Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: 37szJZrwdBlwOtTK7pZdQSAYtn90+H9gZezwPLh7zuI=
Subject key identifier: 0F:6D:65:69:1B:D7:6F:DF:27:81:0D:3B:47:75:57:D9:49:1C:CD:3E
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01A179967C60520ABF60DE9FC727168CA8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 19:01:07 +0000
Manifest this update: Mon 26 Oct 2026 19:01:07 +0000
Manifest next update: Tue 27 Oct 2026 19:01:07 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: BhoiA94c5w7Tm3E3SMTnEnV7MU6hARigi7XteXrnFQA=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:7c:60:52:0a:bf:60:de:9f:c7:27:16:8c:a8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Oct 26 19:01:07 2026 GMT
Not After : Oct 27 19:01:07 2026 GMT
Subject: CN=0f6d65691bd76fdf27810d3b477557d9491ccd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:03:07:80:90:b3:3c:b3:e2:be:53:d9:94:
f3:43:a3:8e:ea:15:5e:20:77:b4:f7:a4:17:e0:d0:
60:35:d0:67:09:c1:d2:83:e7:f1:3b:f8:f5:c6:35:
51:eb:74:b0:d7:96:da:75:74:6c:9f:a9:a0:e9:ee:
2d:29:82:c9:ba:9b:0c:6a:0a:e8:fa:db:73:36:2a:
07:44:1d:ec:17:0b:0e:6c:df:98:e2:25:71:4b:01:
31:ae:7b:d0:97:25:9d:4f:1d:da:ae:2f:53:0f:94:
53:ea:ee:d5:b1:3a:bf:a5:1c:4f:12:bd:9a:4f:f9:
6f:75:ea:e7:57:c8:02:a4:2a:e1:04:85:52:7d:24:
d5:32:19:e7:36:79:27:67:40:ad:a7:db:c4:d3:84:
15:a0:a3:49:85:6d:af:b9:84:55:21:88:36:e9:69:
cf:2b:64:50:db:fc:df:08:17:a2:48:3b:4a:25:58:
e8:4f:56:4e:57:6c:3e:2b:e2:66:93:30:67:04:67:
ca:5a:df:80:d1:b6:a8:29:ca:fb:3f:15:e0:b8:bd:
d0:b5:8d:90:6f:4a:92:66:23:6d:3b:8c:5f:bf:5b:
4d:26:fc:cc:b6:0a:ef:51:80:01:f9:0f:06:bb:95:
41:01:10:f0:5e:26:9a:1d:62:68:68:8e:43:42:44:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:65:69:1B:D7:6F:DF:27:81:0D:3B:47:75:57:D9:49:1C:CD:3E
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:95:e3:9b:35:6b:de:3d:c7:5b:ea:a5:4d:44:70:fe:88:76:
1e:b5:c0:86:27:08:f4:82:34:3e:68:59:77:23:d4:d5:98:4b:
43:25:f0:d3:b4:7c:6d:6d:45:36:35:c3:63:2f:dd:4f:1b:1a:
a1:f6:26:b3:2c:c1:ae:5a:a5:2c:0d:6a:95:12:a1:64:5d:1b:
88:63:dc:c6:a5:06:41:d0:ae:ad:bf:87:98:9b:a7:96:d9:d9:
51:c2:bf:0e:8f:bd:13:a5:ff:9a:15:91:11:54:93:c6:30:df:
d0:b7:00:f3:ef:f0:4e:eb:d2:e4:00:48:5c:5f:1b:6c:71:b2:
2b:d7:06:85:f9:3e:f9:ca:ac:78:34:36:c4:c7:44:9e:9d:97:
7b:3c:52:c6:25:31:b6:73:d2:94:68:7e:3d:c7:49:c1:42:35:
fb:f3:7d:b0:a9:93:ff:c9:eb:d1:ec:1f:39:56:e2:23:b2:a4:
49:de:2a:63:85:6d:23:a3:2d:e3:31:ed:fa:4e:09:97:46:ac:
16:fb:68:82:97:cc:3d:4c:ca:bc:bd:ee:f3:66:e3:31:b6:7b:
09:0f:f7:45:c1:3b:27:58:bd:d2:28:41:64:d5:76:b7:3c:12:
0b:34:66:88:5f:24:5d:e5:49:3d:c1:1a:06:cf:ad:1e:25:08:
b5:2d:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:33 2026 by rpki-client