Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: q4FLQp4KLzwSx+fcH8rRokhGOtNhqSi4GpPdiomDUu4=
Subject key identifier: 3C:4F:02:C2:EA:4F:DD:B6:E7:30:F5:B3:C7:3F:5E:FD:5F:A3:B3:2B
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 01A06D5DA6BD4970EE50A524CB160AED9EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0316
Signing time: Fri 04 Sep 2026 17:00:49 +0000
Manifest this update: Fri 04 Sep 2026 17:00:49 +0000
Manifest next update: Sat 05 Sep 2026 17:00:49 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: pgJZoSCSbq/rWTJ4cYiLbjkyySqZyQm/C7XiQsY5ka4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:a6:bd:49:70:ee:50:a5:24:cb:16:0a:ed:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Sep 4 17:00:49 2026 GMT
Not After : Sep 5 17:00:49 2026 GMT
Subject: CN=3c4f02c2ea4fddb6e730f5b3c73f5efd5fa3b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:ef:96:4a:26:8c:47:a7:00:6d:47:71:96:
93:04:bb:b4:78:80:22:99:9c:e3:08:e4:34:d2:c5:
21:73:90:cb:cb:53:14:82:9e:d5:36:6b:8c:1f:de:
12:d7:51:b1:58:7e:e2:b6:19:05:1e:b7:83:8c:77:
b3:e5:68:cf:4a:c1:54:ef:a2:9c:5d:9f:45:a6:37:
22:7d:43:a5:d9:49:bf:7c:41:ca:e9:c0:d5:e1:4b:
bd:55:ac:2e:ac:91:3a:1b:94:89:79:dd:43:ae:14:
57:1f:61:07:b8:71:26:e7:da:a0:57:98:f1:4d:80:
91:26:a1:6f:fa:32:14:4b:80:95:e3:20:7f:ef:c1:
2e:48:c7:f5:bb:ad:4a:08:a7:b7:fc:0c:33:66:18:
e7:51:4e:0a:8c:33:24:97:41:1d:1e:94:9c:8e:67:
e5:72:6c:4e:6e:8e:d8:c6:09:d8:61:6e:6b:02:4d:
e3:db:de:0a:7e:47:79:f6:1d:74:94:b7:45:db:85:
4a:62:a1:72:ea:54:e1:d4:94:04:8d:3f:84:8c:5b:
bc:df:b7:b9:24:2f:60:4d:8c:99:e9:f7:d8:b9:38:
f1:a2:b5:45:3a:48:bd:0f:dc:39:f9:36:8b:10:54:
09:f1:87:9a:02:b6:7a:56:dd:0d:7d:d1:08:50:3f:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:02:C2:EA:4F:DD:B6:E7:30:F5:B3:C7:3F:5E:FD:5F:A3:B3:2B
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:04:5b:dc:2c:a5:2e:e0:5d:51:3b:c4:f9:d4:12:35:e7:9a:
bb:2f:5f:a4:a0:28:41:e5:50:c0:62:ea:52:e8:eb:4f:5c:c0:
60:c2:df:04:25:8e:18:20:59:e1:2d:0e:f3:e1:3c:1c:12:84:
25:d1:21:a3:bd:b6:59:fd:67:c1:0e:ea:be:af:10:a6:b9:99:
bb:fa:c8:42:e5:20:c7:ad:00:29:ac:3e:fa:e5:51:69:38:4f:
0d:ce:43:76:62:7c:87:54:23:94:5a:71:a5:f1:5e:58:0c:40:
50:6a:c5:31:05:5b:44:e0:d0:6b:eb:f4:a7:c0:ae:c2:73:e3:
bb:02:61:e0:48:ea:86:2a:87:e1:2b:fc:fe:22:b9:92:64:84:
7d:d4:0a:8c:9d:6e:f8:3e:ae:67:c9:45:56:7d:a7:b1:76:0b:
2b:55:9e:e1:a0:ba:50:11:33:b0:90:5a:e6:f7:68:c6:d7:8b:
63:41:f8:df:75:14:77:78:55:a4:17:49:b1:0b:68:3e:eb:f2:
46:ed:2a:8f:ff:72:b0:6f:81:1d:a2:a0:d1:9e:22:81:7b:b6:
83:5a:10:49:75:61:76:72:ee:0a:bd:fc:7d:d8:1b:be:fa:af:
d3:26:2d:9f:08:b5:4b:11:ab:0a:ec:8c:2e:19:df:46:8a:59:
99:d0:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:27 2026 by rpki-client