Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: zej1o+DdCBQRNdJPbjKdnaJkN2xFoyTEMRluJD3h5eQ=
Subject key identifier: 4E:9D:4F:C1:2E:0F:DB:3D:E0:48:42:B7:11:5F:9F:81:14:DE:56:34
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01A0201E7836A4C7DB523194057F9E608D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 08FE
Signing time: Thu 20 Aug 2026 17:01:02 +0000
Manifest this update: Thu 20 Aug 2026 17:01:02 +0000
Manifest next update: Fri 21 Aug 2026 17:01:02 +0000
Files and hashes: 1: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (hash: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw=)
2: I-sXuwtEcITmgnvZanC5hRWQbdA.roa (hash: dw1mUItwtqi8VkSL6GcnsYfa7bo73GyWptZqIgXTIXU=)
3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: GwQ33f2frzWa++ns9+UhijzcvoRYrDNWT5FsLs2l4aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:78:36:a4:c7:db:52:31:94:05:7f:9e:60:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Aug 20 17:01:02 2026 GMT
Not After : Aug 21 17:01:02 2026 GMT
Subject: CN=4e9d4fc12e0fdb3de04842b7115f9f8114de5634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:4f:e0:d2:ee:f1:3a:64:71:38:55:08:b2:
9c:18:d7:c6:82:a3:55:38:89:c7:6e:ee:65:fa:94:
97:bd:71:c4:97:29:3e:31:88:b2:e5:0d:e8:84:0d:
02:38:b7:27:42:11:81:cd:43:a3:27:be:00:50:c5:
9d:a6:3a:41:7c:9d:6a:28:27:12:50:0d:d6:f5:e8:
a3:d4:44:be:af:45:ea:24:98:9f:69:1f:c1:7d:54:
e3:41:ac:9b:d3:92:9c:8e:88:f4:f9:79:dc:5c:ad:
06:18:cf:b8:e5:de:eb:84:21:b9:38:3a:68:82:0e:
67:54:b8:39:3f:15:46:ed:45:44:f3:12:33:72:48:
ee:ac:d1:2c:f0:3f:40:2f:51:7a:9a:cc:c9:b5:b8:
ec:8b:b8:6f:da:db:49:7b:09:c0:6e:b7:d6:77:9c:
5f:af:8a:7a:44:f5:6b:57:8e:f1:a6:db:9d:96:70:
49:16:9f:0b:d9:4b:37:9c:c7:5e:8d:66:b1:a7:b6:
d6:8e:e2:4f:76:c2:4f:67:ac:3c:ec:4b:af:c3:af:
f5:b5:98:64:1e:63:7b:42:32:a2:e4:cf:9b:87:51:
b6:cf:5e:ce:66:9b:70:e2:87:11:6b:7c:63:09:9f:
e8:75:77:03:be:f8:03:16:87:9c:83:ac:8a:10:83:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:4F:C1:2E:0F:DB:3D:E0:48:42:B7:11:5F:9F:81:14:DE:56:34
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:e3:f7:7f:6c:79:8f:da:2a:30:bd:41:dc:b3:55:70:0b:
44:93:8d:a8:5c:6c:79:e4:49:25:ea:2c:a4:d1:60:b6:fd:3e:
96:32:4b:42:0c:d3:aa:ac:ae:9e:6c:e5:ed:59:60:ee:c0:13:
f2:ac:50:bb:44:e6:d8:55:22:dc:e7:4b:ae:c2:71:80:ee:5a:
36:53:f4:e2:1b:82:e3:29:e0:32:b8:da:28:a2:fa:c7:2e:58:
18:12:df:bd:1b:d6:93:30:3a:39:4f:99:ec:b0:de:b1:f4:da:
44:f5:f0:fc:4f:38:4f:e6:4e:65:c3:4a:5c:e8:bf:f9:21:5b:
56:b7:3e:23:a2:88:f2:94:70:78:6a:c0:a9:34:a6:a8:95:50:
04:b9:24:f3:e1:1e:50:b0:9c:6a:4e:93:e1:d0:3f:7e:6c:eb:
b8:39:35:bd:b8:48:78:b0:69:e4:27:42:e9:e9:ab:34:c8:18:
f5:fd:f4:49:9c:99:b9:72:24:86:37:ff:d6:99:c0:9d:8d:62:
9a:6a:53:aa:0e:35:76:4d:28:c5:af:fe:91:d3:42:cc:11:c7:
85:34:91:fc:a4:69:73:78:43:96:73:a2:e1:9d:f6:4c:28:fa:
d9:d9:f2:88:13:38:1c:b5:81:13:46:72:1c:dd:55:4f:c4:1a:
d4:97:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:20 2026 by rpki-client