Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
File: aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft (raw, json)
Hash identifier: D1sgMjtiZq6NJUB46QgJ2lhbnWhoWScD+Ueufp8De9c=
Subject key identifier: C2:20:87:B8:FF:30:C3:6F:3B:94:AD:27:01:3D:EB:EE:42:F7:DE:42
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Certificate issuer: /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial: 01A11BD0AEF0563C02BAFE1A97E77FB8B33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
Manifest number: 0145
Signing time: Thu 08 Oct 2026 14:00:23 +0000
Manifest this update: Thu 08 Oct 2026 14:00:23 +0000
Manifest next update: Fri 09 Oct 2026 14:00:23 +0000
Files and hashes: 1: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (hash: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=)
2: aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl (hash: DbkHguo/T+dVQ4SzgYw+b57raXegv2ZLWwbs793Twdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:ae:f0:56:3c:02:ba:fe:1a:97:e7:7f:b8:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Validity
Not Before: Oct 8 14:00:23 2026 GMT
Not After : Oct 9 14:00:23 2026 GMT
Subject: CN=c22087b8ff30c36f3b94ad27013debee42f7de42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:e7:ff:c1:16:84:60:8f:73:a8:9c:db:36:
1f:35:ec:53:81:65:7f:29:f4:96:d7:d2:4f:0d:9a:
3e:d7:83:e4:1c:11:25:bb:9d:01:e9:96:d7:53:55:
c6:38:ff:3c:38:51:de:22:f2:16:71:e0:41:87:50:
c7:ff:e0:d6:f4:22:54:1f:ec:ca:18:a9:54:02:7f:
d1:96:29:3b:d4:56:bd:c2:e4:43:f7:89:36:b7:22:
2e:2c:b5:3e:6c:d8:fe:61:f7:5a:22:55:e7:f9:b8:
09:bd:b2:21:1e:c1:6f:10:3b:ba:89:ee:b5:30:1c:
5b:73:64:3d:cf:c4:34:0e:01:0f:ac:54:af:30:34:
a2:84:69:a2:fc:b1:9a:a1:56:5c:15:ec:67:e6:5d:
80:87:98:37:99:50:66:99:a7:37:e6:f8:07:ea:35:
4a:94:54:84:2f:ba:c9:ae:3e:c3:70:7d:ee:4e:b6:
c3:3f:f0:ba:22:33:0d:dd:9b:53:e2:b0:8c:ac:84:
24:fc:19:b2:00:1e:18:0f:e9:32:c6:14:a5:a8:6c:
25:10:6e:44:1c:5c:9c:c5:0e:19:2a:50:40:b3:d8:
77:2f:d4:f1:cb:a6:ac:7b:11:9b:28:80:fb:35:2d:
78:67:b0:07:3e:77:d4:5b:93:f7:d0:6f:b6:58:10:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:87:B8:FF:30:C3:6F:3B:94:AD:27:01:3D:EB:EE:42:F7:DE:42
X509v3 Authority Key Identifier:
keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:63:69:5f:9c:45:5c:0e:6e:5d:2f:58:de:3e:ee:ac:9b:
a6:85:58:69:5b:0b:9a:47:07:ac:03:ed:f2:88:b9:5b:e7:94:
e2:92:1c:9d:d9:30:c1:95:33:30:02:53:b3:f4:ad:ec:05:c9:
9c:60:30:8a:ec:02:6f:c0:ca:90:5e:98:0a:4b:ef:f1:5f:5a:
b7:96:cc:44:20:0d:18:bc:85:37:4a:17:49:6b:be:07:17:f3:
4b:37:b5:c6:9c:00:ab:16:c3:7c:b3:f2:e0:46:6e:92:ec:a6:
29:ba:f3:2c:59:be:a2:43:ba:3f:8b:a1:4e:72:30:0b:d4:12:
81:5d:40:03:21:29:18:4e:4b:27:9d:7c:95:46:26:26:18:a9:
4d:60:b0:a8:cc:1c:10:82:ff:da:dc:25:1a:24:be:4f:00:94:
1b:b8:15:11:a1:cc:71:2b:88:15:87:37:a3:37:cb:62:f7:1d:
08:8f:39:8c:a1:1a:4d:9e:ad:06:63:06:fb:a4:e9:aa:e4:bb:
48:53:ce:32:c9:2e:98:f7:59:a9:40:a3:88:ba:ca:66:57:f4:
9c:4f:b0:04:5b:3b:11:ee:f0:ce:d1:86:f0:e1:84:03:63:e3:
b0:cc:99:9d:a6:97:60:e0:f9:ed:af:ac:be:ac:08:86:53:6a:
bb:34:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:58:09 2026 by rpki-client