Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: ux/5dEQcQciTW4+d3TyqB6S+XELa8trhl7CaApK3qUw=
Subject key identifier: B2:DB:47:95:30:07:41:27:2C:C5:90:68:7B:9C:79:BC:2B:15:72:51
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 01A119AB75ABB972F9A523EB565B9F203758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 04:00:29 +0000
Manifest this update: Thu 08 Oct 2026 04:00:29 +0000
Manifest next update: Fri 09 Oct 2026 04:00:29 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: MQm0i/EYVyrtAmVRwVm9cBs3mqQDVRhkFRaH1YuK1Ao=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:75:ab:b9:72:f9:a5:23:eb:56:5b:9f:20:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Oct 8 04:00:29 2026 GMT
Not After : Oct 9 04:00:29 2026 GMT
Subject: CN=b2db4795300741272cc590687b9c79bc2b157251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:97:aa:b0:c2:60:8c:a5:53:a2:c1:e6:87:
e7:3c:11:b2:88:eb:02:5f:53:ef:63:fe:7e:c4:ce:
18:3b:af:1b:ce:a8:b6:a3:fe:7d:fe:76:13:e9:db:
8a:3c:94:1f:55:6e:c7:ed:93:5c:87:91:a9:89:6e:
b6:ec:17:85:ef:e0:cb:6c:66:1d:ef:70:5f:a3:9c:
73:74:5a:d8:57:ac:d7:5b:50:f3:20:55:f7:c8:1b:
64:ee:36:11:f1:ac:95:9c:76:77:85:dc:9b:c7:38:
65:31:52:0a:83:ba:4c:50:91:9d:39:56:f7:1a:e8:
d4:d9:4d:b1:d7:5e:b4:47:43:a2:1d:e0:db:dc:30:
1d:41:96:34:19:17:40:ee:98:c1:3c:70:df:50:32:
a0:51:a4:6d:c1:c2:d5:e9:da:90:70:aa:23:64:00:
ae:b1:7e:74:ad:dc:b5:0b:8f:e6:96:a3:de:93:c3:
0b:43:13:9d:0e:35:b4:a5:a6:54:1f:df:ce:e5:f0:
80:8a:32:78:a2:09:05:d9:b9:91:62:8e:7a:b0:ba:
25:5c:f6:79:47:e7:f4:08:61:50:68:96:0a:95:40:
7e:2f:1c:9f:bd:f8:ba:67:8d:1c:40:78:da:a5:1f:
da:d3:e7:9d:b8:6b:06:03:f8:bd:7c:ad:92:b3:c0:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:47:95:30:07:41:27:2C:C5:90:68:7B:9C:79:BC:2B:15:72:51
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:b3:ea:60:db:f9:7b:57:28:f6:2a:ec:2c:b4:4b:b3:4d:
f3:81:81:45:f3:17:c5:2c:07:f6:e7:20:b4:1b:38:95:3b:80:
b8:69:92:01:8e:9b:38:31:2e:79:34:05:c4:62:03:ba:a7:d8:
d5:da:1e:cd:78:d7:a4:37:67:5e:80:dc:0a:bd:c1:b3:5b:82:
1a:7b:ac:59:65:68:38:08:71:6a:5c:a5:68:c2:f0:cf:e2:0c:
52:a3:20:14:d5:f6:53:54:10:44:62:c9:19:56:39:f7:10:1e:
11:be:3a:54:d4:16:68:ce:4e:c7:68:f6:1d:d3:e7:c4:73:15:
ba:f7:3d:87:e8:2a:e1:3e:6d:7d:1b:39:5a:0e:09:36:ab:63:
49:18:23:67:b5:31:ab:83:b0:a6:71:d9:ce:17:c2:34:19:7c:
47:08:5c:49:32:50:5a:4c:77:59:35:8a:78:af:a1:03:9b:af:
87:a4:87:9e:1c:ab:28:51:c0:75:8a:34:ca:2a:08:54:a0:fa:
25:2c:ea:95:76:55:dc:51:72:d4:2a:4a:af:ef:e0:f3:b2:cb:
4f:43:fe:b9:e2:a8:ed:f0:99:78:29:66:15:06:50:61:d8:43:
64:cb:0e:dc:26:81:46:66:76:92:d9:00:51:42:0f:a9:20:d0:
f4:27:e8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZq3WruXL5pSPrVlufIDdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy
NDg2YTQwHhcNMjYxMDA4MDQwMDI5WhcNMjYxMDA5MDQwMDI5WjAzMTEwLwYDVQQD
EyhiMmRiNDc5NTMwMDc0MTI3MmNjNTkwNjg3YjljNzliYzJiMTU3MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkeXqrDCYIylU6LB5ofnPBGyiOsC
X1PvY/5+xM4YO68bzqi2o/59/nYT6duKPJQfVW7H7ZNch5GpiW627BeF7+DLbGYd
73Bfo5xzdFrYV6zXW1DzIFX3yBtk7jYR8ayVnHZ3hdybxzhlMVIKg7pMUJGdOVb3
GujU2U2x1160R0OiHeDb3DAdQZY0GRdA7pjBPHDfUDKgUaRtwcLV6dqQcKojZACu
sX50rdy1C4/mlqPek8MLQxOdDjW0paZUH9/O5fCAijJ4ogkF2bmRYo56sLolXPZ5
R+f0CGFQaJYKlUB+Lxyfvfi6Z40cQHjapR/a0+eduGsGA/i9fK2Ss8DsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLbR5UwB0EnLMWQaHucebwrFXJRMB8GA1UdIwQY
MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt
NzAzY2FiNGQwNTk4LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4
LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhqz6mDb
+XtXKPYq7Cy0S7NN84GBRfMXxSwH9ucgtBs4lTuAuGmSAY6bODEueTQFxGIDuqfY
1doezXjXpDdnXoDcCr3Bs1uCGnusWWVoOAhxalylaMLwz+IMUqMgFNX2U1QQRGLJ
GVY59xAeEb46VNQWaM5Ox2j2HdPnxHMVuvc9h+gq4T5tfRs5Wg4JNqtjSRgjZ7Ux
q4OwpnHZzhfCNBl8RwhcSTJQWkx3WTWKeK+hA5uvh6SHnhyrKFHAdYo0yioIVKD6
JSzqlXZV3FFy1CpKr+/g87LLT0P+ueKo7fCZeClmFQZQYdhDZMsO3CaBRmZ2ktkA
UUIPqSDQ9Cfo2A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:10:20 2026 by rpki-client