Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: r1l7QuXfvOf3U5DhTy/7YUBgLftbPi3y4uQBN5Va/mk=
Subject key identifier: 29:2D:0D:8D:8F:9C:02:8D:60:5E:37:1C:1E:D6:F6:3B:93:5D:6C:DC
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 01A0016F7CF4056A5E04290072D3E8E9C44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 18:01:18 +0000
Manifest this update: Fri 14 Aug 2026 18:01:18 +0000
Manifest next update: Sat 15 Aug 2026 18:01:18 +0000
Files and hashes: 1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: kbj6LFw/IyIdPFOTej/h8+eW+dXZP469H7tfR8XgxlA=)
3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:7c:f4:05:6a:5e:04:29:00:72:d3:e8:e9:c4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Aug 14 18:01:18 2026 GMT
Not After : Aug 15 18:01:18 2026 GMT
Subject: CN=292d0d8d8f9c028d605e371c1ed6f63b935d6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:6a:99:89:e9:62:26:27:5c:ad:44:22:60:
bf:96:11:d5:bf:db:c2:1f:6e:79:d8:04:17:2c:8e:
c1:62:84:8a:1f:18:a9:64:29:92:63:c2:e7:50:2c:
2b:2f:35:ef:17:28:b7:5d:0f:11:58:e5:a0:e0:35:
e0:49:1a:1d:aa:ea:a4:51:4d:d5:16:37:ad:ea:57:
ad:95:08:ea:fd:a5:c4:88:5e:23:3d:e1:ab:72:9a:
7f:7f:f4:01:ee:ca:91:4f:c1:78:df:69:26:0f:db:
e8:b7:90:fd:0e:f5:64:2e:02:d2:f9:6d:99:5b:95:
83:a1:4b:0f:c8:08:48:77:0b:f0:60:d2:06:ba:d6:
f9:a0:aa:05:8f:59:9c:e2:96:a4:5f:ec:7b:08:d8:
b2:00:1b:90:3b:ed:12:0a:20:ac:f2:71:f4:20:27:
dc:4a:74:68:32:a8:cb:f8:30:3a:91:75:9c:54:ec:
a5:f1:e0:7d:93:a7:db:66:dc:82:5a:78:37:ca:43:
e0:3b:24:05:19:e9:60:17:8d:e1:a8:fb:f2:10:ca:
a5:8b:21:52:f5:26:1b:56:65:71:b0:f0:9c:91:10:
27:b4:6f:74:c2:9f:c6:aa:86:9e:90:d7:0a:fd:38:
16:89:53:bb:ae:a5:13:3b:7a:cd:84:9b:69:86:f8:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:0D:8D:8F:9C:02:8D:60:5E:37:1C:1E:D6:F6:3B:93:5D:6C:DC
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:d7:fa:01:f7:b8:ae:63:e5:0e:e1:dd:0b:f5:7e:f6:5d:
3c:a2:d0:d6:ec:f5:56:14:e4:2d:6a:1e:eb:c3:47:42:5a:7b:
58:92:eb:51:22:03:d3:74:59:c0:0a:48:46:05:8b:3a:8d:1c:
14:c1:84:82:80:87:ce:8a:67:d4:07:c8:66:16:cc:5d:e2:50:
48:81:1c:4f:aa:42:81:d4:75:f0:e7:97:dc:88:4e:a8:19:a8:
bb:ff:3a:b9:07:48:97:ab:ee:ef:2d:7b:8d:26:ef:ae:a9:02:
a1:cd:83:58:0a:29:31:25:d6:d0:88:24:a4:24:44:e0:2f:4e:
8c:c9:dd:ef:91:44:67:9b:e9:95:16:df:72:98:6f:cc:2e:f3:
41:88:32:c2:b8:01:62:3e:5f:c8:00:d7:e4:73:fd:4b:78:3a:
f2:ff:9f:38:8f:0d:0e:ac:df:d8:53:c9:6b:bd:95:ef:19:21:
73:52:b6:c2:ef:73:1a:72:52:73:9f:f8:25:e5:82:2b:1a:a9:
88:f2:51:00:9f:f2:3d:bf:24:33:bd:62:87:59:4c:7f:e9:38:
cf:23:b1:30:9e:5c:1a:da:a2:a0:b0:54:1c:fa:19:3e:f3:20:
7b:69:06:80:48:96:35:fc:c5:2a:c1:c6:47:c3:48:64:9b:1e:
b8:d4:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:01 2026 by rpki-client