Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
File: AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft (raw, json)
Hash identifier: E3t/JKBMLIgRvRnBLLuQakqE/L1z4ETai8DGPzX5YQ8=
Subject key identifier: 7F:10:73:65:D9:FB:6A:38:36:40:30:B2:CB:F4:50:86:E8:2C:F0:6F
Authority key identifier: 01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
Certificate issuer: /CN=010600be698c1ab97863ce5915911265cb5a3c9f
Certificate serial: 01A0B508B53A12D827AA3F649100F4A0685E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
Manifest number: D7
Signing time: Fri 18 Sep 2026 15:00:41 +0000
Manifest this update: Fri 18 Sep 2026 15:00:41 +0000
Manifest next update: Sat 19 Sep 2026 15:00:41 +0000
Files and hashes: 1: 7BjvQpy7047hVApDh8x9Qe4DOoo.roa (hash: kKvjJ/MF8w1jZR9VtACZyBX/W/6HjlaX9dgOqUUswo4=)
2: AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl (hash: clB866tNuipYPbMfau4tRNew9iJEPu5ZakZhV5dHj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:08:b5:3a:12:d8:27:aa:3f:64:91:00:f4:a0:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010600be698c1ab97863ce5915911265cb5a3c9f
Validity
Not Before: Sep 18 15:00:41 2026 GMT
Not After : Sep 19 15:00:41 2026 GMT
Subject: CN=7f107365d9fb6a38364030b2cbf45086e82cf06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:b2:c5:0f:f1:63:7e:86:81:68:4d:17:19:
14:57:86:91:75:34:de:35:2b:a8:d7:e7:bc:ee:f0:
f7:cf:90:7c:f8:10:1c:35:cd:c3:f7:b3:6c:e9:54:
ed:df:4a:06:05:b3:15:28:12:14:4c:00:bb:a7:70:
f1:e0:b3:f7:d7:84:f0:ca:dd:e1:7b:a2:4a:c4:f4:
08:2d:c4:53:8f:b0:a4:ca:8e:95:93:f0:ff:c4:21:
e3:a9:8c:82:62:35:27:6c:8c:36:3f:a8:85:b1:7a:
f0:5d:66:51:2c:89:93:c6:e7:2d:45:00:ef:ee:62:
fb:69:07:99:83:f5:71:1d:a6:c1:19:25:99:1a:ce:
73:34:cf:2e:d8:f1:e9:bb:05:19:46:7e:d4:4f:30:
ca:1e:f1:0d:84:3a:2c:ce:25:3e:4a:94:ed:0a:f7:
aa:99:33:b6:57:0b:80:9a:a9:35:0e:ea:31:98:15:
fa:81:40:53:85:84:64:ee:22:11:2d:80:cb:9e:98:
14:68:24:a1:8c:eb:84:b5:c8:e3:b3:a2:0c:11:17:
ab:57:44:84:69:79:cb:11:73:84:b5:56:e1:5e:ed:
91:a8:05:53:43:6a:39:e5:c9:e4:2c:d0:e2:a6:ea:
22:a2:99:3d:1a:69:8f:6d:c5:f8:33:25:12:ba:f1:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:73:65:D9:FB:6A:38:36:40:30:B2:CB:F4:50:86:E8:2C:F0:6F
X509v3 Authority Key Identifier:
keyid:01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3a:00:a2:18:b3:7c:54:c7:31:a1:90:24:2f:14:f1:1a:3d:
83:58:1b:5a:dd:8d:dd:d8:6e:51:4b:18:e1:be:da:6c:d6:13:
d4:90:2d:ba:33:8e:0b:4d:95:75:65:c9:ed:f6:11:26:b6:c7:
aa:4d:f5:5a:fc:66:73:95:f2:72:8a:f6:49:df:9c:43:b0:a2:
de:c1:2e:a8:84:39:d4:a2:b8:27:d5:d8:85:c1:a3:5b:31:59:
c3:df:6d:b4:7b:c1:9d:40:60:9f:8f:60:2f:b4:71:57:3f:ea:
47:5c:15:8e:13:55:8c:90:ca:d5:c2:89:12:42:5e:9c:d8:34:
30:3c:9e:46:2c:81:cc:97:c6:f7:2a:7c:f9:a6:fc:03:2c:7a:
71:14:43:36:67:c7:9c:ca:0a:d0:e3:61:b0:14:1b:03:8f:20:
bc:98:f8:c6:20:db:ee:9c:44:33:6f:c2:e8:f5:a0:7f:2a:fd:
c9:51:24:8c:91:d2:92:41:94:3d:e9:38:40:bf:b3:b9:63:ad:
28:fc:94:6c:98:c5:2a:10:cd:b1:b5:7f:a9:91:d1:aa:89:26:
18:0c:bd:2b:15:0b:a0:fc:63:a0:64:2e:fd:97:7c:44:26:2b:
ed:cf:f4:aa:14:20:5b:a8:c7:7c:10:86:24:68:5e:ac:38:ef:
31:4b:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:07:47 2026 by rpki-client