Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: c5XMGANmeajtIyCd6BWsy14SzGnJvqzbjwYjlquNxgI=
Subject key identifier: AC:22:BD:09:A2:4F:0F:98:7E:AA:4C:B2:FD:3E:F0:FA:7A:93:A9:82
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 01A08C0CD2442383F1C5986091B07CD4319E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 04B0
Signing time: Thu 10 Sep 2026 16:00:45 +0000
Manifest this update: Thu 10 Sep 2026 16:00:45 +0000
Manifest next update: Fri 11 Sep 2026 16:00:45 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: Veiks2xQz5fgYhX3v3scp22qqYVx8uoJpaC+inHme0I=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:d2:44:23:83:f1:c5:98:60:91:b0:7c:d4:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Sep 10 16:00:45 2026 GMT
Not After : Sep 11 16:00:45 2026 GMT
Subject: CN=ac22bd09a24f0f987eaa4cb2fd3ef0fa7a93a982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:45:86:cd:61:5a:44:4f:63:d4:fe:da:c2:
66:c9:76:1a:57:a2:40:b8:2f:47:db:2f:02:11:17:
77:12:cb:35:98:13:02:4f:de:60:d6:b0:37:34:3a:
c9:f2:e4:3a:e9:e4:87:a1:a3:d9:c0:a4:48:d2:e5:
da:bd:93:3c:b0:54:22:d6:4e:eb:71:2d:9a:c6:64:
26:4b:01:8f:3a:b8:32:04:f8:fe:4f:36:93:6e:32:
91:23:e6:3f:52:b8:41:b1:a1:65:5a:6d:ed:f7:2c:
97:0a:8e:18:37:ef:aa:e7:4e:c4:68:dd:c0:38:0b:
48:70:59:9a:c0:50:b5:14:0b:21:21:4e:c9:ec:dd:
fc:8a:87:20:86:04:d4:d6:f6:91:81:41:ca:97:16:
c8:34:20:71:f8:0d:a3:c8:af:66:f3:c6:19:97:d8:
d8:de:4b:a9:f4:2a:cf:91:eb:19:c4:c9:ec:90:1a:
75:36:6c:32:7f:49:9e:f2:aa:45:da:aa:25:d9:b4:
b1:98:d5:ab:c9:fb:3f:e0:8f:88:ec:f4:d5:ec:88:
aa:0b:88:6b:09:ea:a4:51:9c:d2:27:b0:37:f1:44:
15:8b:f3:77:4d:98:84:0a:12:fa:d0:39:65:1f:2c:
7c:f6:b4:a8:3c:35:6e:06:cc:ad:fb:4f:f7:ff:4a:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:BD:09:A2:4F:0F:98:7E:AA:4C:B2:FD:3E:F0:FA:7A:93:A9:82
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:83:d3:56:0a:27:9c:d2:cc:3f:3d:5a:6d:a9:cf:69:04:
ef:a6:c4:03:90:b5:cf:c8:fc:f1:fb:43:80:e0:56:45:2f:ab:
9b:32:16:b0:ea:37:06:52:a1:59:e3:f5:ec:94:77:61:e0:7f:
f9:ce:02:4b:52:cb:80:f7:e6:75:07:a2:f4:4c:90:7e:88:97:
53:40:d8:fa:b6:8f:6e:38:54:ee:f7:4e:4e:50:ec:88:41:ac:
6b:8f:94:f5:52:07:23:85:11:16:7a:3d:74:ff:ac:4b:0e:e8:
41:14:9d:7a:70:00:0d:41:b4:92:7d:9d:fa:99:a9:37:58:74:
e8:66:bc:b9:df:62:35:7d:8e:c9:ba:19:78:29:14:fe:8c:3d:
7d:55:42:aa:a0:13:54:f8:19:46:d2:05:ef:0b:3f:13:9c:2f:
82:fe:04:b8:ac:b8:ba:ab:e6:cb:0e:be:7b:19:cf:58:f6:a2:
f9:38:46:3f:1f:94:cb:f1:2e:e4:eb:ba:50:e8:3b:12:b0:06:
50:f3:03:bb:2e:81:81:2c:d4:20:97:e4:72:13:ce:33:4f:1e:
51:72:07:0a:42:a9:3d:4b:8a:ce:58:ec:62:ee:f1:f3:0f:20:
a9:16:32:73:63:a7:56:6e:15:cd:e8:81:15:57:c1:2d:02:4f:
cd:0f:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:23 2026 by rpki-client