Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: 1WMr9tnIQElWVn5hZYLC4ZjInnyX1CAgwRcKAM2V0Gk=
Subject key identifier: 00:33:DE:13:0B:08:18:5F:E9:CE:20:DB:20:7B:C9:7A:C4:BC:59:7B
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 01A0DA5F2B9B367ED95406FD6958AF2F020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 0247
Signing time: Fri 25 Sep 2026 21:01:05 +0000
Manifest this update: Fri 25 Sep 2026 21:01:05 +0000
Manifest next update: Sat 26 Sep 2026 21:01:05 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: /sGNksrHuT7qKQISWZ9+soCCGeylEpcec+7gphtUUqY=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:2b:9b:36:7e:d9:54:06:fd:69:58:af:2f:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Sep 25 21:01:05 2026 GMT
Not After : Sep 26 21:01:05 2026 GMT
Subject: CN=0033de130b08185fe9ce20db207bc97ac4bc597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:e8:a8:47:be:e6:8e:a4:43:44:e5:32:fd:
72:38:0d:53:66:38:dd:a8:1f:6b:35:15:a6:61:52:
84:fb:03:7c:a4:71:8f:9b:57:5f:fd:67:ce:d3:fe:
26:3b:c3:3b:74:eb:0a:a0:9d:c9:56:f4:d9:79:5c:
d8:d6:3e:16:a0:65:43:c2:0b:b9:1e:25:1c:53:42:
30:49:d2:32:64:a1:28:2d:d4:67:11:df:7e:a2:d8:
04:95:d8:5f:d4:4e:e1:cc:ff:b4:9a:87:52:4a:b1:
ac:a2:13:54:fd:24:86:76:c5:3c:89:a7:f4:62:81:
59:4d:4a:8c:31:47:4f:e9:6a:a9:d5:ed:70:8e:0b:
13:d3:ca:59:af:32:e2:9b:94:c6:d5:43:02:1d:d7:
f8:a1:17:38:47:92:de:62:d6:92:63:df:25:eb:b6:
8b:72:aa:a8:9f:7c:0c:f4:22:5c:8e:6e:fb:cb:52:
2d:d0:51:ad:02:62:89:a9:f8:27:90:af:3e:e3:23:
25:f3:46:a6:10:22:bb:2f:be:5a:20:26:86:63:2e:
d9:a9:1e:72:20:d6:f2:4b:77:99:43:73:2a:30:72:
5e:f1:9d:84:0d:cd:c2:45:2c:47:80:7c:2c:c8:16:
5a:8d:81:01:b6:3c:30:58:cb:a5:c2:32:6e:5d:3d:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:DE:13:0B:08:18:5F:E9:CE:20:DB:20:7B:C9:7A:C4:BC:59:7B
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:08:47:54:5a:9e:63:20:ec:ae:5d:cb:3e:91:53:d7:ad:70:
eb:ed:e8:00:a0:f7:c5:54:29:3f:7f:49:e2:43:31:81:f2:c2:
6e:21:1e:84:b0:5b:c5:46:05:ee:15:91:7e:28:e6:a4:38:d9:
76:48:62:a8:3a:2f:29:71:7d:67:4d:6f:01:0c:13:03:c5:f9:
33:ff:69:42:a0:63:8c:98:58:f8:0b:00:7c:29:40:84:91:b4:
20:e0:2a:09:b1:69:0e:b4:7c:5c:ae:ad:6a:fb:08:36:22:a5:
0a:d7:d7:d2:bc:47:7f:31:47:b2:cd:7d:f8:2f:1f:b6:70:f8:
2e:2b:4b:ac:a2:be:e0:5a:16:60:05:6e:14:c1:10:06:00:55:
a5:00:d1:77:0b:3e:09:a8:ea:c8:41:a2:2e:ea:08:7d:15:fb:
ce:46:d4:c1:1d:f2:b3:c3:af:18:46:8b:06:46:8a:e1:5e:2a:
ee:c1:a3:04:87:2f:dd:32:78:56:89:7f:29:44:6e:72:8f:71:
ba:92:b9:e0:a8:71:46:37:9b:80:75:f3:60:36:1c:eb:39:04:
5c:83:c1:6f:20:0e:37:4a:24:fa:3f:a5:eb:32:ce:60:44:49:
97:bd:f5:89:1d:d5:80:e1:e6:55:93:77:41:25:36:ad:0a:de:
e6:d3:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:20 2026 by rpki-client