Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File: aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier: XOJ74fYLftzmYOgrmAp3LE0LfQ3p7ov0HqZYX/T0MvY=
Subject key identifier: 82:C7:07:F3:59:80:7E:E8:B7:55:4D:4E:93:EF:E5:B6:4C:3C:C0:AB
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer: /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial: 01A089B0A54B72DFC59AF0359D50156BD608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number: 0A0A
Signing time: Thu 10 Sep 2026 05:00:50 +0000
Manifest this update: Thu 10 Sep 2026 05:00:50 +0000
Manifest next update: Fri 11 Sep 2026 05:00:50 +0000
Files and hashes: 1: Jk9ilYHmL8kSaIq3l2BZVPIGTwk.roa (hash: gQhROHe9syjBhq1z8TMAwj4HKTkzYppUUMDy4zn8kMo=)
2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: hwkI4H4BF7oSiiwxPgn2oY+D/2hZbgpn+KRv3DuRiqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:a5:4b:72:df:c5:9a:f0:35:9d:50:15:6b:d6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Validity
Not Before: Sep 10 05:00:50 2026 GMT
Not After : Sep 11 05:00:50 2026 GMT
Subject: CN=82c707f359807ee8b7554d4e93efe5b64c3cc0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:4d:fd:e0:2e:a2:b7:2a:a0:15:90:b3:b7:
ee:9b:12:8e:12:fb:10:77:53:c8:8c:b9:69:15:ba:
d5:85:d3:ac:a0:09:18:32:6f:21:ca:c9:f0:60:89:
b8:ef:bd:70:b9:fd:1c:a2:fc:05:a4:e3:fa:c3:6c:
bc:d2:eb:2f:b3:b1:72:66:a9:ed:8e:e8:e5:89:e6:
5f:47:c5:22:68:93:7f:e4:7a:29:08:05:09:ac:65:
d4:c6:99:6d:f7:a3:1d:fd:66:3b:c5:ad:49:4d:81:
9d:de:23:a9:9d:a7:a9:d1:92:22:9e:6e:bf:22:07:
60:2d:80:9f:5d:56:16:95:05:5d:30:4c:12:3c:4c:
23:28:ad:06:cc:02:97:8d:72:b9:70:ca:c1:5f:b6:
71:59:03:bc:94:df:19:e1:20:19:c9:4d:fc:82:d0:
e5:31:23:59:8d:79:c5:5b:dd:2a:32:6a:9c:09:11:
fc:84:e1:f2:75:12:c9:be:a5:e1:be:04:fe:6f:53:
12:f3:23:e9:e1:b2:8b:b2:34:69:bc:99:08:bc:d4:
19:43:b9:fe:3d:70:27:c9:a8:9e:77:1d:18:1c:c8:
90:29:14:1b:10:19:61:41:aa:5c:57:43:d4:d9:b4:
fd:2b:dd:45:3b:b5:d6:fa:e4:a7:fb:08:c8:12:f5:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:07:F3:59:80:7E:E8:B7:55:4D:4E:93:EF:E5:B6:4C:3C:C0:AB
X509v3 Authority Key Identifier:
keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:a0:fd:55:e2:6c:0d:4a:6b:5d:d0:6b:b5:ba:d4:d8:76:
9d:3c:b5:b3:c8:a1:de:32:62:68:c4:74:fb:a3:d2:c4:5d:5d:
60:1c:37:54:dc:90:a1:46:e8:5e:1d:28:5b:e4:54:f5:27:48:
78:b5:7b:09:5c:92:16:75:7e:ca:59:d0:24:6e:fd:aa:7c:78:
21:69:bd:21:f2:b0:06:57:8a:56:61:e2:7c:41:3f:c8:75:b9:
e0:58:7b:3d:52:64:da:e4:81:43:9f:9d:4f:7b:bf:76:f6:20:
ea:52:d1:5f:b9:1b:ac:62:de:1d:8a:6a:d7:54:37:14:da:e1:
8a:55:8b:38:90:9f:d3:54:78:64:f3:a2:7b:b6:34:b0:72:f1:
ba:0e:ae:ea:79:26:37:25:44:82:54:cc:4e:99:bd:81:c8:76:
bb:57:30:30:f1:7b:46:74:61:37:90:76:59:34:78:40:03:36:
7b:e1:55:53:87:2d:41:06:f7:75:9b:a9:27:cd:f1:61:a4:d0:
b0:1a:18:38:c5:c6:d1:78:53:96:81:03:0b:3a:66:3f:d8:43:
2f:01:9b:48:16:a1:6a:6a:de:a7:55:c5:e5:74:53:45:82:2a:
e4:30:93:22:9a:7c:0a:b5:64:dd:dd:93:be:f2:1c:25:94:7e:
d3:2f:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:54:28 2026 by rpki-client