Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: 7bLS/2fQA43AYB3tt54763ha5s3AWQZzPz6kOvd0jCI=
Subject key identifier: E5:B4:75:6F:C5:6E:34:6F:B3:F2:1E:61:03:9F:A3:65:04:3C:32:5E
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 01A06CB8C383F52C1FD75078FF31B7F537F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 02D3
Signing time: Fri 04 Sep 2026 14:00:43 +0000
Manifest this update: Fri 04 Sep 2026 14:00:43 +0000
Manifest next update: Sat 05 Sep 2026 14:00:43 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: uJJYvpzyF07T4mzgG2Eun6QMBg1UC813WQFPwqoqTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b8:c3:83:f5:2c:1f:d7:50:78:ff:31:b7:f5:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Sep 4 14:00:43 2026 GMT
Not After : Sep 5 14:00:43 2026 GMT
Subject: CN=e5b4756fc56e346fb3f21e61039fa365043c325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:66:8a:14:1e:c6:65:d8:fa:e1:d5:f8:f6:
a2:59:3f:3b:9b:e9:ee:d5:54:29:ca:0b:1f:27:36:
f3:28:d3:fb:c9:66:ff:79:85:ee:61:86:61:74:ce:
de:e9:3a:4d:e4:27:9d:68:91:b9:99:92:0c:76:59:
a7:44:74:70:4c:0a:a8:a6:b3:6b:27:b9:dd:c3:a2:
de:c6:d6:f1:da:40:21:77:54:34:3b:ab:7d:1d:f6:
09:d2:a7:f1:46:05:85:cf:cd:da:d1:05:42:7e:29:
d0:cf:f8:58:2d:54:5b:4d:ed:5b:21:55:51:b2:d6:
b9:97:00:ae:c8:a4:cb:82:68:2f:a9:d3:de:35:9a:
ac:f6:7d:fb:01:a5:eb:4f:25:23:f5:39:4b:0a:b8:
ee:dc:07:ea:e4:e3:5f:ae:b6:62:a4:43:a8:89:a9:
fa:0e:9e:84:f8:43:d6:c4:a6:87:80:bf:fc:02:87:
9a:1f:f5:10:6f:39:29:65:80:b0:b6:7f:44:1b:88:
3a:2d:a9:b6:6a:23:99:68:ee:5a:de:8a:87:a3:d9:
fc:00:0c:26:23:67:36:a8:04:c8:1b:e0:c4:aa:77:
77:2f:32:28:1b:5e:32:d9:8b:a5:75:73:27:72:cb:
bd:53:8f:ca:5e:cc:dc:20:ff:e9:e2:b4:81:7f:bc:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:75:6F:C5:6E:34:6F:B3:F2:1E:61:03:9F:A3:65:04:3C:32:5E
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:63:9d:90:bf:00:c3:c0:14:08:87:57:a1:bf:4d:44:53:
e5:b6:6a:18:38:cd:d3:78:41:5d:99:e9:2b:da:e0:ce:50:1f:
5d:a8:ee:92:f8:9f:a0:15:d5:a4:c6:79:1d:c9:6f:43:aa:90:
02:c8:20:40:da:c4:fd:bb:c5:83:99:12:ad:7a:3c:40:ac:c4:
63:e6:18:25:b1:52:9d:b3:6c:cd:c8:ec:df:70:a5:09:d0:95:
ea:f8:91:1d:45:eb:65:88:b8:6c:09:99:58:12:fc:e5:79:63:
36:83:f3:dc:ed:90:2a:6a:a6:67:85:66:26:5e:42:b1:eb:65:
0f:d8:53:ae:bd:d1:c7:ce:38:a9:5f:44:d4:56:98:d7:48:3e:
fd:95:ac:7c:5c:b5:5b:8d:01:5f:d5:c3:81:c5:6b:a7:d2:cc:
37:b8:59:dd:3c:03:35:87:92:2f:1a:e8:7a:d7:b0:ec:03:bf:
d8:91:75:49:d5:5e:ab:ba:04:b9:c9:60:d0:09:b0:79:15:32:
3c:66:bf:63:60:a8:f8:99:f6:a3:5a:e3:c6:4b:d9:8c:8a:53:
4b:d4:79:db:d2:83:ac:5e:d9:c9:84:86:22:9f:1b:2f:1d:45:
d4:b4:9f:03:6e:5c:1f:05:cf:27:d2:06:f5:89:1f:40:a6:2d:
fc:29:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:42:00 2026 by rpki-client