Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: WFV5GyuCO+OtNjgwLSZ6zDSpLQUUaI5x6Sohx/exah8=
Subject key identifier: 76:B6:70:11:2C:85:93:83:37:65:B6:B9:93:88:4A:06:C4:21:39:87
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 01A0B6F7E420A654E44558C005D19B15545F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:01:34 +0000
Manifest this update: Sat 19 Sep 2026 00:01:34 +0000
Manifest next update: Sun 20 Sep 2026 00:01:34 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: 3Umiy08yXjII+gl0FayKq5wFuw/dJjgjUdwMa9Up21A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:e4:20:a6:54:e4:45:58:c0:05:d1:9b:15:54:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Sep 19 00:01:34 2026 GMT
Not After : Sep 20 00:01:34 2026 GMT
Subject: CN=76b670112c8593833765b6b993884a06c4213987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:c7:58:f2:af:80:e2:4a:1a:a4:a3:7e:0c:
e6:27:da:1e:b3:99:72:4d:b2:cc:ed:5e:cf:1f:bf:
bf:e0:ec:3a:67:ee:5a:9a:37:00:cf:11:81:0f:16:
1d:01:1b:c2:48:fb:0e:74:18:24:aa:68:ac:6f:ba:
20:30:84:fd:df:5d:66:af:7d:75:f9:5f:6c:a7:32:
2c:34:61:2f:70:d9:39:46:26:58:f3:50:d1:82:44:
12:26:f5:ef:f9:8b:50:fd:4a:1b:3b:57:d8:6e:c4:
91:ca:dc:ae:dd:c0:f8:8a:d2:91:5b:68:7e:ad:02:
77:46:46:dd:6a:5d:54:5a:c6:63:23:8b:74:75:85:
e5:88:cf:0b:26:43:dd:ce:1d:37:b3:d0:ab:8f:68:
c2:1c:4b:cc:ee:2f:4a:58:cb:f9:3a:da:78:42:85:
1a:ff:5d:ae:40:5e:21:1b:1f:41:b5:39:b2:ff:c0:
85:01:f9:ed:21:87:0b:cd:12:bd:4a:05:74:20:b1:
d0:00:19:9b:6e:8f:30:04:1e:3a:1a:cd:e5:4e:60:
05:8d:5e:11:c9:af:7f:46:b0:57:17:fe:6e:1e:79:
db:aa:0f:6b:df:fb:84:c7:1b:83:92:a5:95:57:6e:
40:36:97:e2:3b:bc:b4:a2:90:49:5d:d7:f3:cb:6a:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:70:11:2C:85:93:83:37:65:B6:B9:93:88:4A:06:C4:21:39:87
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2b:a6:48:d7:74:75:2f:1c:29:c7:bd:c0:db:3a:63:76:b2:
8d:ec:bf:12:26:3b:3b:61:53:6d:cf:a8:11:7f:a2:ae:47:52:
87:47:40:11:3a:db:ce:2d:99:1f:2a:c8:83:de:23:02:2c:02:
88:42:2c:a8:1e:bc:38:78:bd:cf:c4:9f:b5:14:e6:9d:4a:a7:
52:3c:77:d2:59:0a:fe:58:5e:f8:af:11:e6:8b:a4:b2:4d:9a:
98:f1:47:2b:3b:0a:e1:29:b8:ec:1b:56:06:c2:ba:f8:cc:bb:
91:5e:10:6b:55:7e:4e:01:b2:0c:f7:a9:57:53:f4:26:df:d5:
fa:09:84:e6:48:4c:4b:50:8f:13:af:fc:b7:ee:4d:cc:fd:01:
ac:26:da:7a:e8:48:d7:9e:78:3c:aa:ed:12:90:b8:0b:6f:5a:
46:50:68:55:6f:a3:35:ec:8e:46:2e:40:65:1d:6b:c2:b4:54:
d8:51:01:53:6d:59:9e:19:78:7a:7b:f9:39:51:ed:aa:e8:8f:
8e:37:cc:e7:b2:83:6c:2c:0b:92:c8:a0:92:7b:4e:65:28:82:
c6:6a:cf:d7:92:0f:9e:61:4e:d1:8f:a9:4f:d5:e7:69:15:ff:
61:c9:55:c9:f6:6b:dc:3b:64:0b:49:96:a7:a0:c1:19:68:c0:
33:30:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:06:25 2026 by rpki-client