
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: DQ3jmvTDFmFR1q9GLJJ4agLy5uwWJA5RDraMeQiqQHE=
Subject key identifier: 55:D2:18:34:3D:07:93:7F:8A:F6:DC:5D:3A:A9:38:E4:95:6C:F7:85
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 01A0E0CF134D25197DFBAEE78F4D5DA74DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 03:01:02 +0000
Manifest this update: Sun 27 Sep 2026 03:01:02 +0000
Manifest next update: Mon 28 Sep 2026 03:01:02 +0000
Files and hashes: 1: DqpxxMPjiSQ9laP_ySepffCvlk8.roa (hash: aa8qqy86lAASIZeHc6KLaXJ1QeLKbYEq/R9968YDwxw=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: d7ZwFV3krs5rD/o6bgZI4ZoIrQhms3Oe9MZSRz/36uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:13:4d:25:19:7d:fb:ae:e7:8f:4d:5d:a7:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Sep 27 03:01:02 2026 GMT
Not After : Sep 28 03:01:02 2026 GMT
Subject: CN=55d218343d07937f8af6dc5d3aa938e4956cf785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:65:4e:a8:95:87:c8:df:25:74:87:89:d5:
50:9a:68:68:8d:cb:e4:4d:81:6b:d8:e8:bf:8c:b0:
24:d7:00:c4:9e:1b:50:d6:ac:b0:10:c2:2e:7c:ab:
9e:0d:00:76:02:a0:27:5b:76:e4:c8:57:84:2d:89:
c0:f7:7f:c6:df:88:4b:ca:5c:ff:4e:73:56:56:d5:
10:5a:f4:c8:ad:c0:d5:ed:5c:34:a9:c2:0c:17:d1:
a3:e6:e6:a7:73:20:39:92:6f:aa:39:5b:99:71:e3:
42:87:25:f1:e0:1b:44:cb:08:60:4d:7e:1f:1b:e7:
d3:8c:ab:f3:28:74:23:ab:72:97:f5:c1:49:67:fd:
44:1d:1a:95:f5:28:e5:68:e8:5a:52:b4:6d:4c:f1:
3f:54:bc:d8:4c:4f:47:fd:e0:c2:d8:87:13:b1:23:
a0:0d:a4:c0:f6:b4:e3:26:53:6e:b8:08:b8:50:84:
de:28:1b:1a:3b:71:70:a2:97:51:18:6a:21:16:b0:
21:62:c7:34:d1:1d:e5:90:f9:f9:67:38:31:12:77:
df:05:15:d1:35:bf:88:60:bc:a6:e4:a8:da:89:83:
06:58:43:66:f0:61:26:93:4b:0b:e4:b1:ae:24:53:
6e:98:96:ba:b1:7a:e8:e1:e0:7b:4f:9d:b2:1d:7b:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:18:34:3D:07:93:7F:8A:F6:DC:5D:3A:A9:38:E4:95:6C:F7:85
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fd:6d:1b:a4:a4:35:2c:76:76:cf:92:ba:d2:64:06:f9:b0:
a1:c6:ce:b5:ef:65:34:6c:ef:cb:c5:97:e2:fe:18:f2:06:d8:
a7:4f:84:fd:78:4c:5e:e8:6f:20:68:49:ca:15:64:0f:19:7e:
32:43:25:a5:91:a0:32:58:22:46:00:7d:fc:d3:33:ec:c6:1e:
cd:3a:77:9a:69:ae:c4:b7:e0:f7:16:69:a0:ab:e6:22:fe:dc:
fa:06:18:1d:69:66:0a:09:bb:fe:7a:86:e6:b2:93:83:2b:7b:
40:86:41:c5:b8:65:86:ab:a3:ec:6c:26:6a:08:45:8a:63:26:
9a:21:8e:b3:19:31:a8:2d:e1:f8:0e:e5:34:34:3d:12:74:be:
60:62:20:fc:a7:81:d5:86:9c:68:2c:d1:0a:73:ff:fe:22:fc:
42:70:38:d1:d3:d3:f4:e0:30:22:95:ce:45:d9:48:11:3d:5f:
31:aa:ba:fc:19:f1:dc:ed:04:04:83:e6:13:21:ce:80:6c:cc:
a8:3c:f2:05:7c:1c:4b:36:01:bc:7b:04:0a:7d:89:f6:a2:54:
61:94:8b:e9:70:c4:72:55:7b:18:01:2c:4b:d3:76:3b:90:3a:
8e:75:aa:b7:fb:5b:a4:e7:96:38:58:fb:a9:a5:bc:c8:23:50:
f0:7e:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:30:03 2026 by rpki-client