Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: 9vEkWyhV/bvM8bxdKG4HFAWj5MPoBQXD/vOtRUZR73w=
Subject key identifier: 83:83:9E:41:D8:9F:1F:EA:38:EB:1F:DD:23:E5:EF:C3:8C:F6:D1:E7
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01A0C933E168F5D63AEC95FAD802112A9EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 13:00:15 +0000
Manifest this update: Tue 22 Sep 2026 13:00:15 +0000
Manifest next update: Wed 23 Sep 2026 13:00:15 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: qrtGx9MCIbVH7MkhtLNGFq8xwGO4E/f7EndfMQgyWlg=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:e1:68:f5:d6:3a:ec:95:fa:d8:02:11:2a:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Sep 22 13:00:15 2026 GMT
Not After : Sep 23 13:00:15 2026 GMT
Subject: CN=83839e41d89f1fea38eb1fdd23e5efc38cf6d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:9a:f8:cd:90:e3:54:54:6a:68:3f:e8:f4:
cc:d2:a7:90:ba:6f:18:5d:99:99:53:ff:3a:2e:bf:
f4:5d:5b:b9:aa:8b:dd:41:5c:74:e9:bc:b0:15:78:
c7:3e:9f:3f:88:a4:c6:66:b9:8c:41:e0:fb:21:ff:
80:17:1f:85:0c:48:2a:ee:08:2b:2c:26:c2:73:a9:
1a:59:4a:23:0a:79:13:d6:a7:98:c2:9d:66:2c:53:
a7:67:65:9f:d4:09:2b:4d:78:47:b2:ea:82:3b:fd:
66:a5:ff:63:d3:7c:d3:0e:7c:59:a5:47:96:e2:69:
5f:ae:77:61:53:be:2b:12:32:2e:93:44:57:36:50:
51:98:99:c5:b4:cd:ce:aa:00:1d:fc:2e:67:cc:25:
2b:25:ea:a3:61:d5:dd:3b:f9:69:24:52:f8:62:10:
f1:d1:07:25:6e:d6:d2:0a:77:38:20:2e:12:2e:03:
06:cb:f1:6c:40:90:b8:3c:67:6a:e7:97:a6:9c:e3:
6b:1b:9c:b7:66:af:48:63:4b:e6:b6:a3:54:44:6e:
39:ed:0e:5b:68:34:44:ff:1d:16:d5:ec:db:1f:38:
ca:28:89:76:a9:d8:05:fe:4b:6a:db:5b:9d:47:42:
c4:46:48:58:54:fd:d7:29:11:df:62:ab:46:c2:45:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:9E:41:D8:9F:1F:EA:38:EB:1F:DD:23:E5:EF:C3:8C:F6:D1:E7
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:15:cf:61:82:5d:08:79:86:af:df:71:27:8a:bf:25:c3:7a:
17:58:c2:6b:57:78:9a:e8:f3:8a:6c:fa:4f:c9:12:eb:3d:17:
37:f1:ac:55:cf:09:4d:3b:27:67:60:c4:a3:01:78:62:f6:17:
6f:a5:57:81:c4:0d:56:62:45:46:b0:b4:97:06:f2:dc:f5:21:
36:81:2a:63:a5:93:d8:de:51:1f:d7:bf:26:ba:2b:42:8f:f8:
24:52:a2:b8:31:93:21:41:88:60:53:37:88:0e:da:af:72:20:
40:1d:e3:ea:57:37:4d:81:ed:63:54:0f:60:2f:e6:2d:b6:27:
21:5e:b6:c3:ab:1a:d4:f2:30:66:96:59:73:3d:2a:a0:fa:c2:
51:c9:7d:7c:c1:4c:bb:62:1b:92:e1:dd:5e:a5:b7:8c:96:90:
54:e2:67:1b:10:44:37:bd:23:03:2d:76:44:c4:b4:e0:dd:dc:
20:dd:bc:6b:57:a8:dd:0b:93:e9:e8:ca:b7:05:cf:3f:c9:63:
b3:93:1f:b0:94:9e:42:6a:d3:f9:9f:50:92:28:7d:b5:32:22:
02:78:26:a9:14:e9:8b:d6:21:05:ec:60:c5:ea:9c:7d:00:c3:
eb:49:fc:6f:d2:e1:76:22:b2:d1:64:f2:81:7e:55:68:ee:10:
48:ec:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:22 2026 by rpki-client