Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: /9l/PEcrM5h5/Ecokcotb9hRuSuJTHU8wm9/Vnz7HL0=
Subject key identifier: D3:AA:64:79:A5:F1:45:57:43:33:4A:B6:D1:22:F4:D2:94:C0:B9:46
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 01A06D9548D8008884D5B0B473AF89981810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:34 +0000
Manifest this update: Fri 04 Sep 2026 18:01:34 +0000
Manifest next update: Sat 05 Sep 2026 18:01:34 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: s6kauNEHNgssE8uv03OUt47TKrIHE3WKmorpdNd0T0Y=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:48:d8:00:88:84:d5:b0:b4:73:af:89:98:18:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Sep 4 18:01:34 2026 GMT
Not After : Sep 5 18:01:34 2026 GMT
Subject: CN=d3aa6479a5f1455743334ab6d122f4d294c0b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:67:1b:dc:e3:e1:d1:98:1f:2d:85:5e:08:
c4:ad:5c:67:be:6a:81:51:64:71:d0:f4:df:3b:e0:
56:8f:c7:ce:6c:71:54:06:6b:df:0a:8e:07:76:43:
2c:68:9d:b8:62:27:80:28:21:9f:01:ee:91:fd:a6:
01:a4:a3:65:92:21:9f:55:44:14:86:18:98:82:68:
2e:dd:11:7d:43:4e:7c:22:92:2b:4f:e0:4d:b1:41:
e4:23:3a:32:cc:ba:1a:84:d5:68:0d:54:27:cb:c3:
fb:99:01:e7:b3:85:7c:37:ca:53:93:76:75:03:92:
3d:70:15:03:d7:ba:d8:bb:47:ca:06:28:58:8a:c9:
aa:c9:87:0d:90:fa:36:96:d8:2d:74:a4:95:1b:e4:
2f:b3:75:b9:9e:d5:30:3e:51:7c:17:6d:2b:5f:78:
fb:24:46:6c:e9:ca:bc:48:67:79:d7:d7:de:b6:58:
fe:98:33:cd:9e:a5:4d:ef:28:36:2f:f4:c5:7b:9f:
99:e5:8a:04:bc:62:83:9b:e4:47:bb:f6:41:b7:d2:
3f:cf:3e:1c:6a:7a:11:e0:04:2c:25:9f:bf:31:ba:
98:9a:73:f7:e1:1a:ef:da:5d:cc:ed:e5:d1:e3:d1:
cb:0d:c5:51:5b:a8:90:56:9e:01:ca:d5:60:8b:8a:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:64:79:A5:F1:45:57:43:33:4A:B6:D1:22:F4:D2:94:C0:B9:46
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:90:c9:fb:29:0b:b8:f0:c6:a6:99:e9:f0:2b:7b:6f:90:0e:
05:e3:05:4f:3c:98:72:9f:4b:95:f8:02:ef:38:e2:d6:dc:e2:
d8:6c:08:c2:65:a4:f3:ce:18:c0:a4:55:bb:fb:c5:bf:e9:cb:
8c:69:b9:ff:b4:b9:33:1c:4b:bb:f4:8e:30:7d:59:34:87:42:
d2:41:fc:e1:c8:67:66:6d:29:5c:9b:8b:14:2d:4e:ed:09:18:
6a:7d:d7:17:48:86:72:d6:11:68:20:ce:33:a8:f0:05:4d:5c:
7d:b1:17:7e:81:ad:60:f3:c5:c1:ee:dc:ea:d0:45:b4:fa:65:
5a:98:06:c6:97:99:30:ac:6a:5b:db:c0:d3:33:b1:29:c6:19:
42:da:c1:6a:22:3d:a9:f8:49:69:f0:c9:f3:40:05:9b:d9:45:
d2:c6:8c:10:c2:7f:85:b8:f6:37:c9:3b:c1:63:ce:52:b8:ed:
53:9b:81:e9:73:ab:49:64:7b:d8:07:d5:10:af:64:36:7b:82:
22:73:7e:da:7f:d7:3e:a2:2e:d0:c3:e5:98:fb:c9:40:d7:f1:
cf:06:65:c5:f9:47:78:ab:59:f1:f1:11:26:13:91:2d:ed:8e:
3c:b7:34:53:b2:03:1d:07:c0:64:94:53:79:cf:32:90:c1:cd:
36:62:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:59 2026 by rpki-client