Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: UrOn4lBkcKW2xPAhGcJtsDKWiXJBQwrj73L05ztGFSU=
Subject key identifier: B2:CC:F9:DD:AB:8C:52:33:3B:B5:CE:A8:0A:2F:AD:D8:D2:FF:B3:4B
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01A180E29841706DB0B9B82B4BD3B751C290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 17BF
Signing time: Wed 28 Oct 2026 05:01:35 +0000
Manifest this update: Wed 28 Oct 2026 05:01:35 +0000
Manifest next update: Thu 29 Oct 2026 05:01:35 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: mTkuul1D5qYqBr4thVm1biDCs84809osk1OSK89nu/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:98:41:70:6d:b0:b9:b8:2b:4b:d3:b7:51:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Oct 28 05:01:35 2026 GMT
Not After : Oct 29 05:01:35 2026 GMT
Subject: CN=b2ccf9ddab8c52333bb5cea80a2fadd8d2ffb34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:6e:d1:0c:47:97:e6:f8:f1:e1:b1:59:ca:
e8:85:26:4f:7f:aa:89:5c:2f:7f:0a:c2:5d:d9:81:
10:34:17:85:b2:12:af:7b:de:8a:89:a1:1f:2f:2a:
1c:49:da:81:2f:fc:35:da:23:4a:ed:ec:b3:0a:b2:
61:4a:05:7f:f6:a9:ac:85:26:d4:c1:ca:29:87:bd:
6a:f1:3d:4c:a5:cb:6d:e5:e4:b7:73:a3:00:60:7d:
9e:a4:ab:94:90:39:7f:a3:cd:2e:24:9e:aa:53:60:
65:ba:9b:ab:b0:d5:19:55:72:7d:af:21:18:29:c2:
3d:14:25:ef:e8:90:c6:d2:7f:c9:e3:5e:18:f9:12:
16:d0:c4:d9:62:f3:44:31:ea:0c:5b:93:ff:57:04:
b2:a1:44:8c:dc:ee:61:62:93:b5:3a:a3:56:56:26:
1e:d3:ed:ca:d6:de:14:df:23:2f:87:c4:f9:25:82:
7f:b9:b5:ad:bf:d8:48:13:58:d3:c5:d5:3b:1e:20:
11:50:60:77:49:8c:31:0d:fb:f2:73:d0:a1:93:fe:
14:fb:36:8f:7d:15:8b:41:f6:92:38:0b:9a:8e:03:
59:62:91:a3:11:80:c1:09:1f:03:86:0e:04:e7:bb:
db:ad:4d:ad:c3:74:eb:38:d9:bf:26:de:1e:8a:80:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:F9:DD:AB:8C:52:33:3B:B5:CE:A8:0A:2F:AD:D8:D2:FF:B3:4B
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f3:02:c8:4f:d9:59:06:de:fc:1b:83:6c:94:38:9c:b2:f5:
da:f5:0f:7c:d0:24:46:91:82:03:16:40:96:6a:2f:5d:80:17:
5f:9f:88:44:b7:9d:cd:82:ab:cf:66:66:16:26:fe:04:44:f9:
77:d4:49:fa:7f:4e:3a:d4:71:06:0a:9d:31:87:85:92:51:8d:
59:8a:d0:8e:44:0a:e2:b4:7e:ac:14:cc:96:e7:c6:49:07:5f:
bb:bf:63:a0:6d:2a:bc:62:61:ea:4e:ea:38:d5:ac:45:50:19:
ab:81:f0:97:c0:d7:3e:df:12:44:23:a8:d1:22:de:72:5d:72:
02:09:7c:c3:20:99:e5:c6:9d:bb:16:e4:d3:f3:5d:3f:73:1b:
db:70:fa:29:b2:82:6c:22:74:0f:a3:95:66:6f:6a:aa:1e:0f:
28:c7:ee:78:48:f6:07:e3:cf:b5:12:f5:77:db:ea:8c:4d:4d:
57:54:36:6e:9c:5e:20:53:dc:ed:22:59:9d:d1:27:c1:8d:0f:
5c:b7:13:ee:c5:55:b3:c9:fe:87:fd:d0:36:b4:2a:e5:a3:a9:
83:5d:37:18:43:32:d1:a4:dd:d4:18:3e:33:c2:e1:a5:53:8d:
b0:bb:e3:8d:6c:a8:e9:05:7a:04:d4:b9:41:f9:53:fa:eb:93:
14:ee:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:10 2026 by rpki-client