Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: LjWeNVLQJOetQqM2IOsX2RVmxKIEnLOWB1Qzo/kkfns=
Subject key identifier: C1:7A:CF:92:FE:59:CF:B7:77:95:F0:5E:31:82:A9:18:F8:1F:2C:9B
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 01A0EB8A0EBF9A761A462FFD72A9ECAD1568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 06D6
Signing time: Tue 29 Sep 2026 05:01:28 +0000
Manifest this update: Tue 29 Sep 2026 05:01:28 +0000
Manifest next update: Wed 30 Sep 2026 05:01:28 +0000
Files and hashes: 1: 3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa (hash: GVD0ORdvb+m6XHIlxp5vX3KeBU6lYGT3GUkUzZadRxo=)
2: BKpDyhprbR3qOgI8XVdXG53_Xoc.roa (hash: plE0GQH5A+MXM6F8uLVbKyzdqxTFAnbM9Z+eYKUfzks=)
3: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
4: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: 7BSzanl4YAu+dwy+1Sjdu8UZ4RT6fJfuvur51xM7Bqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:0e:bf:9a:76:1a:46:2f:fd:72:a9:ec:ad:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Sep 29 05:01:28 2026 GMT
Not After : Sep 30 05:01:28 2026 GMT
Subject: CN=c17acf92fe59cfb77795f05e3182a918f81f2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:4a:12:c6:53:22:00:89:fe:c1:00:42:0f:
8b:c4:89:ff:88:e8:65:28:ad:54:5c:ab:7b:ad:44:
8e:52:48:16:b7:b9:6b:63:7e:b1:6f:9e:7c:71:c3:
ec:0c:50:de:e7:70:7a:cf:5d:c7:01:c0:4a:13:e0:
8f:63:e6:eb:b0:9a:88:f4:f5:00:81:ce:39:5f:54:
67:af:ab:25:76:f3:2c:a7:da:21:5d:7e:52:c6:34:
3c:ee:ad:79:4c:13:37:b3:57:08:a7:ef:2f:b8:a7:
11:69:6a:49:13:ab:a0:86:81:f9:33:13:b7:04:06:
fe:40:2a:24:67:09:64:3a:cc:9a:b4:eb:66:0f:51:
8c:b9:fc:9b:02:4c:71:a8:57:d4:b1:b8:f5:cd:84:
5d:47:99:ba:b4:5b:63:6c:e5:02:8e:11:79:ab:63:
d5:89:35:5f:1a:3b:0c:9d:79:b4:52:8d:b0:5f:c5:
d9:ac:53:90:e2:b0:83:4a:45:54:c3:ab:bf:2e:04:
9e:97:3a:b9:de:2d:10:e7:ea:a8:ba:7f:5e:8d:4e:
99:5c:66:23:da:b4:7f:db:a6:82:43:c7:b3:81:b0:
6e:b5:57:43:9f:5c:b5:0d:30:b0:ca:bd:29:c0:3a:
8a:da:bf:0b:47:e1:a2:e6:d9:be:be:8a:3e:d9:f9:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:CF:92:FE:59:CF:B7:77:95:F0:5E:31:82:A9:18:F8:1F:2C:9B
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:eb:53:d9:6d:62:56:c8:dc:7a:67:34:d5:89:8a:8d:6a:
af:8c:90:8a:81:b9:9f:8a:1f:ed:dd:13:ee:87:b7:e2:20:4d:
87:1a:1c:9e:39:93:26:ae:14:81:3f:d3:e5:d7:0e:09:2d:3e:
f4:01:ff:00:51:c6:fd:9e:6e:49:91:b5:00:c6:b0:c7:ed:0d:
a5:57:35:fc:fa:29:6c:a2:a6:91:f8:de:d0:7b:f8:92:22:a9:
d7:8c:b8:4f:a7:06:37:13:ef:4b:ac:98:07:b7:30:cd:fc:3f:
a7:df:fe:90:35:28:c8:52:f6:db:9b:16:12:4c:71:5d:9e:9c:
6f:c3:0f:2f:74:01:0b:47:e4:07:98:87:9b:8b:7d:8c:75:e3:
71:b6:a0:8e:8d:92:d7:74:b8:3e:eb:58:4a:5c:11:4f:cf:a6:
23:fd:f2:84:78:f2:86:b6:14:64:c5:fb:f5:96:dc:64:29:5e:
e0:3b:11:d5:44:6a:70:95:c2:07:6b:19:42:e6:b2:8e:fb:03:
2a:15:e0:ef:00:e9:eb:6b:0d:41:e3:af:2b:95:f1:ac:83:82:
3c:06:bb:21:ff:a0:51:54:ea:e5:5d:83:bd:8b:a8:7d:54:00:
e5:eb:a9:21:a3:5b:09:79:98:97:81:de:08:45:6a:8c:b1:a0:
26:89:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:59:41 2026 by rpki-client