Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: JvFyHuJ6h/rcjIl8qf12Z+6FVTCsJ+yfb7EjAOaiNMg=
Subject key identifier: 7B:84:91:48:19:C8:9D:DB:D3:48:98:CF:46:41:79:E1:18:C6:27:4C
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01A189AE34C3A4AAF271418291FED29B625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 18DA
Signing time: Thu 29 Oct 2026 22:00:57 +0000
Manifest this update: Thu 29 Oct 2026 22:00:57 +0000
Manifest next update: Fri 30 Oct 2026 22:00:57 +0000
Files and hashes: 1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: zQvM3Wtf9B06XNGwa1LC4zCXAei0fNjojO/zZoQzm9E=)
2: pOIuDBEkoq7VJ1WH33qIfih-ISc.roa (hash: X4NB/WumcFxqMtQqwFAxWEPHaQYbJfAGl8Ne+TeIR0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:ae:34:c3:a4:aa:f2:71:41:82:91:fe:d2:9b:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Oct 29 22:00:57 2026 GMT
Not After : Oct 30 22:00:57 2026 GMT
Subject: CN=7b84914819c89ddbd34898cf464179e118c6274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:24:8b:39:96:50:65:ea:6b:f2:d0:4c:b5:
30:7a:f3:e0:32:36:08:31:7f:fc:b2:5f:ae:f8:e8:
bf:df:85:8d:d7:e4:40:07:54:90:2f:02:a0:7c:c6:
6f:45:80:4b:8a:e4:da:10:00:8b:da:c8:93:37:d0:
8d:82:4c:60:2c:27:92:94:2e:db:18:f9:92:1b:00:
02:ad:67:33:c6:65:d7:3f:c9:17:5e:4d:c0:f1:99:
72:6a:0e:d1:14:ce:83:1b:2b:ee:1a:3d:0e:57:a1:
ad:9e:05:e1:a4:8a:4c:ee:bc:73:ab:55:6e:ac:78:
90:70:55:c1:9c:3c:0b:16:8d:e2:4b:07:c8:d1:90:
c4:9b:f0:ec:c3:8e:1c:91:83:d0:90:82:f9:75:ed:
1c:ee:5a:a0:43:0a:c9:ae:11:29:57:01:08:e2:0f:
1d:78:fc:50:d1:11:7c:52:29:80:c4:cc:96:37:a4:
96:2b:ce:0f:80:6e:c8:ee:bc:44:81:fc:27:7a:23:
66:e6:5b:15:4c:0c:ee:82:2a:5b:ce:67:8d:a9:bf:
a2:f9:b3:41:6c:eb:5c:05:27:5b:d3:f3:24:dc:2e:
62:2c:95:13:ac:0e:06:b5:94:80:33:8d:88:2f:5f:
2f:dc:2d:2d:0e:21:64:32:fe:e2:96:80:3d:fd:39:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:91:48:19:C8:9D:DB:D3:48:98:CF:46:41:79:E1:18:C6:27:4C
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:b0:7b:8d:a1:93:fc:99:a0:da:83:9a:62:84:1f:20:b2:
e0:ad:f1:85:61:2c:b9:68:49:3e:05:ca:e7:d6:93:03:f7:46:
23:f6:8d:8c:06:da:cc:5c:d3:a9:59:b9:c2:14:8e:de:83:98:
7e:a9:13:4c:14:77:f2:f3:69:3a:77:28:10:cf:fe:f5:a2:0e:
00:93:05:fe:7f:f0:cb:f2:2e:14:06:8c:53:f3:ab:c7:39:48:
99:43:d1:88:52:24:45:0e:02:32:25:29:95:51:66:09:8a:d7:
65:90:c9:7d:f5:03:f4:f2:82:fe:d8:51:bc:68:1c:2f:00:27:
42:a9:e9:15:36:35:94:c3:c5:13:3d:f0:2b:02:60:07:52:9d:
e7:73:e0:fc:d6:d9:4f:71:9e:26:ad:3e:cd:f1:ef:f1:b1:f4:
ac:e0:46:15:1b:07:9f:75:10:02:af:5c:d8:db:d3:e3:e3:4d:
ea:d9:8f:bb:3f:b0:c8:07:f8:a6:60:c3:28:3f:a5:0c:3c:36:
7d:93:c2:b7:65:b6:32:ec:8e:38:c1:fc:c6:cf:ed:d2:a4:fd:
dc:45:08:4b:a3:77:84:d5:c5:36:7a:13:52:44:eb:6c:58:ea:
97:30:46:0d:45:93:6b:69:3e:57:12:d2:c1:de:c1:ac:b1:60:
8d:5f:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:07:59 2026 by rpki-client