Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: l/+5wPxoxz1ioAaVAidjipCXqkC9gwupWNL/1wHeDo4=
Subject key identifier: 60:E7:29:B0:AE:B3:CD:9D:29:6F:28:3B:94:CB:B4:1B:EE:B8:A3:9F
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 01A18419F67EE9CA8EEDB39931CC009139A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 0817
Signing time: Wed 28 Oct 2026 20:00:56 +0000
Manifest this update: Wed 28 Oct 2026 20:00:56 +0000
Manifest next update: Thu 29 Oct 2026 20:00:56 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: 39Dsy+seGIT41giFPbvtNOpg8XViRPI5YZ1/00xiphA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:f6:7e:e9:ca:8e:ed:b3:99:31:cc:00:91:39:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Oct 28 20:00:56 2026 GMT
Not After : Oct 29 20:00:56 2026 GMT
Subject: CN=60e729b0aeb3cd9d296f283b94cbb41beeb8a39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:6b:d2:fd:3c:bd:68:1e:12:8b:28:11:48:
8c:6a:58:6a:5f:4f:65:cc:1d:7c:7b:90:70:10:e4:
37:54:7f:b3:3f:dc:27:b5:47:29:af:4b:fe:9f:53:
f9:65:6b:20:81:34:9b:0e:56:c4:ba:39:32:1f:7b:
a4:4c:ac:53:fc:83:4f:2d:fd:ed:cc:da:67:c6:8e:
df:e7:4f:74:13:7c:a9:a9:93:f7:b7:96:12:72:70:
71:e2:fa:c5:0a:07:22:62:07:19:71:ca:6b:7e:06:
9b:aa:27:b2:5c:5d:21:6f:38:62:80:ed:df:07:65:
54:29:ac:02:cf:04:66:2e:06:89:01:2e:c7:91:a7:
a3:a0:08:11:c0:3f:d1:da:76:15:ce:81:35:70:15:
3f:95:f1:3c:2d:7a:39:50:39:40:64:ab:58:25:79:
20:3b:76:31:40:bd:1e:24:f4:51:c5:12:b0:ad:34:
54:71:08:71:25:1e:ba:15:22:fe:7f:c8:2c:f7:4c:
88:c7:4b:d8:9b:34:22:84:1d:cf:0c:8b:95:62:04:
8b:42:aa:d6:62:cc:19:d7:13:84:77:75:ca:e7:98:
a7:e0:7a:1a:29:03:64:f3:3e:34:57:b5:fd:87:14:
67:ab:27:0e:dd:7b:96:6c:30:59:0d:f1:67:7a:d5:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:29:B0:AE:B3:CD:9D:29:6F:28:3B:94:CB:B4:1B:EE:B8:A3:9F
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b7:29:eb:09:f4:57:29:d4:83:0d:94:af:d9:8c:dc:d7:7d:
fa:5a:19:93:d7:b2:38:5f:81:fb:61:59:da:5d:cd:27:a2:5b:
9d:ff:1f:1d:1d:5c:88:93:d9:04:10:dc:38:72:96:93:58:5b:
87:ea:f3:7d:f1:39:e9:be:17:8c:f8:87:c8:48:b1:19:9b:95:
79:4f:d0:68:4a:36:90:aa:ec:7d:aa:11:a4:96:b5:4c:af:07:
60:1c:e3:cc:df:eb:8c:e1:db:04:9d:16:be:de:61:b2:9c:87:
ee:30:da:a5:24:62:59:fa:b3:ee:4b:1c:f5:41:59:1b:29:98:
43:a2:bd:29:07:e7:20:38:5f:f3:35:5d:0b:97:cf:64:f9:bf:
21:7e:be:87:4d:e8:de:2d:7c:ca:66:cb:db:d8:85:37:5a:ff:
5c:17:fe:3b:fc:b8:99:39:62:97:de:d0:49:fa:e4:03:24:88:
07:af:f9:4b:f6:44:91:0d:e0:23:a5:6d:b5:b7:b3:47:14:04:
d5:25:83:1d:fa:d4:a8:55:d7:a4:57:c2:51:e9:f1:a7:72:a3:
56:d5:2e:ea:76:26:f9:2d:f3:5c:64:3e:0d:b9:9b:14:52:f3:
d4:7b:40:1d:9c:6d:a8:a1:14:1a:0d:60:0c:2b:1d:99:8b:9a:
87:d4:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:51:37 2026 by rpki-client