:90:8d:7d:c9:3d:87:
77:f0:3c:40:97:e6:9b:56:c0:f1:11:bf:d6:dd:88:
ff:69:f1:7a:c1:0b:57:1a:4d:27:95:d8:d6:10:2f:
21:cf:f9:69:fa:0a:26:2d:3e:4e:26:9a:f1:c7:ab:
a4:80:6f:39:57:8c:ae:18:9c:43:e9:15:74:da:6e:
b6:ab:b3:d8:e0:ff:f9:b5:7a:fb:ed:a0:64:eb:a0:
8d:98:ce:95:d3:6a:5a:f4:4b:37:ad:9d:7d:db:1e:
00:07:09:7d:ee:fc:18:af:18:66:ff:42:fc:d8:e7:
35:f6:fb:ae:54:86:26:47:f6:58:93:90:12:87:5e:
98:ed:d3:c2:39:cf:d1:b4:d0:bf:f5:e5:ea:ef:fa:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:A3:1C:44:8A:C6:BA:7C:CD:5C:C0:E3:50:7C:6B:1A:A2:14:8A
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1d:f4:d1:63:83:7b:78:d9:d4:8d:35:ab:8d:39:ed:56:1a:
c5:1a:a3:5b:5e:10:43:d8:44:c3:39:b9:55:2c:61:98:7c:a6:
5e:9e:02:8e:09:8a:90:33:81:d3:3b:bc:4c:f1:6f:0a:a6:e7:
43:14:ee:2f:46:d5:6c:9c:35:d4:58:25:a4:a8:d7:14:b7:a4:
f7:0f:69:92:65:e0:c3:88:5d:17:ec:c4:35:18:4b:32:bb:9a:
ea:c1:9e:5e:1b:f9:1e:1d:0c:90:e0:c0:fa:41:7b:53:b7:e6:
29:ae:48:13:f7:c0:60:ce:44:42:ba:79:d7:a8:36:7a:40:48:
9e:ec:70:3e:2e:57:a8:fc:23:be:b3:14:5f:f6:c3:20:63:06:
8c:06:c1:3c:9e:9e:a5:a5:4a:6d:b5:40:7e:34:d5:14:be:c0:
c2:87:50:97:c8:48:b3:02:92:00:eb:0d:61:51:cc:fc:f9:3a:
e4:15:f6:5d:5b:bd:1d:f2:7c:1b:69:77:ef:70:2c:c6:92:86:
a4:7f:ed:4c:b8:8e:11:03:a9:ef:d3:62:93:40:bd:a6:cf:7d:
dc:17:29:fd:0a:2e:e1:92:68:62:07:89:e4:ae:4e:b0:49:c6:
c0:30:dc:e4:b3:ee:06:05:56:b7:e5:5e:02:b0:79:a8:d0:10:
08:84:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:12 2026 by rpki-client