Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: xWtsYDpscgytqokXxoUm1eKd+MujSwxseMeHmK1lko4=
Subject key identifier: 62:20:4C:0B:8A:C0:F6:97:FB:36:49:46:2F:01:A0:43:61:E4:DC:5B
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01A0B809EAFA844541BEE2C015D6FA0C4920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 1145
Signing time: Sat 19 Sep 2026 05:00:52 +0000
Manifest this update: Sat 19 Sep 2026 05:00:52 +0000
Manifest next update: Sun 20 Sep 2026 05:00:52 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: vgQE0qHbrODYyvDpac4i5PZ6mQnSHJ1nzLOxKBENiD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:09:ea:fa:84:45:41:be:e2:c0:15:d6:fa:0c:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Sep 19 05:00:52 2026 GMT
Not After : Sep 20 05:00:52 2026 GMT
Subject: CN=62204c0b8ac0f697fb3649462f01a04361e4dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:f8:65:07:d4:3f:f7:70:b9:9f:56:74:78:
a1:6a:5e:9c:f7:cb:40:e2:25:d2:a4:b2:33:fb:a3:
a7:33:55:67:13:b5:1d:4c:68:6c:20:da:47:96:d3:
10:8f:d3:c9:36:63:65:03:10:d5:1b:f8:9c:35:7f:
76:a0:40:89:cd:9c:fd:7c:f7:d3:e9:65:7f:b5:df:
04:f3:bd:84:3f:d6:d4:f3:2d:42:55:d5:9b:b6:7c:
49:83:87:0d:ed:f6:e9:00:7c:76:23:27:f5:42:8a:
67:3f:b5:e9:bd:50:93:47:8c:b8:00:c5:a5:fa:19:
db:f7:60:14:8f:b3:b5:13:2b:78:6f:9a:fa:c4:d1:
8d:fd:4f:65:37:cd:8a:08:78:f5:b0:a8:73:f4:51:
3d:a5:cc:ff:a0:37:e4:06:d7:0c:c7:7f:7d:77:4a:
56:82:6e:ad:6f:94:3f:97:ed:5b:74:2d:0e:58:42:
e2:ba:fe:db:34:33:28:9f:39:12:d1:8f:19:e1:a9:
ff:24:d5:3e:f7:66:ac:77:16:81:d4:97:82:a8:eb:
57:b3:90:49:1f:63:c5:b9:9e:ec:22:7b:24:3d:c2:
1a:8a:fc:20:04:bd:20:77:ac:7a:e2:f7:56:40:2c:
e9:fd:d0:b6:27:df:59:b3:36:bc:4a:a9:47:87:ad:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:4C:0B:8A:C0:F6:97:FB:36:49:46:2F:01:A0:43:61:E4:DC:5B
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:8d:e5:5a:03:a7:4f:de:30:ab:c9:7f:ef:df:91:16:f4:
34:4b:b1:c1:d0:0e:7c:1a:1e:a1:e2:06:f4:07:f0:69:92:28:
1e:36:ff:4f:de:f7:62:77:23:56:ac:13:a1:fb:e6:2e:ca:4a:
fe:2a:16:bd:79:34:29:d0:2e:84:89:bc:46:89:4c:a6:1e:ee:
37:cf:e7:36:1b:96:f0:78:14:d5:f4:a4:fd:e6:6a:2d:79:8d:
71:80:57:cd:a7:b1:68:a2:34:1c:43:a7:9c:5a:2d:95:13:c1:
51:4a:9d:3c:ac:3b:ef:f2:de:05:20:35:71:d8:d7:19:40:15:
79:15:27:71:fa:ac:3c:76:b8:88:94:c0:bc:4e:06:36:1d:76:
07:90:7b:31:d5:8d:4b:de:30:6e:93:72:f0:1a:76:ed:d1:e1:
d1:2d:55:34:ae:91:ab:b6:89:ad:80:9d:48:a5:d7:2a:de:e4:
73:8d:0e:89:ca:17:19:1b:b5:c6:db:93:70:dc:a1:d2:69:be:
7b:b1:cb:a2:70:ef:e9:e8:0e:cd:71:9e:c8:c5:7d:9a:56:d7:
ba:b0:11:a6:fa:3e:32:bb:93:3c:9a:bb:e9:cb:96:00:d7:d8:
52:31:85:09:43:aa:b5:c3:17:f4:54:ea:27:dc:77:69:83:7c:
6b:8f:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:42:26 2026 by rpki-client