Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: DhFpQzaX1DFXmcVNLpfydiMA0kxYy1L/TUIv6MORhBY=
Subject key identifier: 7F:D8:5A:0E:43:4B:17:99:1B:38:8F:9C:F0:AE:88:4A:62:4B:9C:3F
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019EE88DD42E87ABFC1DED07572F53FFACBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 1055
Signing time: Sun 21 Jun 2026 05:01:09 +0000
Manifest this update: Sun 21 Jun 2026 05:01:09 +0000
Manifest next update: Mon 22 Jun 2026 05:01:09 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: S9d7wfI0Qe/Xiq4AFYjSdS+NDT8ti6jkwgtyBzcN0WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:8d:d4:2e:87:ab:fc:1d:ed:07:57:2f:53:ff:ac:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jun 21 05:01:09 2026 GMT
Not After : Jun 22 05:01:09 2026 GMT
Subject: CN=7fd85a0e434b17991b388f9cf0ae884a624b9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:e6:7a:4d:7f:cb:9e:e5:c0:40:07:ec:4c:
34:59:7e:72:1b:1c:95:e6:ff:f1:3e:f3:d7:41:4e:
d4:3f:2e:bc:18:05:bd:51:b3:8e:76:6a:0f:ad:42:
b3:1f:0b:5d:b3:e6:e3:f0:73:90:46:da:f5:a6:b1:
b1:21:bf:b9:ca:6f:72:5b:da:ff:93:70:85:09:68:
6d:9e:da:5b:bc:66:63:07:05:e8:95:09:f1:97:83:
c1:53:d2:c2:c8:b7:2f:3a:6f:71:e5:88:5b:5b:3a:
e7:da:e9:4b:b7:48:e4:27:06:e1:25:eb:93:05:4b:
6a:3b:3a:66:85:a2:c9:2b:90:e7:64:f7:40:aa:27:
91:a7:87:10:55:cc:46:10:c8:20:c4:64:91:4c:2b:
db:40:44:9e:57:92:d1:4b:bf:a1:5d:1e:1d:5c:64:
c3:c8:8a:1d:04:f5:81:b3:1a:59:a7:62:b4:dc:cc:
7c:de:04:86:c0:26:6f:97:14:5d:0e:8c:95:59:51:
4f:b7:b0:75:42:de:e3:61:ea:a6:2c:d0:07:7d:c1:
32:6f:bc:71:31:44:f1:ac:80:ba:9e:dd:94:bf:f0:
dd:0a:57:a4:cf:cd:18:e3:62:2f:a7:15:e7:db:ed:
00:70:8a:d4:9c:83:0a:83:4d:c3:27:1c:51:65:cf:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:5A:0E:43:4B:17:99:1B:38:8F:9C:F0:AE:88:4A:62:4B:9C:3F
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:1d:15:1c:23:f9:b0:63:10:76:94:36:07:9e:cb:91:1b:
fd:5d:a9:3f:76:47:0f:63:80:e2:7e:20:5b:0c:75:e6:5d:50:
7f:a9:d9:5f:47:d7:e4:33:cb:52:14:8a:d1:e9:be:69:19:c4:
97:b7:ca:25:5f:68:34:b6:5d:9b:8e:bf:1c:71:19:e0:d5:e4:
e4:cb:9e:b4:89:8a:ba:15:89:45:21:61:52:0e:15:a5:b6:d1:
2e:0c:40:04:e0:60:ef:c1:92:2c:c3:b5:ed:38:f5:7c:cb:15:
43:6e:3f:26:ff:bd:a4:60:a2:eb:d2:75:b6:60:5e:22:d0:2b:
44:e5:74:77:cd:ad:09:a8:80:59:4f:f6:e3:0b:8c:3a:ea:4c:
92:71:a1:92:a3:3d:a5:85:f1:ad:ed:4b:64:a4:38:5d:28:82:
f3:14:90:a6:f1:f4:46:d8:55:5e:bd:3e:0d:55:bd:ae:46:74:
44:f4:8c:00:00:25:af:4d:6d:33:ba:81:cc:ab:85:c6:a4:6c:
11:0c:ae:14:d2:6c:4c:a7:f8:0c:59:f3:27:25:7b:b8:9f:a7:
f3:33:da:13:ae:0d:6e:95:34:92:be:13:64:8f:34:b6:f9:09:
6e:7c:3e:6f:31:1f:3a:b9:cc:ac:bf:90:20:0f:70:b8:90:e2:
97:52:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:04:52 2026 by rpki-client