Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: wYG+zUopLua5BDocT5Yx0Ze6PTTM/yyoTVREzgU6VzA=
Subject key identifier: 90:51:43:0A:93:BB:D2:C1:8B:62:80:75:47:23:37:AA:F1:E0:8B:8D
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 01A174024C1648625D6BAE131EDE6000C6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 039E
Signing time: Sun 25 Oct 2026 17:01:09 +0000
Manifest this update: Sun 25 Oct 2026 17:01:09 +0000
Manifest next update: Mon 26 Oct 2026 17:01:09 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: SM+VKMQRZTLgXox/zTvuXUFAaA/g1L+R4mSvVYgqr8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:4c:16:48:62:5d:6b:ae:13:1e:de:60:00:c6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Oct 25 17:01:09 2026 GMT
Not After : Oct 26 17:01:09 2026 GMT
Subject: CN=9051430a93bbd2c18b628075472337aaf1e08b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:45:6e:e5:f0:b6:2b:08:76:32:e4:90:ae:
60:3c:40:b4:cf:50:e5:a7:c4:2f:86:18:da:6c:e6:
73:2d:6a:bc:96:e2:e3:3e:b1:00:7f:46:c9:c2:df:
ec:6a:8f:42:98:6c:ef:59:b4:92:b9:08:bf:5c:89:
b1:92:c0:e6:25:b9:59:1f:2b:0e:6f:d9:fa:23:e5:
43:56:d4:31:3e:af:ab:62:c3:7d:6a:ba:ce:e1:e0:
c3:5a:a9:9e:7a:7a:70:f0:ef:27:e1:86:80:48:eb:
d9:b5:fc:6c:db:54:5c:91:52:c7:8a:84:bb:24:77:
ae:d7:31:06:eb:d4:f3:0e:d8:ae:6c:34:c3:ee:af:
1c:70:b6:bb:0b:46:fd:b0:83:9d:74:74:2e:20:07:
ef:8c:0a:72:56:2e:d6:bb:a6:65:12:28:4e:f4:bb:
ef:de:11:7a:58:ef:80:4a:8a:3f:6f:6c:77:c6:c6:
87:93:15:37:08:61:f8:52:40:1f:08:64:ac:34:c0:
d9:01:25:90:8a:f4:c1:8e:39:db:b5:39:04:26:9a:
6a:ce:74:14:ee:01:5a:e6:bd:d1:a9:29:2c:15:10:
ba:79:52:1f:e4:fc:1e:13:7c:9f:5e:bb:eb:ce:b1:
66:3b:7e:3c:23:dd:38:57:49:dd:ae:e2:fb:20:b2:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:43:0A:93:BB:D2:C1:8B:62:80:75:47:23:37:AA:F1:E0:8B:8D
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:8e:96:fd:0f:bc:4b:98:6f:85:ff:9a:f1:03:a1:0d:40:
06:e7:5b:8d:93:de:32:dd:81:e3:08:95:dc:a5:39:42:65:78:
c4:d0:f0:e8:97:ab:0f:f4:ea:b5:8b:57:fa:b2:e9:9f:43:fc:
e9:a5:c5:14:52:59:c0:e5:55:fe:e7:5a:d6:44:62:18:75:87:
b3:5b:ad:d6:9d:ad:3a:d5:60:7a:73:93:e7:67:1a:63:cd:74:
7e:24:7e:65:fd:49:83:a0:89:51:7c:e0:af:d7:f2:13:e4:1a:
59:f4:44:a5:f1:aa:d4:84:4c:4c:c1:7d:11:32:d6:b2:05:96:
73:1d:37:a6:69:ef:85:ef:b1:67:ad:a7:65:df:18:6e:d0:4b:
24:0c:8d:b5:46:f9:4b:bc:10:03:33:3a:48:11:d0:31:c3:77:
d1:d9:b0:16:7d:fa:04:61:03:94:d0:92:90:81:8b:ad:82:ec:
de:a1:ff:67:21:5c:7e:0e:ce:55:65:b0:21:af:ac:60:11:92:
d3:ee:61:7e:a9:38:cd:3b:74:ac:8b:20:e8:ae:11:f1:58:32:
a7:1e:4c:f8:82:69:68:07:55:93:fc:5b:d5:a6:37:d4:7b:8c:
77:7c:09:3d:7d:a0:45:2f:7d:b0:48:2a:99:1e:98:c5:5d:78:
4e:3f:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:34 2026 by rpki-client