Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: mRsEN8gxuoD5ZtT3lH6vex6kj7X2H8mo48UOyFedyGY=
Subject key identifier: CD:52:FA:24:C1:F5:DE:66:F0:A0:9B:61:E2:39:4C:DF:CB:A5:16:30
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 01A13DEECF114E22C9A78EBA92D684719D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 13DB
Signing time: Thu 15 Oct 2026 05:00:23 +0000
Manifest this update: Thu 15 Oct 2026 05:00:23 +0000
Manifest next update: Fri 16 Oct 2026 05:00:23 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: VdQ/LZN9aUGNCJksyIXa9jmxxd5wvuTKyZQn7W/dHs8=)
2: FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa (hash: duw06+xYQMFPNJS8Nqk1JSY0w1hNxbHtXY/z+S+qyJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:cf:11:4e:22:c9:a7:8e:ba:92:d6:84:71:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Oct 15 05:00:23 2026 GMT
Not After : Oct 16 05:00:23 2026 GMT
Subject: CN=cd52fa24c1f5de66f0a09b61e2394cdfcba51630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:6d:ed:00:a6:50:d1:27:1c:5f:6b:c5:d5:
b7:8f:41:55:1d:cf:85:cc:28:26:56:d8:96:c8:97:
59:44:ac:95:4d:9a:8a:8e:63:f3:9a:c7:9d:41:24:
9b:3d:8f:2a:c7:c6:2d:c5:5b:33:5b:30:6b:96:d1:
5d:00:be:76:59:29:60:d3:45:2e:7e:df:d4:3b:6a:
1e:fc:a6:26:33:07:a2:75:b7:b7:46:21:5d:f8:7c:
a7:2d:4b:18:c8:02:af:d3:10:e6:d8:e6:cc:94:18:
49:bd:60:fa:d5:76:f5:c7:99:6c:d9:c9:71:ff:d0:
d8:ff:6b:bd:d0:f5:4d:7d:33:bf:12:44:61:e0:11:
4d:5d:e5:c3:e1:19:4d:30:3c:82:c4:ee:90:a7:2b:
55:94:72:dc:9d:8f:1c:84:26:93:2b:49:2e:84:4d:
f6:85:39:e8:10:31:ae:a7:12:64:77:d2:41:b0:a2:
13:1b:31:f4:24:0d:9f:6b:1c:59:28:15:20:c8:fb:
67:4c:de:09:bf:be:70:75:36:b8:be:f3:0c:68:b0:
63:d4:d9:71:1f:e5:a2:15:5b:be:f6:87:98:84:ce:
86:05:07:14:05:2d:55:30:4a:6f:31:d8:ff:66:9a:
3d:e9:de:03:39:cb:64:b5:fc:fe:e0:c0:27:70:8d:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:FA:24:C1:F5:DE:66:F0:A0:9B:61:E2:39:4C:DF:CB:A5:16:30
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:93:6d:38:1d:e8:b8:e9:19:d7:68:d3:d9:de:f3:a8:be:
a1:bb:34:d4:f4:4d:eb:fe:f6:23:9b:79:db:0f:7c:a2:c7:87:
74:ec:31:f6:f7:4c:47:65:fd:0c:3e:97:52:47:ef:d0:8c:91:
29:8c:f9:7b:04:6f:3d:05:58:6d:46:2c:33:2f:4b:c1:2a:b6:
fd:9c:02:bf:12:40:e9:2b:69:1f:cc:23:f6:b8:7f:40:fc:c3:
08:e8:3e:91:02:8e:e1:e5:c6:07:46:7b:80:ca:ac:10:c8:f7:
ca:4d:86:a9:55:ae:89:a9:f8:56:a9:00:61:d7:e0:46:58:a9:
81:72:72:1d:03:4f:e2:0e:62:97:c7:a9:1b:8a:8c:bc:dd:d2:
81:d7:48:21:76:d1:9f:e9:f6:f6:45:16:ed:47:87:ca:91:56:
f7:9f:21:a9:92:9f:9f:7f:b4:c3:83:9b:10:45:d0:41:19:2f:
4a:45:b8:3c:ba:74:6f:bd:1b:a7:c7:82:2d:90:56:09:d8:23:
fe:fa:8d:5c:03:db:1c:12:fd:a3:14:13:82:87:b7:b3:21:0e:
c7:0f:c4:e7:e6:da:79:1f:69:55:f5:c0:28:f3:0f:87:9f:73:
ae:1c:c9:f8:76:d8:a7:fc:1b:64:4d:f4:57:be:9d:a4:cf:09:
f4:2f:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:04 2026 by rpki-client