Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: hYuUctV1MHcEJaXxhHbveJlnRV2rZVBGt635mw/5q3k=
Subject key identifier: 6D:5F:87:4D:3B:AE:B7:DD:77:2B:50:5D:57:A8:AD:4B:25:9B:97:03
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 019F85D74E810C2B71B471148AEA484B380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:47 +0000
Manifest this update: Tue 21 Jul 2026 18:01:47 +0000
Manifest next update: Wed 22 Jul 2026 18:01:47 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: 6JUagC1jez7z17AAb4xRbKptdehxs6dYd96ed+lxfUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:4e:81:0c:2b:71:b4:71:14:8a:ea:48:4b:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Jul 21 18:01:47 2026 GMT
Not After : Jul 22 18:01:47 2026 GMT
Subject: CN=6d5f874d3baeb7dd772b505d57a8ad4b259b9703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:d2:2e:1f:e4:0f:fa:b9:1f:97:e1:99:2f:
e4:91:f8:a3:4f:54:a5:48:50:37:cf:4f:e1:d8:b4:
26:41:71:44:61:00:c1:e5:74:5a:b6:f2:70:97:67:
47:73:92:ec:4a:e1:75:73:be:a8:38:95:42:5f:e1:
02:b2:10:a8:ac:08:bb:48:a5:b9:fb:4b:34:38:2f:
fd:55:58:10:50:b4:e0:d8:56:b4:28:1d:74:c7:36:
eb:a4:a3:41:2f:ae:7d:f3:69:84:7f:19:8a:de:3e:
1b:86:91:de:f0:ce:b6:d2:14:1f:c0:d0:93:62:a7:
87:b8:a6:ba:58:50:66:5a:2f:32:dc:b1:55:c1:24:
fb:4d:66:79:7b:92:25:f6:51:e3:3f:5f:6d:dc:e0:
df:47:7d:79:82:30:bf:49:fc:20:c7:ec:a9:45:64:
ee:3a:36:b0:1a:dd:05:4d:70:4b:92:35:8c:da:b6:
5d:52:13:03:e3:08:d6:52:7b:ae:a9:64:96:5d:bb:
10:63:ca:5a:d6:e7:2c:29:9f:36:cb:6c:34:e9:6d:
4f:7c:9e:83:95:7b:c0:3d:9a:d6:1e:ac:87:91:cc:
37:0b:7a:c3:cb:94:2c:60:f8:55:7b:13:86:8d:5d:
9e:fb:78:8a:8f:44:92:9f:3b:e8:41:8b:85:ec:57:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:87:4D:3B:AE:B7:DD:77:2B:50:5D:57:A8:AD:4B:25:9B:97:03
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:11:85:22:65:cd:b8:22:7a:40:bf:e3:ea:b9:90:61:8e:ca:
8e:c1:50:81:e5:56:13:df:49:fc:9c:1d:20:e2:f0:4d:f6:10:
ca:ea:3d:5d:f9:ba:ba:4a:56:37:6e:77:10:a1:da:30:1c:26:
d1:39:d2:19:00:3f:6b:0f:59:45:20:fb:f3:95:b9:60:c8:64:
01:b6:87:2d:45:9c:21:f3:1c:ab:ad:62:6c:ee:b9:1e:2e:08:
41:5d:bc:95:07:3c:dc:37:bf:5d:e7:59:55:70:9a:d2:02:22:
e5:e6:4f:cc:0a:45:b1:4f:25:4c:d0:a1:c6:18:2c:0e:8b:0c:
18:41:11:2c:61:5e:ec:64:95:fe:19:5b:7f:78:88:29:6a:17:
39:61:3e:ec:e2:18:34:75:22:84:f6:f8:dd:46:9c:f4:f0:c2:
02:e5:25:2b:f1:eb:cc:73:1e:97:84:b2:4e:23:1f:76:cd:24:
2a:ee:b9:6d:0a:6f:0a:d4:a9:a1:63:62:56:7c:3c:24:ca:46:
f0:53:46:78:b6:e9:9b:c2:d6:31:0a:ab:07:20:22:40:36:07:
b4:e0:60:7b:9b:29:45:91:6c:b0:9f:e6:3b:69:3a:c8:df:8c:
2f:1f:00:a3:9d:cf:55:1e:15:e1:22:4b:53:88:cb:c6:46:43:
5a:15:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:00 2026 by rpki-client