Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: 0EsMKSu8PvW28bo90HlIUbNdI35YIGeAadVFJDEMAfY=
Subject key identifier: 7D:58:FB:9B:EE:69:21:58:2E:B0:6E:9F:18:C4:03:50:47:D9:00:31
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01A06DCC34F7C4AE14854043463F3AAD9AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 1847
Signing time: Fri 04 Sep 2026 19:01:34 +0000
Manifest this update: Fri 04 Sep 2026 19:01:34 +0000
Manifest next update: Sat 05 Sep 2026 19:01:34 +0000
Files and hashes: 1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: lTSSOVD5WwmsX6pfP/kqst/U8vJPufiX+Rn1iaORxzE=)
2: pOIuDBEkoq7VJ1WH33qIfih-ISc.roa (hash: X4NB/WumcFxqMtQqwFAxWEPHaQYbJfAGl8Ne+TeIR0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:34:f7:c4:ae:14:85:40:43:46:3f:3a:ad:9a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Sep 4 19:01:34 2026 GMT
Not After : Sep 5 19:01:34 2026 GMT
Subject: CN=7d58fb9bee6921582eb06e9f18c4035047d90031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:97:e9:66:b6:52:e6:12:d3:57:8a:b4:2b:
20:d4:99:75:fe:4c:80:4b:b5:b8:b1:b9:d5:dc:83:
8e:3a:73:55:09:03:1a:86:dc:08:23:fa:b2:db:c8:
f0:a5:ec:19:5f:59:30:10:fa:15:4b:07:94:01:ce:
65:d2:ca:02:4a:08:50:37:83:7a:1c:e7:b3:3a:44:
9e:be:3d:b4:23:7d:a5:30:89:84:42:1d:1d:e7:a6:
7a:14:c1:2c:f2:40:4f:c9:73:b4:04:06:4b:e6:5b:
4b:b0:de:d4:31:a4:5e:6e:78:7e:83:89:8c:8c:61:
ee:5d:7d:90:10:33:d5:98:3e:d3:da:3a:b9:9b:33:
24:46:69:55:85:f3:62:6d:c2:e9:06:c2:ed:d1:28:
d5:15:00:36:0b:23:61:c2:e1:10:35:ce:95:2d:ea:
84:db:d6:d9:c3:38:c2:e7:96:34:9f:a4:6c:10:33:
01:88:60:a9:40:4c:52:d7:e3:3e:4e:f1:0d:87:ed:
1a:06:ed:1d:e9:27:0a:f5:f0:7b:fc:c0:63:78:25:
bd:ae:f0:87:25:72:7d:74:41:cd:33:20:1a:7e:8a:
c7:bb:83:3b:ff:08:12:6e:6f:f4:ee:06:6b:bd:82:
42:2c:2f:ea:a2:f2:2e:9f:b6:80:a3:60:4b:a1:6b:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:FB:9B:EE:69:21:58:2E:B0:6E:9F:18:C4:03:50:47:D9:00:31
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:34:67:26:2c:4c:fa:4d:01:a4:51:02:92:2b:1a:c5:64:71:
60:38:c8:4f:57:75:46:a4:20:d7:6d:fc:ca:4b:ba:c4:4d:bc:
95:96:36:b3:8c:8b:f5:26:59:75:91:e2:a7:97:b1:68:99:2d:
f3:5d:6f:7a:f9:f3:9a:37:e5:7a:0d:9a:db:41:fe:ed:84:de:
57:3f:95:ff:c5:23:15:8f:68:01:f1:6a:69:c3:aa:87:f6:4a:
b6:5f:82:0b:b1:bd:96:c1:6d:56:e7:1e:5e:f8:63:73:9f:be:
ab:9b:76:52:72:f2:a7:73:ca:04:c4:db:56:cf:02:e3:19:56:
29:72:75:ea:0a:26:53:4f:ea:b3:0b:cf:77:18:ae:9c:c4:19:
41:ad:11:dc:6c:27:14:82:78:2f:76:e0:c6:84:a6:9f:d8:00:
9a:1d:d5:7f:9d:34:0b:2a:4a:64:c3:ab:5a:34:3b:68:bb:fe:
92:39:8c:ec:71:9e:96:06:c7:f3:43:4c:b5:a8:e4:68:0f:28:
34:f3:6b:69:fa:48:cf:e9:30:4d:cf:1c:57:38:fc:12:cc:47:
2a:cf:55:30:f6:c8:56:59:33:6c:19:ae:06:e1:a1:c9:c9:3d:
8e:8f:58:d1:e3:42:34:7c:f5:93:01:85:90:c8:e6:c3:d7:fc:
08:d9:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:18 2026 by rpki-client