Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: 24UcmhNF456GzPcmlP0ew527QIe7NvFhGOPaMtg0YX8=
Subject key identifier: FE:B7:57:D1:2B:FB:6A:33:39:97:89:1C:02:52:9D:80:FC:CA:88:59
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A12089D0A3ACD7865DB5FC33C03444CA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 1988
Signing time: Fri 09 Oct 2026 12:01:05 +0000
Manifest this update: Fri 09 Oct 2026 12:01:05 +0000
Manifest next update: Sat 10 Oct 2026 12:01:05 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (hash: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=)
3: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
4: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
5: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: MWZF+U0sxQSy1su6nPM4jaQIx46aqSg86VLRObPYyAY=)
7: h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa (hash: b0rWEYGwa7xjd8bh0IRkVhSdpTV7x20TYWLjgsw3Vkk=)
8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
9: ndP5FL5P0NgyaX8bGr9alOA9HO0.roa (hash: Q7zGnzRCWrQDq88He7wb77+6qa5kJX5tVhXixyT+fsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:d0:a3:ac:d7:86:5d:b5:fc:33:c0:34:44:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 9 12:01:05 2026 GMT
Not After : Oct 10 12:01:05 2026 GMT
Subject: CN=feb757d12bfb6a333997891c02529d80fcca8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:cd:76:2f:ad:d3:4e:c0:3e:60:88:55:36:
b5:67:dc:76:03:57:4d:76:49:f5:72:cb:dc:da:b4:
bc:00:56:c9:93:eb:eb:47:ca:e2:a3:1f:82:b2:ab:
f7:d5:fd:11:42:79:c7:9e:85:b6:3d:d6:c1:6b:be:
06:b3:75:78:ed:51:b4:8c:60:12:5d:3c:6f:89:4f:
c0:f1:af:c3:be:ad:d4:58:1a:a1:3e:cd:36:21:88:
1e:bf:85:4b:00:9e:ef:7f:57:b3:89:fa:24:ee:52:
0e:23:75:66:62:5b:df:71:51:5d:02:d2:10:00:c8:
e1:41:4c:8e:b9:75:c4:0b:e8:5a:7c:3c:fd:55:4a:
88:9c:c8:f9:ec:20:ee:45:49:af:4d:0a:b1:32:ff:
86:89:0f:af:e8:5b:30:50:e8:12:c6:87:ab:18:6d:
80:28:0d:f8:e0:36:91:7a:e2:8b:aa:98:4e:20:b7:
fb:c9:f7:98:09:ba:a8:ef:7c:19:ea:79:a2:7a:99:
0d:93:16:0d:6a:68:a9:5c:d0:46:2e:eb:73:8c:5c:
17:3f:ab:06:c7:55:81:43:00:32:57:d1:1c:6a:25:
26:5a:42:3a:6e:5d:ce:0a:f2:60:fb:62:96:39:bb:
b4:4e:87:6b:f6:c2:bf:8d:eb:af:f4:47:23:05:25:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B7:57:D1:2B:FB:6A:33:39:97:89:1C:02:52:9D:80:FC:CA:88:59
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:97:f4:8f:db:5c:a8:4e:81:21:99:1c:61:69:9f:fb:09:87:
c3:78:02:67:ce:c3:16:67:90:a0:ad:32:6c:3f:79:af:5b:b8:
f0:bd:02:81:c0:6a:2e:71:81:9e:ff:2b:1f:0b:a3:68:e0:f3:
96:5d:7d:ec:80:70:93:98:5d:06:9a:5c:df:c7:d5:74:55:1a:
f4:9d:a5:eb:5c:86:db:b9:c3:3b:07:90:49:f2:35:a3:76:9f:
f5:57:54:2c:72:2a:06:6a:4c:a4:e6:15:87:17:93:c0:4f:bf:
e3:cb:e0:60:94:f3:1f:52:37:2f:41:6c:7f:c2:97:b0:b0:f9:
2b:89:cb:aa:cd:96:c3:a3:36:51:cc:c2:24:07:cc:8e:cf:0b:
9d:90:e2:6c:c7:2d:ef:49:de:0c:6f:3b:dd:e6:1b:97:85:79:
b8:3c:5d:7b:50:4f:f5:f4:bc:86:fa:d2:a7:8f:7c:0e:11:3b:
5a:f7:48:7c:7d:b7:ad:ad:d8:e1:e1:8c:a4:17:61:2e:2d:48:
66:3e:88:cb:e3:be:89:4f:3f:5c:87:65:d5:83:df:97:f7:00:
77:3d:7b:9e:5d:d9:ad:af:73:9a:80:75:ab:6b:44:d9:f9:f8:
59:93:b4:b5:12:12:a3:44:9a:56:74:a3:80:c0:d9:06:dc:92:
41:21:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:25:33 2026 by rpki-client