Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
File: Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft (raw, json)
Hash identifier: h1GRY4fqdlADtm1yNL2oyLOlJuEM0/j9Y+iJT7oPt6A=
Subject key identifier: 74:DA:96:56:2E:7A:6B:37:CF:5C:D9:6A:25:BF:AA:7E:97:A8:39:29
Authority key identifier: 01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
Certificate issuer: /CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Certificate serial: 01A149BD4F165C3B4419BD4ACD5B60515A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
Manifest number: 0124
Signing time: Sat 17 Oct 2026 12:01:45 +0000
Manifest this update: Sat 17 Oct 2026 12:01:45 +0000
Manifest next update: Sun 18 Oct 2026 12:01:45 +0000
Files and hashes: 1: 9FnedNLGy2qGufqg39zhdRMwEdI.asa (hash: eeM2HVe0C2trzp/vP7ZN9Dek8/mPhMXDy97rUY+CGQ0=)
2: Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl (hash: MmludsfWdgcxpnJCmv8a2S5YFv2eupLSyFjuHQSa+1U=)
3: P7X-TFQrNBUmDTPrSg8Uycv95BA.roa (hash: JWrwg1jchmmpIeyFsH/GcYXJUkYLKUH8jhZQ6YCaBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bd:4f:16:5c:3b:44:19:bd:4a:cd:5b:60:51:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Validity
Not Before: Oct 17 12:01:45 2026 GMT
Not After : Oct 18 12:01:45 2026 GMT
Subject: CN=74da96562e7a6b37cf5cd96a25bfaa7e97a83929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:9b:81:fa:51:d1:51:bc:c7:f8:50:1c:18:
fd:98:c5:84:e3:67:c3:15:f2:96:7a:09:e5:e4:7a:
3d:f3:c3:7c:41:e2:6e:ab:db:36:66:e9:70:79:f9:
48:20:02:50:88:5f:3c:11:7a:6a:61:8b:d0:9b:0f:
b7:0a:8a:55:cf:99:f1:e6:89:9a:1a:a3:89:a4:bc:
2a:44:4e:0c:4a:84:b5:e5:a3:4d:ed:c2:11:9e:73:
f5:78:8e:66:9f:cd:70:6c:c5:c2:8b:82:2a:50:59:
b7:5f:12:bb:52:12:d6:6c:34:78:6b:18:1b:ab:f3:
19:95:b5:6c:1d:c4:3d:ad:aa:04:7b:d9:df:7a:11:
bb:39:1d:19:95:ea:1e:c3:45:86:9e:97:28:11:35:
99:58:01:b2:da:16:47:15:da:e8:59:3c:ff:65:1f:
e2:c9:66:df:7b:12:3e:b4:c6:4f:d9:06:fb:1c:97:
53:fa:ba:79:57:3f:45:61:a5:b7:3d:3f:bc:c8:c8:
e1:c5:3e:83:23:08:8d:6c:72:4e:7c:13:c0:2d:fd:
ad:d5:95:78:aa:8e:f6:55:54:e1:c9:93:d6:51:2f:
2d:29:e1:7e:9f:54:34:69:6b:47:9c:48:11:66:40:
ff:72:8c:07:a6:e0:7b:61:a1:e5:7b:59:6e:f5:f3:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:96:56:2E:7A:6B:37:CF:5C:D9:6A:25:BF:AA:7E:97:A8:39:29
X509v3 Authority Key Identifier:
keyid:01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:86:3d:3c:b8:dc:c1:31:1e:28:3d:08:2e:d4:b7:9a:2d:0e:
62:9f:f4:a0:67:3b:16:8b:ea:de:84:42:46:06:36:f2:63:fa:
0e:e7:f4:a8:64:d2:60:cd:56:f5:5e:7d:d3:bb:af:22:ac:00:
ca:a6:b3:75:a7:cc:55:8e:39:72:19:91:85:76:5d:f1:38:0e:
bc:47:58:47:4c:24:44:8c:85:a1:eb:17:73:11:79:f0:58:1d:
79:c8:65:ef:be:91:ff:90:28:28:8a:43:c7:f2:a3:c2:b9:e7:
7a:78:b6:08:c2:c2:7b:c6:2f:8a:ec:38:34:0a:17:9d:20:dc:
f8:08:9f:41:0f:30:38:aa:b6:7d:8b:32:b3:23:d9:e1:4d:8c:
c2:de:d6:7c:72:77:2e:2e:ac:f7:2a:61:50:b9:56:15:5a:59:
da:bf:cd:2a:68:c3:df:1a:bc:56:90:3b:b7:d2:a0:82:ab:30:
c4:99:8f:85:ba:bd:ed:ca:61:43:74:d9:1f:54:e6:89:33:9a:
23:f4:5e:7a:b5:90:53:63:19:11:e6:24:af:50:88:b7:5b:7f:
66:1c:d3:44:26:27:c0:af:fc:34:87:de:da:b3:e2:79:ce:75:
50:50:b7:34:00:35:6f:03:7c:56:ca:ba:f6:41:66:53:fa:02:
da:5b:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:29:52 2026 by rpki-client