Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: xNS5d4nh0ekhxftmtCxj5veKbC2xssbcEC99TE3SDYo=
Subject key identifier: 4C:DB:3F:A6:0F:4A:E5:B1:43:C7:86:87:84:67:51:04:AB:03:D5:BA
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01A17CCEC88D1FBF5F5D57BAB4B918BDF90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 10:01:28 +0000
Manifest this update: Tue 27 Oct 2026 10:01:28 +0000
Manifest next update: Wed 28 Oct 2026 10:01:28 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: HpCZmoYE0e9WWCtLpkmhqzJiXlr9O3hapDdQp8KsDiU=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:c8:8d:1f:bf:5f:5d:57:ba:b4:b9:18:bd:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Oct 27 10:01:28 2026 GMT
Not After : Oct 28 10:01:28 2026 GMT
Subject: CN=4cdb3fa60f4ae5b143c7868784675104ab03d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:e2:45:16:c9:e8:6e:ff:d3:17:cd:9c:10:
24:c3:ee:f7:bc:06:5d:39:69:b5:af:a5:97:f5:f4:
22:41:50:4a:37:a0:d8:7a:d1:25:22:6f:a7:a7:a9:
ce:e3:cf:1c:e8:38:44:0e:33:88:f7:72:e4:83:4c:
25:c9:9a:59:7f:f8:03:ba:78:1c:e0:f4:15:77:49:
65:08:bd:2b:78:49:5f:e1:50:ed:05:2d:f5:7d:71:
0c:e6:74:f7:45:65:ae:17:b1:cb:84:0b:2f:7b:9c:
7f:95:73:e8:63:02:e8:44:4a:1e:4f:05:11:4e:b8:
b5:a0:15:52:b5:21:03:e1:66:5b:ff:86:0c:e0:59:
4c:28:16:1f:05:7a:ad:a4:cc:e8:dc:b5:e4:9d:1e:
c9:fc:27:35:2d:52:0b:2c:23:07:8c:45:2c:62:3f:
62:1d:21:0a:63:c2:fb:f5:b2:29:fc:d3:19:4f:13:
23:e9:38:9f:c1:5b:06:84:b4:17:17:9e:65:f7:e8:
6e:c5:51:94:34:31:74:88:f9:9d:6e:3e:4c:f1:9e:
d5:ed:68:25:a2:64:8e:d2:08:98:2e:89:98:e8:be:
17:6b:31:d9:6c:d2:e2:25:c7:e5:da:e6:26:16:60:
86:a8:b6:36:12:05:f8:1b:5f:16:1c:4c:75:f6:8b:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:3F:A6:0F:4A:E5:B1:43:C7:86:87:84:67:51:04:AB:03:D5:BA
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9c:22:dd:17:6c:d8:f4:af:6c:23:f1:90:46:ba:ca:36:ee:
a4:87:e8:26:5f:dd:7e:ec:4c:5b:13:a3:24:ee:7b:7c:59:34:
76:ab:d3:74:db:19:50:69:c7:3d:50:37:ee:cc:bf:e5:8e:b7:
cf:f8:f1:b4:a0:b9:33:ab:a2:14:74:6a:52:60:ee:5d:99:82:
84:b6:e0:aa:27:c6:97:53:16:60:e0:c4:f7:49:d6:d7:60:03:
d1:4d:77:a6:c7:28:56:1e:c3:e5:66:2b:f7:75:df:22:97:55:
03:ed:50:40:fe:51:bd:7e:bc:d2:1e:63:2d:ce:24:1f:3a:7e:
ec:28:38:60:41:9a:0f:fb:95:f2:b5:aa:fd:eb:df:8f:9c:98:
c7:31:b3:f6:1a:b2:a4:6f:13:c2:bb:f4:a2:2d:37:7f:21:6f:
0f:31:99:1a:6d:ab:a1:c8:7a:1b:58:f1:d3:f8:c7:94:db:6e:
3f:bd:10:08:b8:90:71:0f:b6:2c:6a:cb:6e:0c:e3:5a:26:71:
06:8a:ee:d9:56:ee:e7:df:a1:e0:73:8d:29:52:31:06:e7:9c:
67:57:3c:24:8d:05:93:3e:19:68:50:b8:a2:29:21:76:f5:50:
a9:2c:a5:de:2a:6d:b3:b6:79:fb:d3:0b:5f:31:17:88:f4:99:
7f:9d:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:50 2026 by rpki-client