Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: sZof2oM47P12tjmcJrCgz9Picbv3DkojWPY/czMc0FE=
Subject key identifier: 69:B6:E8:40:11:1A:29:C0:16:C7:64:D8:6C:8B:24:B0:3E:56:0C:B2
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 01A08C0D80673A7CB2E8C888D178EFE0F9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 1238
Signing time: Thu 10 Sep 2026 16:01:30 +0000
Manifest this update: Thu 10 Sep 2026 16:01:30 +0000
Manifest next update: Fri 11 Sep 2026 16:01:30 +0000
Files and hashes: 1: K9_4CpntBLOvMEDnKhqNBu7SoZA.roa (hash: OTRSlqVwxM3FVwoxRVSPz7oWV0SpiqYOgPWN/+iIXpM=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: O+Ky6j0U+C7msGfVAZb7VxXOEnI6BAXeuRZCljwXnog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:80:67:3a:7c:b2:e8:c8:88:d1:78:ef:e0:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Sep 10 16:01:30 2026 GMT
Not After : Sep 11 16:01:30 2026 GMT
Subject: CN=69b6e840111a29c016c764d86c8b24b03e560cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:07:a2:d8:1d:06:01:82:7d:3c:80:dc:b8:
54:4f:0e:36:4b:0d:d2:b9:40:e4:eb:e7:21:59:2d:
77:56:af:f5:47:c2:fe:4a:b1:d3:49:d0:74:e5:9c:
8d:91:ff:ee:6b:7d:74:a1:47:b0:db:05:87:ec:ae:
23:33:4e:5a:b1:f7:91:44:5a:28:c2:92:88:a7:70:
a8:86:77:fb:ab:fd:66:f8:ae:52:b2:6b:0f:18:33:
70:44:f4:7e:db:41:cb:76:e7:01:b8:13:38:9b:2e:
44:18:a8:0b:85:37:ab:39:b2:bc:3c:3a:ad:18:3c:
a0:a1:c3:19:c6:16:cd:d4:48:8b:80:1f:d4:ff:4b:
d1:09:bc:d2:c2:65:35:d4:2b:50:90:1e:41:8c:93:
0b:8e:2b:09:ef:93:0b:8c:4e:93:ec:13:ff:d5:d3:
33:2b:b4:70:a9:82:f4:8a:1d:c0:3c:3a:4a:5f:85:
b5:e7:40:07:52:d0:da:ba:fe:9b:32:a6:e9:46:42:
ed:0e:df:91:70:ac:76:fa:59:c6:50:8b:c4:0a:76:
f7:12:02:5e:d8:93:76:41:13:c6:47:1a:f7:14:57:
13:4f:04:ae:1b:2a:6a:01:34:6a:ed:16:0f:36:56:
8c:d3:01:6f:ae:94:5a:d6:63:7c:c6:13:7d:29:2f:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:E8:40:11:1A:29:C0:16:C7:64:D8:6C:8B:24:B0:3E:56:0C:B2
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:93:66:fa:b9:45:e5:b7:32:4d:1d:ca:ef:46:d6:79:09:ff:
8d:2d:f3:41:ef:5b:df:8c:db:71:81:35:f6:35:34:d2:b0:b7:
5b:7c:30:52:8c:28:86:b2:c1:5f:b3:90:dc:fc:38:2d:31:f7:
b8:b2:51:a0:15:ca:00:63:6b:7d:6b:11:2a:60:6c:ca:b5:55:
d0:01:74:78:fc:95:61:e2:42:06:d4:12:48:6f:02:63:16:5e:
04:63:46:a9:82:f9:01:25:92:a3:8c:44:6c:09:35:5d:54:da:
fc:c1:c3:84:3a:37:66:f3:07:46:ff:20:e3:23:14:1f:0d:a9:
7c:ec:3a:8b:54:f9:ab:48:92:5f:0d:a8:1b:fb:11:bf:02:c8:
98:58:b4:a6:38:34:d2:d1:e9:5f:8c:44:48:2c:05:67:70:0c:
41:d4:0e:57:c0:ad:ca:84:8f:b5:ed:a9:e1:f4:79:df:24:a1:
12:5a:20:a8:b0:74:a5:1d:0c:3d:ce:e8:89:29:ed:75:66:90:
fc:ac:bc:14:e6:2e:2e:c0:04:e2:db:fd:c3:ec:95:c0:7c:67:
d4:2d:d2:ba:f1:2f:36:68:1f:0f:0f:66:d3:88:95:93:f7:0a:
df:46:b6:62:81:23:15:35:54:30:86:0b:19:19:30:dc:11:e8:
4c:12:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:49 2026 by rpki-client