Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: +ecjgDDh3fdqzhjFqawYWzHsgzZDsV+t8FtEBbzJrWg=
Subject key identifier: 9F:EC:CA:5E:17:27:06:1F:20:7B:B8:58:9B:F0:D6:DF:2A:ED:75:00
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01A19656E85E17129DA827ADFA01BB2A6E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0AED
Signing time: Sun 01 Nov 2026 09:00:40 +0000
Manifest this update: Sun 01 Nov 2026 09:00:40 +0000
Manifest next update: Mon 02 Nov 2026 09:00:40 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: CRq6PlrLYMEv6sAeiI6sPRUYthxEumGJ+F3Pb7c8dds=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:56:e8:5e:17:12:9d:a8:27:ad:fa:01:bb:2a:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Nov 1 09:00:40 2026 GMT
Not After : Nov 2 09:00:40 2026 GMT
Subject: CN=9fecca5e1727061f207bb8589bf0d6df2aed7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:66:65:16:0e:fe:75:01:75:78:ea:c8:26:
f1:d0:c1:fd:fc:b8:03:d9:88:7c:b6:c5:2a:70:5a:
fe:66:1a:7d:97:dd:3b:b7:48:14:18:08:4a:61:57:
fb:4c:ac:fa:3a:69:6a:ab:4b:6f:73:42:c7:4b:e7:
85:2c:b5:2f:cc:40:08:be:fa:88:88:4f:dd:21:b6:
4d:52:ee:d1:09:d0:2f:73:b4:04:17:46:53:70:89:
74:31:bb:b7:b4:35:0c:1e:d4:d6:52:40:4c:cd:aa:
28:7c:c3:b1:54:d4:2b:59:70:4d:eb:83:54:9e:24:
2a:af:f3:13:7f:d6:0c:d3:25:a5:f3:c3:96:84:a1:
ed:ca:9e:39:70:84:f6:aa:cf:95:1c:15:35:64:97:
57:86:dd:b1:a3:ce:ff:01:e9:c8:85:0f:b7:68:82:
f7:40:43:f5:aa:c6:29:a5:e6:f6:1c:74:2f:35:5f:
6d:49:4a:e5:89:d7:ca:10:a8:52:a1:10:10:a6:70:
2f:c9:1c:92:4b:d0:0b:fc:ff:a6:6a:85:fb:2f:f1:
b9:fa:87:bb:45:d9:29:b0:19:fb:4a:e8:13:6a:c0:
4b:cc:53:c2:0f:2b:66:f8:ba:d6:b6:18:cb:a0:45:
d8:72:ee:52:48:50:80:0f:df:d1:bd:4e:66:5b:62:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:CA:5E:17:27:06:1F:20:7B:B8:58:9B:F0:D6:DF:2A:ED:75:00
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8c:89:c2:5f:ee:39:3a:7d:6d:43:ce:59:a6:98:58:05:6b:
59:c1:a9:87:2d:8c:c0:c1:2c:56:4d:8d:a3:c1:45:aa:7f:0b:
5a:88:c5:72:ae:74:24:1b:86:d0:26:f3:ae:72:d6:77:4a:13:
04:c3:2d:2a:fa:a9:c2:72:d6:39:f4:a1:05:15:d3:7a:fa:c3:
35:7e:cc:b6:3f:0e:1b:f9:76:5e:32:ca:57:98:ea:94:5a:f7:
db:1d:58:02:b1:7a:78:3d:5f:ed:3b:4c:1c:7e:b6:e2:c1:d6:
6f:cb:9b:f8:7c:6b:20:07:62:8b:ba:05:19:cf:f3:90:9c:c2:
a7:48:57:bc:b8:e9:66:82:6d:3b:26:64:80:25:db:55:30:80:
a8:3e:98:b7:2c:c1:79:dd:92:26:12:56:2e:a9:bc:03:a8:8a:
e9:87:7d:e5:df:77:93:fe:4b:17:c1:f8:a4:fb:6d:6f:45:78:
80:a8:ae:ca:5b:b8:e7:6c:3e:b2:83:32:2b:8f:fc:34:92:f2:
e3:a5:fc:db:ee:ca:5f:93:aa:1f:01:51:46:2b:e0:3f:87:2e:
2e:58:00:c8:aa:1e:bc:88:1f:2e:b4:11:78:b8:72:67:d2:83:
2a:07:36:f7:38:99:80:e6:c6:8e:49:98:e4:dc:30:40:fd:ea:
b8:0f:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:38:53 2026 by rpki-client