Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: VDYS7cYkmhDsyxsBLKvyJwjl5kTc3N94DIc+H0lL84Q=
Subject key identifier: C1:8F:18:CA:D5:47:51:59:ED:73:33:C1:24:97:27:86:17:99:87:40
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 01A167C6B5D9B36E33077EC58E7ECD11FC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 0355
Signing time: Fri 23 Oct 2026 08:00:38 +0000
Manifest this update: Fri 23 Oct 2026 08:00:38 +0000
Manifest next update: Sat 24 Oct 2026 08:00:38 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: aNoRP6CsLmvIR+iOFCVnCyoRZTnUrJJPplVzWIgxtnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:c6:b5:d9:b3:6e:33:07:7e:c5:8e:7e:cd:11:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Oct 23 08:00:38 2026 GMT
Not After : Oct 24 08:00:38 2026 GMT
Subject: CN=c18f18cad5475159ed7333c12497278617998740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:16:5a:c2:21:a5:7b:44:91:a5:e9:15:21:
e0:f1:da:59:51:50:75:06:ae:cf:a4:82:33:2d:93:
93:a4:34:8f:8e:d2:ba:b0:63:65:5c:b1:cb:3d:b5:
d3:29:41:73:7d:6f:df:dc:98:b1:f4:14:2b:27:cc:
5f:95:9a:93:9e:ce:02:5d:e7:e8:dc:a0:f6:4f:cd:
62:7b:ea:be:e4:e8:dc:a8:fa:30:35:95:a7:f1:af:
ad:0f:c1:d5:ff:e7:61:e1:f0:d0:87:f4:fb:93:56:
fd:a0:4a:b0:90:d5:43:eb:83:d6:8e:43:dd:ba:cc:
1e:3d:58:35:46:2c:48:a7:68:71:70:02:59:49:78:
9d:9f:e7:7d:cb:09:a3:de:f8:08:c5:51:a0:92:05:
4e:8c:70:61:09:7f:04:97:c4:c0:4e:f0:49:8c:54:
4d:37:d9:e7:9f:5c:b3:9f:1a:5f:25:76:78:42:09:
1c:e8:83:cf:47:1e:0b:f8:ec:77:60:f7:db:c2:c8:
9f:8a:cf:2c:1a:15:41:54:46:07:68:33:74:81:f3:
f7:99:f8:26:f1:b8:dc:4b:e3:e9:24:05:c7:ba:f9:
fa:23:cb:e3:56:c4:61:fd:f6:36:fe:45:0e:22:44:
ba:e0:be:00:71:7d:a0:39:d0:b2:bf:f4:84:b1:05:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:18:CA:D5:47:51:59:ED:73:33:C1:24:97:27:86:17:99:87:40
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:84:f3:63:25:e4:c3:08:b0:b1:ad:b3:29:1a:e7:aa:f7:
af:60:28:b8:c5:06:b0:4d:b4:a8:e1:ab:3c:03:18:dd:16:e4:
f1:06:e7:44:4f:d0:3c:05:d8:d8:87:95:c5:38:90:a8:d8:91:
43:6b:2e:98:4d:5d:cd:fe:fa:d8:20:89:53:4f:8d:12:a4:c3:
e5:bc:21:f8:ed:31:c6:a5:78:bf:d3:bb:c2:67:97:83:ec:59:
a6:67:36:99:49:e2:8f:4e:23:30:9f:3c:80:23:c6:63:ea:5b:
ba:2c:6e:bf:05:c3:9c:6b:63:c3:67:19:e6:22:25:c0:01:d6:
cc:7f:5c:12:f8:1b:d8:74:f5:d4:e5:4f:91:51:61:5c:33:20:
d7:56:da:e8:c9:58:f9:f1:49:0a:a3:bc:7a:91:c9:9e:f8:c6:
47:b0:3d:2f:fe:12:6f:a5:85:b3:56:0c:c7:08:da:d2:32:f1:
99:c8:3b:79:dd:29:2f:b6:da:96:e7:82:d9:4a:b9:e2:db:00:
37:09:f8:b7:96:09:76:a2:86:2e:29:e3:99:28:94:61:a2:a7:
01:3b:be:a4:04:76:62:27:a6:b5:f3:06:c0:ae:7d:32:ec:3d:
90:b0:7a:51:57:22:08:bb:91:5b:94:e5:56:a8:77:a4:be:eb:
6c:cd:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:43:25 2026 by rpki-client