Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: vD0gn255FI1UK2dey/6MG9w+FYaeISFIBzc/nKkSxiA=
Subject key identifier: 0B:B0:2A:59:2B:68:50:1F:8B:A5:F9:84:71:D0:FD:82:A5:2B:ED:7E
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 01A16A91B79045160AA108C3BC566DF91082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: 0135
Signing time: Fri 23 Oct 2026 21:01:36 +0000
Manifest this update: Fri 23 Oct 2026 21:01:36 +0000
Manifest next update: Sat 24 Oct 2026 21:01:36 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: Sx8MvcH74T5cQXlnFBX+klHENsJacQLQgjbEKLcGVdQ=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:b7:90:45:16:0a:a1:08:c3:bc:56:6d:f9:10:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Oct 23 21:01:36 2026 GMT
Not After : Oct 24 21:01:36 2026 GMT
Subject: CN=0bb02a592b68501f8ba5f98471d0fd82a52bed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:c8:6c:97:29:18:fa:2e:da:eb:f0:ad:4e:
f9:f3:73:ed:26:a7:ea:1f:3b:da:6a:24:ab:8b:f3:
e6:cd:1d:19:a8:19:64:54:08:e6:1a:ae:b2:53:25:
69:f5:63:02:45:ee:be:b8:c9:b7:c6:37:31:c0:f5:
8b:65:51:9f:62:c6:1e:57:3d:33:ca:1e:5d:75:04:
de:76:7c:e6:de:1c:20:68:b2:f8:54:9e:e1:f3:d9:
ea:34:8d:49:2b:e8:57:11:53:22:04:f6:d6:1d:b1:
b3:2a:a9:90:78:ad:8e:b5:65:cc:bb:0a:91:81:eb:
32:36:56:52:e0:aa:00:93:c9:53:e0:93:8c:9d:b3:
13:f8:ac:2e:64:3f:24:fb:cb:82:7d:91:0b:fc:3e:
51:7c:14:8b:9f:a8:61:6a:f9:ea:11:78:44:83:c0:
ae:52:4b:c3:1e:32:8c:57:ae:af:b5:b1:91:8d:0f:
79:50:5f:59:96:fc:8c:4b:9e:30:5d:4c:44:b0:22:
5f:e1:78:2a:e4:32:08:1a:29:2d:81:e5:fa:0c:b1:
77:63:57:42:21:b5:cd:7d:b8:17:a0:be:11:42:1d:
0b:a5:83:33:71:64:46:8e:3f:0c:67:be:52:7f:9e:
e4:e1:f1:0a:9c:42:f6:30:a5:9a:25:df:ab:6a:5c:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:2A:59:2B:68:50:1F:8B:A5:F9:84:71:D0:FD:82:A5:2B:ED:7E
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:b4:37:70:f1:61:cf:16:6b:c6:a8:b9:ef:77:8f:d4:ef:
cb:4b:7d:42:74:1d:8a:28:b9:cf:23:f9:17:50:68:f1:4b:66:
8f:ce:b5:ca:88:0b:23:ec:48:56:df:d7:fc:26:40:f7:18:9d:
2d:47:8e:08:31:e8:d2:dd:f6:e6:8f:d4:83:f9:95:60:9a:c2:
a1:19:3b:e5:09:6f:95:2f:05:ba:17:1a:a9:77:7d:e8:da:b1:
20:9f:a5:fc:5c:91:bd:e2:b5:da:cc:e6:4a:80:94:e5:e2:dd:
36:8e:01:7a:b5:2f:f1:d4:36:e8:b1:aa:7c:fa:ab:53:35:17:
8c:43:af:60:6c:a6:dc:aa:60:81:91:53:02:f8:51:28:4d:22:
66:43:f6:fa:5f:dc:da:67:3f:14:ef:3d:32:f1:b7:ce:d2:6e:
80:4a:ca:32:3c:4f:2a:c6:ae:c1:6b:0d:81:f0:e7:88:b2:17:
56:59:8b:d7:71:fc:2f:57:73:de:e4:a0:7c:a4:1c:97:21:d5:
13:4c:b2:73:3f:31:97:81:35:7b:8c:25:92:ac:cc:55:6b:16:
56:3f:41:ce:d9:f4:c6:d0:a4:74:84:ac:ad:5d:09:a0:7a:f3:
30:57:b4:c9:fc:83:6a:90:11:10:92:4b:82:dd:86:f4:a2:01:
9a:dc:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:50:31 2026 by rpki-client