Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: tyKH3iQz+fh18cP3l+nn8fRgRYZIDAphZd6PXH045ws=
Subject key identifier: E0:20:AE:58:9A:C6:52:EF:E5:6F:4D:FE:A9:D6:A3:A2:3A:6A:77:30
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01A179CCD129EC9F28710C6F8200EFC63A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 09B1
Signing time: Mon 26 Oct 2026 20:00:28 +0000
Manifest this update: Mon 26 Oct 2026 20:00:28 +0000
Manifest next update: Tue 27 Oct 2026 20:00:28 +0000
Files and hashes: 1: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (hash: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw=)
2: I-sXuwtEcITmgnvZanC5hRWQbdA.roa (hash: dw1mUItwtqi8VkSL6GcnsYfa7bo73GyWptZqIgXTIXU=)
3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: gf24VXh800JP9ovUJlHp9FuUbssDh5D9OJUle0x9vMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:d1:29:ec:9f:28:71:0c:6f:82:00:ef:c6:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Oct 26 20:00:28 2026 GMT
Not After : Oct 27 20:00:28 2026 GMT
Subject: CN=e020ae589ac652efe56f4dfea9d6a3a23a6a7730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:9f:0f:1b:c6:06:00:3f:33:f6:02:45:fa:
47:1f:37:f9:45:9a:b7:b7:73:96:d5:cd:f9:cc:dc:
59:bb:b3:47:b0:4f:12:a1:e9:9e:23:b1:38:6b:08:
e9:5e:aa:db:c6:8b:55:38:90:63:ae:55:95:f2:04:
ba:af:70:1d:a6:39:5f:9e:dc:8d:41:4f:80:48:f9:
55:54:28:fd:ec:49:1e:ee:82:0f:08:2d:3f:e6:75:
e2:57:e1:2f:4f:e4:55:71:b9:cc:ea:af:2e:29:5a:
b9:5b:7d:48:d3:de:34:b5:e4:ca:d4:0f:a1:4b:e2:
64:1e:c7:c6:4a:1f:fd:1c:1b:a3:5e:4c:54:99:a8:
e8:22:f1:97:ba:cb:83:0e:42:89:0c:7d:f0:20:73:
e6:b8:f9:cb:99:96:69:16:f3:30:1d:f8:82:e6:3b:
ed:c5:c7:73:ea:77:f1:70:85:c9:a5:3e:2c:b1:2a:
59:cc:e2:3e:0a:3e:40:3c:c3:2b:ac:7b:82:73:cf:
71:8f:24:48:56:52:ab:b1:47:7f:fd:af:cd:f8:3b:
24:c4:71:89:c2:03:a7:25:f4:9d:c6:98:72:94:09:
a2:05:63:a0:ed:6e:27:ce:73:c1:a5:d8:73:c9:42:
28:cb:aa:4d:a0:bd:2b:64:b5:23:6f:4e:c0:e6:2e:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:AE:58:9A:C6:52:EF:E5:6F:4D:FE:A9:D6:A3:A2:3A:6A:77:30
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:6a:84:09:a8:3b:49:13:c6:61:60:47:87:8c:d5:7e:de:
c8:ca:12:f9:3d:e1:d5:3b:55:e7:1b:f3:77:0c:78:04:a3:51:
5e:af:c2:53:18:d9:2d:f3:90:a0:2e:8f:9a:a7:8d:3e:a2:17:
43:6d:d1:37:92:95:77:dc:a3:a7:20:7c:5d:c8:93:35:62:26:
87:2a:59:b5:42:b3:fa:f5:9f:9e:0d:b0:ee:71:89:30:b1:28:
dc:7d:24:2c:94:d6:b0:db:cb:47:de:fa:9a:8b:5e:fa:4e:7c:
d9:d2:94:1b:f5:61:fd:f2:0d:36:19:c2:0d:18:73:5e:54:0a:
1a:be:9b:35:50:77:d3:03:5c:1e:00:4e:99:f0:d6:9a:06:3e:
35:4e:60:28:14:5c:05:4a:79:9e:05:8f:0c:19:c1:a2:8a:9f:
d3:cf:ea:02:02:ac:67:c3:67:bc:83:89:7f:a6:10:05:53:8b:
74:5b:c8:82:e2:3d:8b:15:a9:4b:50:fe:05:5d:01:9d:81:07:
6a:f9:b8:f9:e6:19:12:8e:38:b6:26:2b:f8:ca:8f:ce:02:ae:
9f:0f:5b:64:24:69:b1:29:39:1d:6c:bd:3f:d9:3a:af:2e:e6:
c0:10:d7:87:32:2f:6c:6a:9e:5c:30:2f:a5:5c:dc:14:2b:f6:
2d:0b:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:45:44 2026 by rpki-client