Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: leCtnOkN/pmy7hNVQTDUiLUERMCQEvA6lnpsdhdrGSQ=
Subject key identifier: D7:2C:46:5C:F7:DD:25:20:8D:41:2D:1E:5C:88:1F:23:82:B0:82:50
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01A198458C09C4B086BD567700A6E1A67474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0AEE
Signing time: Sun 01 Nov 2026 18:00:56 +0000
Manifest this update: Sun 01 Nov 2026 18:00:56 +0000
Manifest next update: Mon 02 Nov 2026 18:00:56 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: CakRsndFZOAcFUsFM2s0M0p5cGURfCpYXPFmUe2IzOk=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:45:8c:09:c4:b0:86:bd:56:77:00:a6:e1:a6:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Nov 1 18:00:56 2026 GMT
Not After : Nov 2 18:00:56 2026 GMT
Subject: CN=d72c465cf7dd25208d412d1e5c881f2382b08250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:50:1b:7d:46:3c:e4:0f:64:7f:6b:42:fe:
ba:5d:c3:e0:6d:a6:4f:fb:ef:ec:2c:76:34:be:79:
ec:af:d0:62:ff:a4:84:ff:23:32:55:18:1e:28:63:
87:0f:03:61:ae:d9:a7:57:f8:c6:89:f2:86:44:ce:
70:4e:c3:2f:12:aa:2f:17:b6:a3:15:dc:30:e2:ae:
2d:8c:91:b3:c0:6e:d9:86:f3:fc:f3:83:e0:3c:13:
cc:63:12:1a:7e:d5:80:0c:b2:65:a3:dd:ad:12:c9:
0f:64:75:57:d8:f1:4f:06:0b:b2:63:b1:c1:a0:10:
4a:a0:38:59:07:c2:27:7c:77:f6:b0:a2:68:c0:37:
3c:c4:34:d9:1d:0d:b2:57:7d:7b:d2:9c:59:70:59:
6a:a3:76:fa:e0:4d:08:ac:b8:65:65:6c:41:9d:98:
0c:11:78:3b:fa:50:8a:73:e4:e2:96:c9:23:31:5b:
c1:5e:28:4a:b7:b6:51:d2:a9:c1:e5:83:83:c2:5b:
3a:34:b8:72:f2:20:fc:24:c2:b6:65:58:6a:28:c3:
35:b4:cd:90:ed:80:7c:1b:a4:98:1c:5e:56:4a:36:
78:7b:dc:54:f9:61:66:3f:f2:be:16:78:8d:fc:ab:
b4:12:e9:78:da:a6:1c:fb:2e:63:d3:3b:58:e7:82:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:46:5C:F7:DD:25:20:8D:41:2D:1E:5C:88:1F:23:82:B0:82:50
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:2c:1e:c2:3d:e7:0a:f8:81:eb:f3:c6:ad:11:98:68:5a:
20:1c:25:df:f5:66:42:a3:74:b3:77:98:8d:bb:22:21:f6:fa:
d8:3d:8a:c4:6b:8c:6e:70:6a:10:3a:74:88:bd:bc:9d:69:5e:
50:32:ee:01:c8:12:41:29:70:71:63:90:4c:6c:06:08:1f:ef:
7d:ba:85:ce:3e:84:84:e6:46:eb:26:54:82:91:6a:81:23:fa:
b5:e5:42:93:ac:08:9c:79:75:4d:7f:d6:94:db:6d:c3:1a:a1:
db:c7:bc:fe:d9:34:e3:1b:56:e1:e8:fd:df:bb:bb:38:2f:7a:
0b:e1:ee:95:95:01:22:d5:42:52:07:46:e8:4c:10:60:07:6e:
dd:1a:5e:74:7e:2e:e8:c3:05:4b:d2:e3:cb:ba:00:79:c1:ca:
c1:56:e0:6a:07:97:25:7a:f9:51:bc:8f:e4:76:9d:f2:77:8b:
17:b6:cc:07:7d:5c:3c:a3:5a:65:df:cb:98:ad:08:00:4c:2e:
8f:3d:63:b8:4f:a4:e4:de:d2:29:67:03:9a:65:9a:9f:f6:60:
f9:6c:5f:88:e8:16:51:98:b3:29:d5:7a:33:1d:01:42:9a:d9:
92:88:02:75:71:5f:7c:89:cf:fa:85:73:a4:e8:87:df:c9:4d:
c4:e9:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:40:56 2026 by rpki-client