
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: W4/gkk9aUq89Aa3xjWuN2vxmPdApAMwFNMqV+vYmCGA=
Subject key identifier: DB:E1:3E:A6:A4:03:11:9C:BF:F6:9E:CF:F2:12:6C:22:3B:76:01:25
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 01A1024856F332B8DCA51C0D0B1B9A491D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 1A8D
Signing time: Sat 03 Oct 2026 15:00:57 +0000
Manifest this update: Sat 03 Oct 2026 15:00:57 +0000
Manifest next update: Sun 04 Oct 2026 15:00:57 +0000
Files and hashes: 1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: mCoboV4fJUFHFvdjAARLM+Ah+43b9MNVxG8El3MKpQo=)
3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:56:f3:32:b8:dc:a5:1c:0d:0b:1b:9a:49:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Oct 3 15:00:57 2026 GMT
Not After : Oct 4 15:00:57 2026 GMT
Subject: CN=dbe13ea6a403119cbff69ecff2126c223b760125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:19:51:87:57:19:8c:56:f4:f3:7d:04:3d:
51:06:fe:3a:6f:e4:53:3f:74:73:7a:4c:ae:ce:f5:
6b:d9:b0:68:10:f3:95:db:53:95:4a:2b:24:3b:35:
ac:d5:40:3b:5c:22:63:be:1a:f1:fd:b1:a4:05:ab:
27:7e:18:a5:b1:e7:cd:83:18:a7:7f:7c:80:1a:05:
29:46:c0:26:c1:90:0b:fa:da:bf:85:dd:6a:99:1d:
8c:dc:f0:33:e5:ce:39:5a:41:ce:2c:1d:c3:a2:3e:
20:bb:de:ea:2c:c2:9e:99:29:40:9d:57:0b:d8:88:
7f:91:f4:dc:7c:33:be:44:1a:cb:9f:c4:8d:4b:fa:
43:af:c7:09:c7:c2:ea:e2:73:9f:92:24:26:5a:b9:
aa:92:6a:13:d9:64:ca:34:13:08:3f:db:61:c2:85:
6b:54:ef:9a:59:26:b7:02:ae:a5:c6:7c:80:02:ab:
4a:b1:dc:5a:d2:a9:bd:1f:04:0a:d5:56:59:52:6a:
ef:b6:38:bb:15:21:cc:40:b0:fb:8b:20:4e:62:35:
41:66:57:6f:e1:aa:eb:a1:cd:f0:53:66:df:54:9c:
3b:2c:93:ea:f6:8d:77:7f:60:14:b3:20:56:57:3f:
7f:7f:07:42:53:aa:0e:37:19:03:3c:b3:07:bd:f5:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:3E:A6:A4:03:11:9C:BF:F6:9E:CF:F2:12:6C:22:3B:76:01:25
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7a:82:e0:3a:74:87:5c:af:10:d0:0b:52:40:4b:68:32:fd:
58:f3:91:5a:b5:6e:92:dc:73:f9:92:18:96:8b:d7:64:1b:99:
88:7c:54:93:a4:e4:8d:73:21:4a:e5:bf:f1:e7:d4:89:78:59:
3c:3c:04:43:ea:6e:82:68:ae:ce:d7:c1:11:02:a0:ac:d6:d6:
a7:cd:08:fc:ce:b0:14:ee:81:60:23:63:49:ff:c0:dc:4f:89:
e0:59:e3:ad:50:c6:57:03:bb:d2:6f:d2:73:fb:f0:ad:41:1c:
64:7c:a4:12:48:c5:35:73:db:6b:d6:0f:61:9f:1f:ba:5d:44:
9d:72:3e:82:e6:55:14:e6:96:ee:ca:58:3c:a6:70:37:5f:d2:
ac:9e:b9:2a:c8:58:f3:df:a7:fb:b3:7a:5a:e4:9d:5a:f9:22:
37:5e:13:88:42:e9:19:80:3d:d0:24:fa:13:ee:15:bb:dd:e6:
2d:50:70:17:f1:46:ba:c4:db:38:6c:9a:68:3e:41:66:af:28:
4a:9e:1c:cf:c7:f9:60:a4:46:cc:95:e4:79:50:40:4c:79:27:
4c:f5:ca:04:e1:2f:52:15:ce:9c:33:de:55:51:46:27:2a:09:
25:f4:0f:58:ba:b1:37:5a:fa:8e:b6:43:ca:03:0e:96:41:fb:
21:98:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:47:05 2026 by rpki-client