Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: JaY4mae/LeSIBE7cqSndiZPspxUsXEvuKxemApi2RI8=
Subject key identifier: AF:AB:D1:7C:48:BF:08:3C:CA:12:5C:CA:F6:86:71:92:93:3A:A1:BC
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01A089B0DDF039A0207E26C52FD563F84FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 173F
Signing time: Thu 10 Sep 2026 05:01:04 +0000
Manifest this update: Thu 10 Sep 2026 05:01:04 +0000
Manifest next update: Fri 11 Sep 2026 05:01:04 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: mC2FKk9r0kQ+1xzKrlUmHgmT4tVypyouX+42RR3pHIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:dd:f0:39:a0:20:7e:26:c5:2f:d5:63:f8:4f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Sep 10 05:01:04 2026 GMT
Not After : Sep 11 05:01:04 2026 GMT
Subject: CN=afabd17c48bf083cca125ccaf6867192933aa1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:67:88:e9:d5:4b:24:4f:b2:2d:f0:50:63:
13:fe:13:1f:6b:62:79:e1:70:d7:ef:f1:cb:db:c0:
0a:6f:b6:96:84:46:9f:7c:05:0f:9e:e1:a5:14:ee:
f1:1c:3f:da:bf:41:64:06:5b:6b:c6:95:c9:dd:50:
44:06:7a:6e:0e:f8:20:d5:b7:3b:e5:e8:73:d9:20:
42:a3:d6:5c:6f:9d:ad:cd:e8:d6:17:79:5b:c1:cb:
e3:52:a9:c8:62:d4:83:c3:23:f0:71:5d:8d:38:2e:
e0:38:25:be:46:19:4e:4a:bf:32:b3:c4:98:e1:3f:
fd:38:48:35:99:57:a4:b0:ab:77:fe:24:67:59:e3:
8b:66:2e:e8:ec:a4:5b:e7:13:3e:1f:7b:aa:9a:76:
43:07:5c:1a:c7:4c:21:7c:8b:04:42:43:ed:77:e4:
ea:9d:84:c4:b7:a8:6a:9f:57:0d:e2:fa:1b:61:e2:
eb:89:72:09:1a:79:65:d2:c7:0e:5a:6c:c5:d0:1b:
d5:40:ae:d2:9e:26:ca:d4:fb:55:2b:18:da:3f:b0:
16:b2:ec:35:f7:fa:d8:9c:0a:34:90:c4:8a:d6:2e:
f1:47:af:52:28:9d:19:95:45:af:de:5b:fe:68:ff:
4c:f9:79:09:45:cd:17:16:d5:83:02:96:30:73:bd:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:D1:7C:48:BF:08:3C:CA:12:5C:CA:F6:86:71:92:93:3A:A1:BC
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:10:58:38:cc:7e:41:b3:1c:5a:73:70:72:94:ab:51:e3:f6:
aa:f2:af:7c:e9:70:21:62:1c:df:ce:d3:fc:79:fe:c9:e0:f0:
17:31:0e:d4:47:07:92:f9:b5:0f:d2:b8:0b:ec:e1:36:e8:6e:
2c:86:d8:36:78:89:06:00:ed:cc:14:39:ad:39:1e:a4:5e:5c:
9f:a6:9e:bb:b7:3e:c8:f5:17:67:c2:7a:78:2d:7f:92:32:9b:
c6:c0:e2:1d:2e:8d:a0:db:51:79:19:47:03:6e:a0:53:be:ea:
d0:9d:6a:ec:08:f9:0c:27:5f:47:72:fb:ef:62:3b:5d:77:88:
67:fd:9f:04:64:d1:3a:9e:dc:63:a9:3c:e5:d3:ae:6f:69:3f:
fb:3d:1e:ee:7e:d2:b2:e9:c9:02:5d:5e:ca:23:4c:ba:4c:fd:
f4:9c:67:60:ca:55:7e:18:d5:1d:f2:aa:fe:ef:58:b3:29:56:
11:37:2e:95:67:ac:7a:48:bb:6c:78:01:c7:76:2b:60:3a:f1:
2f:3f:76:a9:d8:59:7c:f8:84:53:78:73:b1:44:5b:72:65:ce:
68:88:62:e8:e9:d6:ab:4a:c6:e0:64:97:ca:20:ce:50:30:d6:
00:5b:6c:7b:34:6f:e6:46:24:d9:9d:e1:1e:9f:e9:4b:96:fc:
92:fc:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:04:21 2026 by rpki-client