Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: mVkbD00+zGXD3n6aby6/W4bbFA7wXW6aJLGogDEtOi0=
Subject key identifier: F2:CA:CC:5C:6B:01:7D:C4:63:F2:36:0A:C1:58:D5:CC:B5:E0:D4:4F
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 01A0DFBCC855B0CA004CD626CD830D7431B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 1A80
Signing time: Sat 26 Sep 2026 22:01:26 +0000
Manifest this update: Sat 26 Sep 2026 22:01:26 +0000
Manifest next update: Sun 27 Sep 2026 22:01:26 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: YZZ3Md1btSORXTTjv+sWkbf+iB9cA8NBQRGUXgzaX5E=)
2: hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa (hash: SQ1vYGdBYZkb25PtDITYpjzEq+82KcEcQFwySA/C4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:c8:55:b0:ca:00:4c:d6:26:cd:83:0d:74:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Sep 26 22:01:26 2026 GMT
Not After : Sep 27 22:01:26 2026 GMT
Subject: CN=f2cacc5c6b017dc463f2360ac158d5ccb5e0d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:ba:fa:6a:7a:a6:0b:cc:c6:07:fa:4f:b9:
7e:e4:db:40:ec:a2:c3:65:ec:f3:b2:6d:98:28:e9:
be:b6:15:2a:d0:31:35:f9:be:8e:56:b6:cd:17:0a:
21:e6:e3:71:7e:ef:15:e4:97:2c:a5:cd:6f:6a:e8:
49:ab:6f:4b:08:ed:ec:4d:7d:5a:39:7f:d0:ec:b8:
97:cd:d8:85:8c:28:10:54:b8:34:80:b4:90:80:ff:
ff:8a:43:7d:ac:49:0a:ac:10:39:57:d3:ae:8b:e6:
c4:15:02:27:5b:4c:ea:ed:27:f7:e8:67:91:3c:db:
4f:75:58:be:86:f4:43:4b:6f:9f:9d:89:da:a5:3e:
7f:1c:45:94:cc:dd:d0:e9:da:73:ab:55:f3:16:37:
96:f5:b8:2a:40:0a:dd:39:ef:60:79:35:b4:e8:31:
25:de:35:28:d8:c8:38:87:2f:47:8a:0d:49:6d:62:
40:5f:8f:eb:29:9a:c7:0d:5c:bb:75:59:44:69:73:
31:6c:11:97:ca:35:7e:3b:d1:25:fe:3d:12:28:ea:
1c:d9:5d:63:65:5a:6e:bc:6e:49:6d:3f:a1:39:42:
da:fe:20:8c:89:b8:c0:46:da:e6:f9:af:b3:84:1b:
30:a1:fa:e4:cd:ad:07:1b:3f:69:cd:91:36:a9:77:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:CC:5C:6B:01:7D:C4:63:F2:36:0A:C1:58:D5:CC:B5:E0:D4:4F
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:25:d8:ef:29:9e:90:99:a5:45:18:66:02:24:a2:65:f4:4c:
fb:be:2e:6b:66:6f:a5:be:21:5c:8b:69:fd:ce:05:80:fa:d3:
53:e8:8d:8a:23:53:56:d2:6e:49:f5:e8:3b:b4:5e:04:e9:3a:
fb:cb:c9:86:b0:f7:c3:27:14:e7:b5:18:df:95:a3:32:01:5a:
df:1e:eb:6b:be:fe:bd:20:0f:f0:ec:82:1f:71:5e:a3:28:ad:
1a:06:c7:68:5c:1c:10:3f:aa:0e:ac:d1:24:fa:ab:2a:3a:28:
ae:9e:81:6e:83:c8:34:bf:87:2e:c2:56:55:a4:c0:d1:09:3f:
3e:b0:68:08:79:a8:d4:66:84:3b:7d:d1:ac:8c:23:f6:e8:d6:
74:92:49:72:e6:32:6d:56:a7:12:c1:a3:a5:66:4e:0b:34:c0:
3d:23:39:bb:fb:ab:37:9b:d0:a8:cc:7f:ac:d8:b4:e4:e7:99:
4e:a8:4e:f7:32:09:a8:f6:86:d8:87:6f:8c:96:85:14:18:c8:
0b:af:9d:23:3f:c9:90:dd:73:ca:41:99:3c:8f:d3:02:2b:4e:
7b:84:6e:91:6e:df:54:6d:60:7a:29:94:09:1c:da:f7:2b:95:
ff:73:29:f6:c0:c4:8e:44:5b:fa:61:d5:80:20:05:0f:46:87:
5d:e2:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:52:47 2026 by rpki-client