Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: kI63J4H5n7x9N5iwcPKwEpX4l6ulVGKQPUFhJo841xM=
Subject key identifier: 4D:3A:F1:D2:68:64:78:97:FD:A7:00:D6:4A:90:37:39:60:AB:BB:11
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01A08CB1F09666DDDFD1C5A1A888C5CCFF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1314
Signing time: Thu 10 Sep 2026 19:01:06 +0000
Manifest this update: Thu 10 Sep 2026 19:01:06 +0000
Manifest next update: Fri 11 Sep 2026 19:01:06 +0000
Files and hashes: 1: 2yM5Do3zWOnr0yQBZ1vtd1vIjV8.roa (hash: xC4pizZCJao9T4oTMaaLUU+A5wr8fDYQOCKbRN4Gjs4=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: Hizofy5ijbi2o+HkcHfa34yGb13anzmVk59+k/4RVfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:f0:96:66:dd:df:d1:c5:a1:a8:88:c5:cc:ff:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Sep 10 19:01:06 2026 GMT
Not After : Sep 11 19:01:06 2026 GMT
Subject: CN=4d3af1d268647897fda700d64a90373960abbb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:a9:a0:c4:c8:24:89:8f:e3:83:80:ed:c9:
9a:e0:42:30:61:12:1d:99:a1:62:33:04:67:4d:3b:
38:fe:18:b5:1d:0b:c1:d8:b6:fc:c6:32:82:74:d1:
1e:58:2d:5d:83:37:d8:de:18:6d:08:6e:f0:53:73:
a9:07:91:ae:bb:6f:f0:79:cb:3b:d2:2a:38:da:84:
eb:f9:b4:94:69:d0:20:ae:ed:b0:48:2b:58:5f:5b:
12:06:a2:d0:d3:73:cc:58:4b:7d:35:a6:25:51:99:
9c:d5:f4:96:4e:21:5e:ba:01:61:09:a1:a0:d2:8c:
c6:c7:56:41:07:5d:d6:90:dc:07:4b:8d:46:c2:a5:
b8:66:f9:99:fd:26:81:1b:ab:b2:aa:6f:d8:95:bb:
55:af:0a:33:4a:06:ef:24:10:53:69:ae:7f:ef:95:
59:67:f9:60:38:98:73:95:df:3f:62:48:59:99:ae:
e4:95:20:37:9a:88:07:61:1f:f2:61:95:a2:93:52:
d1:af:ce:ec:2d:41:70:25:b7:c6:e9:37:8e:f0:47:
36:23:1a:53:95:54:ee:8f:9f:fa:bf:fc:f6:1a:1e:
64:a6:da:36:17:c5:6b:45:ce:65:c8:5d:b5:95:94:
1f:08:6a:96:82:3d:ce:4c:d7:de:6a:b5:ac:8c:06:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:F1:D2:68:64:78:97:FD:A7:00:D6:4A:90:37:39:60:AB:BB:11
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:f9:59:69:be:e4:bd:ba:4b:ce:d4:8f:3d:6f:25:a4:c2:
6a:88:1d:12:4e:76:37:78:2f:b6:04:16:9d:91:4a:ae:a3:ce:
92:c7:31:57:69:88:9b:37:50:9d:c0:c8:c9:60:06:0c:39:f8:
60:06:32:70:47:72:9a:ed:eb:89:49:aa:c8:46:14:c8:cf:74:
60:26:35:08:85:e6:95:90:21:7c:a7:5c:b9:ea:72:9e:db:9a:
3c:6f:0d:dd:69:31:dd:64:28:16:0d:08:6d:b9:17:24:4b:fb:
1a:0e:47:b4:83:3f:c4:11:c3:0b:d0:28:b3:19:2a:70:ce:54:
5c:5e:d6:4c:87:68:b9:2f:40:6a:ae:4c:16:3c:d6:98:21:12:
f1:28:68:c2:91:44:35:12:f2:69:fd:93:c9:8d:8e:07:55:e8:
18:78:33:fe:10:aa:34:ab:b6:4f:cc:40:9a:3a:71:f2:22:45:
be:37:dd:f2:43:34:57:8b:f5:2f:8c:e4:5a:5c:2b:21:3f:dd:
f1:d5:da:37:7f:7d:5c:70:be:27:cf:4c:a2:04:60:f6:80:c7:
1c:77:b9:63:95:2e:b1:fb:eb:79:d4:e5:3d:fe:bd:64:5d:5c:
6d:08:13:49:0a:a0:6f:57:e6:3b:11:c4:62:bb:23:71:bc:99:
62:43:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:00 2026 by rpki-client