Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: Hy/5WiUJI0U6u3epLzjtNp92bpMU2kF4nxKvLlc/CrQ=
Subject key identifier: 08:2A:81:81:83:D2:96:85:77:42:B0:80:43:87:02:E1:9F:24:04:94
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019DDC5544EBE798AB0233C9CCEB47B359EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 06
Signing time: Thu 30 Apr 2026 03:01:08 +0000
Manifest this update: Thu 30 Apr 2026 03:01:08 +0000
Manifest next update: Fri 01 May 2026 03:01:08 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: e52NrBgDRYkohvgJWQfCzF2tJZLXEgDbqDBIDsASpXg=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:44:eb:e7:98:ab:02:33:c9:cc:eb:47:b3:59:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Apr 30 03:01:08 2026 GMT
Not After : May 1 03:01:08 2026 GMT
Subject: CN=082a818183d296857742b080438702e19f240494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:b1:64:36:b1:33:77:e2:79:8a:b5:be:ae:
d1:57:75:b5:c2:f8:f5:2d:9b:e8:df:0b:7c:74:59:
33:75:18:07:47:0c:d4:c8:35:2a:85:fa:46:42:ab:
ad:a0:71:cb:c9:65:f0:cf:be:21:4c:da:4d:13:89:
14:dc:fb:25:ea:08:5c:61:91:1a:7a:fe:af:d7:18:
af:94:9e:7f:c3:2a:f2:64:07:30:c5:cc:bd:95:4b:
e3:ea:62:4d:b1:ee:41:62:3f:ab:66:d1:d1:ed:fd:
64:6a:fc:23:f4:11:16:f5:f4:49:93:d0:86:ff:b0:
fe:bf:e4:c2:b3:89:00:43:ee:5e:6f:d9:6e:9f:3a:
41:16:df:46:2f:c7:cc:54:da:44:7b:f1:0e:ef:48:
d4:1c:76:5e:e7:c0:ee:1c:05:b4:57:56:69:73:9f:
e2:23:49:c4:7b:2c:8e:26:6c:56:3e:13:3b:e3:1a:
b1:24:5b:78:ed:e6:87:c3:96:94:c4:86:8b:b3:40:
4e:f4:84:f2:bc:df:93:6c:3e:79:90:82:68:82:5a:
c8:d0:5f:05:70:ac:33:da:e5:43:82:50:24:62:1b:
22:55:c9:0f:0c:fc:f3:bc:bc:8b:87:65:39:08:87:
23:d1:87:d5:07:de:4c:12:aa:74:5b:dc:e6:9d:c4:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:81:81:83:D2:96:85:77:42:B0:80:43:87:02:E1:9F:24:04:94
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d7:bd:66:b6:7f:1c:49:db:f2:aa:0b:bb:c7:09:b3:28:e6:
a7:75:ef:36:f5:a1:76:a4:91:ea:8e:56:a7:00:78:57:61:5a:
71:2d:e2:99:4c:a3:53:21:aa:c1:24:11:28:07:bc:f2:56:2e:
7b:33:92:db:ad:36:3e:2b:43:52:1e:d2:b9:8c:69:eb:5e:a5:
0f:f1:78:74:7e:5c:ed:44:fe:64:b1:5f:d6:93:e9:75:57:1e:
5b:32:e0:03:f7:1f:05:d7:f3:40:b1:a9:47:66:70:d2:d6:25:
ba:21:7b:55:76:e1:61:01:94:98:6a:e1:c9:53:3a:99:42:32:
f6:c6:ae:18:d8:24:e3:f3:95:37:1b:47:a5:21:fb:31:6f:54:
89:9c:5d:f7:53:f3:f5:89:f8:2c:85:f3:26:90:ea:09:96:0c:
01:86:d9:2d:a7:b1:75:42:4f:d9:04:bc:f0:0f:91:ac:04:48:
db:22:bb:1e:e8:8e:34:a1:85:6b:e0:0c:54:39:a5:ff:61:6b:
31:38:9e:56:e1:1c:99:99:87:df:ae:ee:1d:c6:73:20:01:90:
99:da:bd:20:5d:88:62:75:9f:2e:6d:83:7c:2d:a5:d5:9d:a9:
32:27:63:be:f3:82:ca:e8:a1:7c:16:93:87:6d:62:06:95:f7:
67:83:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:39 2026 by rpki-client