Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: 2RG1kDA4AP8C4weTUPOtqKQAwFP+T0Jhrv+x1qRs45c=
Subject key identifier: 3D:9D:65:B6:48:D5:97:BE:97:B2:6A:03:B1:B2:93:7F:AF:A1:65:7B
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 01A18788A0B70B9BCB0914C0BA37CEE73136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 12:00:40 +0000
Manifest this update: Thu 29 Oct 2026 12:00:40 +0000
Manifest next update: Fri 30 Oct 2026 12:00:40 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: TDUO8I90TdqT6gAwMuruvWsl3mNkXmN5gWftxO+UAuE=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:a0:b7:0b:9b:cb:09:14:c0:ba:37:ce:e7:31:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Oct 29 12:00:40 2026 GMT
Not After : Oct 30 12:00:40 2026 GMT
Subject: CN=3d9d65b648d597be97b26a03b1b2937fafa1657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3f:36:2b:f5:a5:a8:0a:3b:bc:24:d1:aa:9a:
4c:b3:74:14:88:48:79:8b:f6:16:c0:30:c6:d2:5f:
d3:57:16:f6:fa:e7:6d:be:f6:8d:e2:1e:72:99:ad:
18:08:63:f2:b1:1b:d1:57:43:83:ac:56:4f:54:80:
fe:01:38:a4:36:e1:16:d4:35:a7:8c:1c:be:b0:e8:
32:49:a0:74:06:d9:6a:97:46:1f:69:13:fc:ec:dd:
d8:69:31:81:b7:28:9e:fe:9e:1b:31:a8:f3:4c:c1:
b0:b9:a7:75:e3:35:dd:41:84:3e:29:d0:46:f8:c4:
e8:fe:bf:93:98:be:dd:e4:a0:68:54:68:88:65:c8:
60:8e:3d:e1:50:76:8a:2a:66:e2:1d:16:be:97:05:
5d:ec:57:a5:2b:81:01:d1:e3:e7:7f:f7:97:91:a2:
df:5d:f7:74:a3:8b:65:b1:89:c7:d2:15:4a:a0:c4:
ae:31:13:bd:00:06:59:95:ff:a9:94:a1:fd:df:ac:
5b:db:ee:27:47:2d:5a:b0:15:83:13:57:ca:77:72:
77:08:70:1b:3f:cc:ed:bc:7a:2c:a2:58:07:a2:fe:
51:f7:e4:9e:44:f0:94:a2:e3:a7:5e:7f:ec:ae:73:
3f:e0:43:1c:aa:9c:76:f3:32:b7:4d:10:30:88:ec:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:65:B6:48:D5:97:BE:97:B2:6A:03:B1:B2:93:7F:AF:A1:65:7B
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7e:67:f1:2a:0f:21:64:2b:c5:a6:00:de:14:b5:6c:86:52:
4e:bf:f8:29:58:18:a7:cb:27:4e:e1:79:3d:9b:63:04:5c:94:
d4:21:65:f5:02:30:c8:f5:d8:ed:bb:06:b6:4c:6b:05:de:30:
48:a9:3c:6e:fa:d7:6e:80:a1:62:ea:72:f9:8d:f3:3e:06:ed:
fa:85:e8:dd:39:1a:b1:df:a9:f1:04:27:2b:06:60:fd:15:fd:
2d:df:7a:2f:96:0e:bc:17:c1:23:11:3e:e6:87:fe:85:f6:d3:
8e:11:8f:e0:8e:f8:e3:c1:28:ed:f4:41:8a:75:bc:4d:2e:8e:
88:27:6e:d8:b9:7b:49:47:a5:34:0f:93:3b:a7:f1:7b:8e:73:
b1:0c:3d:ff:84:05:cf:96:9c:05:22:c7:61:7e:f3:0f:11:37:
c3:bf:1a:15:62:3e:be:2c:b3:6e:5f:f5:07:f3:70:d2:17:00:
8a:6c:af:c6:cb:e4:72:98:9f:3f:7c:db:87:6e:d8:b5:a1:b1:
3b:5c:3f:2c:ad:b6:9c:e9:f0:5b:03:28:05:33:95:62:91:54:
a5:68:73:15:88:ae:0b:2a:c4:c7:fb:2b:cf:d6:43:a4:70:b4:
b3:c4:22:e5:75:6a:c8:42:fe:29:49:29:f4:8f:c3:5f:39:33:
66:13:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:26 2026 by rpki-client