Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: g7AnoEb7gWrmqq4toCerLfXJmet3JhPSioS/5peHZfg=
Subject key identifier: 95:51:C9:DD:0E:63:DB:47:FA:58:B4:55:DE:B1:36:BA:8F:D3:E8:60
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 01A183075743C39893B743FD0FE0E63EEA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 01EA
Signing time: Wed 28 Oct 2026 15:00:58 +0000
Manifest this update: Wed 28 Oct 2026 15:00:58 +0000
Manifest next update: Thu 29 Oct 2026 15:00:58 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: 3vBzNQ8zSPJIhrSCO5hqkVMqfjQgR8COMidSSphthXo=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:57:43:c3:98:93:b7:43:fd:0f:e0:e6:3e:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Oct 28 15:00:58 2026 GMT
Not After : Oct 29 15:00:58 2026 GMT
Subject: CN=9551c9dd0e63db47fa58b455deb136ba8fd3e860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:e8:cf:04:a5:c4:71:8a:c3:9c:fb:6a:64:
26:17:dc:3a:7d:7b:ef:df:2a:b0:75:dd:8a:6e:47:
2c:ca:56:23:08:89:b2:ac:a6:15:39:d9:65:ad:6b:
31:2d:dd:27:54:f5:63:81:81:4a:1b:6d:45:07:06:
48:e6:75:74:ed:15:23:7a:67:07:1a:e9:0b:a5:ae:
d4:53:1f:db:a8:9a:ec:28:19:23:06:9a:6f:f5:84:
e8:8f:28:0e:36:f8:37:32:85:1b:4f:62:75:61:82:
32:60:00:b0:0a:d3:93:d5:e5:81:87:68:7b:9c:a1:
ae:e5:fa:c8:4d:ec:88:bc:27:5e:a1:bb:d1:fc:16:
5a:23:70:9d:e0:b1:2f:7f:e5:59:9e:94:83:47:4d:
26:7c:39:8e:de:5c:24:c4:c1:4b:03:86:a6:e7:1b:
94:ef:52:74:8d:5e:e5:7b:e5:a0:60:10:a2:84:99:
87:d8:85:0a:70:72:2d:52:f9:f1:8b:b1:37:d5:ac:
c7:b4:84:ff:f9:78:9f:68:62:11:c6:8c:d5:4f:63:
2e:e2:68:87:47:70:c7:b3:2f:31:56:de:5f:2e:6f:
35:dc:20:6b:60:49:8e:7e:36:8b:63:6f:0d:e0:9b:
79:20:18:7a:75:a6:d0:cf:39:83:87:86:f8:43:0f:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:C9:DD:0E:63:DB:47:FA:58:B4:55:DE:B1:36:BA:8F:D3:E8:60
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:9b:20:ac:87:e8:1b:d7:17:32:5f:15:3e:b4:16:11:21:
a6:b8:5d:37:2f:9e:25:9c:4c:f2:04:22:9d:f6:23:f5:ab:36:
76:a1:0c:29:41:2d:4e:3c:3c:ad:b3:a6:8f:48:82:a0:59:7b:
03:a9:cf:8d:f6:9c:b9:4c:48:1d:c3:c1:44:04:c3:c2:87:a7:
7d:3c:d0:29:e5:4d:10:a9:95:70:81:75:18:e5:57:53:83:07:
cb:6d:5b:b8:f2:8d:08:a6:e1:f8:87:fa:8a:21:98:b6:f1:0c:
e7:a5:75:11:f1:a0:d7:5f:2c:d7:a7:bc:45:f0:b2:ef:aa:96:
bb:f9:5a:b0:cb:5f:74:32:08:47:f0:fe:62:29:6d:cf:73:ca:
79:ff:2b:4f:ca:41:d6:61:0b:07:d5:df:dc:19:9c:b7:21:38:
29:60:8e:8a:c9:6e:cb:45:46:47:45:10:de:ae:7e:52:d2:16:
7a:8e:08:ae:de:0c:e9:93:4b:d0:a9:eb:91:e9:26:50:8a:cd:
01:54:61:c2:7c:f6:e5:ef:2c:df:1f:da:1a:1b:09:e4:96:8c:
67:c3:f9:92:5c:d1:0e:29:a6:9b:1b:60:04:c1:5e:82:7f:1f:
5a:d8:d7:6e:f9:67:ba:53:f4:49:67:ad:e0:4e:49:ca:74:37:
6c:4a:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:15 2026 by rpki-client