Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File: aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier: QCHFSZBFjJjW8G2ajNVvNGwzEWozyzQ5lOS3qPAdJVc=
Subject key identifier: 12:A1:A2:BC:85:B9:2D:84:52:7A:B8:7F:08:F8:BA:88:F4:1F:2C:21
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 01A06E02C18BCBE266DE580F357DE8BD7222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 20:01:09 +0000
Manifest this update: Fri 04 Sep 2026 20:01:09 +0000
Manifest next update: Sat 05 Sep 2026 20:01:09 +0000
Files and hashes: 1: VUWyLZ0rJ2KWNFwxw_bl1XOWT5Y.roa (hash: h6fu2o5gEs54ynuGXWVxljJh43rB4bmU8/bT0YsjVoE=)
2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: H6TNC8dC7o1+t152jiBONm3lgBw4AIDihJvn5LfMENI=)
3: tp0SOw0ReetfWj-1nSTTgqHkwxM.roa (hash: XzLhvr/WPwVDdpz3jGaEEAicJMQsJQFmkLSa5mS4sUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:c1:8b:cb:e2:66:de:58:0f:35:7d:e8:bd:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Sep 4 20:01:09 2026 GMT
Not After : Sep 5 20:01:09 2026 GMT
Subject: CN=12a1a2bc85b92d84527ab87f08f8ba88f41f2c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:ec:ee:f6:6e:dd:46:45:fd:7e:ea:d6:8f:
37:e5:84:e2:5a:6a:33:7a:d6:4a:df:3c:df:ec:1d:
a1:db:15:f2:bc:7f:bf:9a:47:cc:c3:a0:6d:5e:bb:
ed:a3:ec:c7:8b:ec:3c:bf:a6:51:25:3d:d2:c7:cd:
c7:39:2c:a6:e0:bb:45:b5:0d:2e:be:03:43:da:75:
46:77:62:c8:9d:fa:78:2d:13:7e:31:a0:21:2c:fb:
e3:e1:8f:8c:e5:57:db:11:41:64:93:e1:b9:84:a6:
ff:fc:cc:a0:2f:a7:a4:bc:77:ee:ef:05:f2:75:17:
75:3a:21:e8:a9:18:d0:4a:d5:50:9e:01:61:c5:43:
f4:e2:ba:f0:9e:b7:30:93:f9:b5:a1:c4:82:96:cd:
9f:60:4c:95:4d:d2:8a:cb:87:73:fd:ae:4e:91:ef:
07:1b:98:44:47:ad:69:a1:a1:e2:e2:0b:13:fd:af:
ba:c4:c9:b8:88:44:4f:88:42:34:a7:90:ee:5a:26:
4f:dc:67:08:7a:9e:61:ba:00:6d:43:4a:11:69:4f:
b5:fa:01:12:ff:fd:17:10:ad:92:d9:53:8f:b5:68:
76:50:4d:5f:76:66:a5:6f:f2:4b:03:06:c5:6a:70:
1e:d5:c2:e1:02:08:8e:d1:54:4b:3e:53:b7:e9:07:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:A2:BC:85:B9:2D:84:52:7A:B8:7F:08:F8:BA:88:F4:1F:2C:21
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:7b:0a:3e:a0:2e:4e:e4:6e:56:8a:70:7e:23:3a:28:13:
47:9a:51:55:ee:95:20:dd:5c:32:d3:78:20:2d:f8:1c:70:11:
98:b9:bb:9a:6a:11:f8:42:89:f9:ae:92:5d:71:80:7b:f4:bb:
46:7d:a6:14:e5:c1:08:9b:01:2c:cb:9d:d9:11:4e:c7:69:e3:
f7:ff:82:ef:7c:32:e4:03:ea:e4:bb:7b:c8:cf:b1:cd:bb:08:
b1:f4:1b:c2:6a:b6:e0:50:19:16:16:7a:84:d8:60:9b:bb:b3:
89:f5:8d:0d:63:31:3d:e0:33:0e:6d:71:2a:6f:50:6d:85:3f:
f1:e0:81:df:83:2d:d4:fc:a8:3c:52:5f:f1:62:0e:35:1f:68:
74:6e:1a:53:2d:f1:db:bd:09:3c:63:0d:4d:d4:a6:da:35:67:
9d:d7:25:46:94:ec:3c:ee:d0:1a:b7:85:da:e7:72:0a:2d:ac:
31:62:00:9e:c6:58:e1:8a:3d:ca:bf:f6:e0:1f:c7:c5:06:4d:
95:57:d5:bc:69:80:cc:92:21:f4:dd:bf:37:e6:ee:37:de:3e:
17:f9:19:43:4c:fc:fe:20:ba:79:ed:54:44:9a:bd:54:f9:8f:
c2:47:8c:b9:e2:f3:58:87:22:ca:a4:d8:da:d9:ac:02:bb:fd:
20:d4:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:06 2026 by rpki-client