Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: yO3nzcScliTw2W4Mn3Js5Ikg8Hy98YtR1AON4r/7KFU=
Subject key identifier: 4A:AB:88:19:98:6C:9A:77:AB:05:71:62:98:5F:6C:AD:5B:F1:9B:AA
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 01A14127685ECDCF967D0E977F276A161937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 0639
Signing time: Thu 15 Oct 2026 20:01:03 +0000
Manifest this update: Thu 15 Oct 2026 20:01:03 +0000
Manifest next update: Fri 16 Oct 2026 20:01:03 +0000
Files and hashes: 1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: avog9cEagn9BEelxXI+3VdUj0inwGvn1pbCIhz5zZVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:27:68:5e:cd:cf:96:7d:0e:97:7f:27:6a:16:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Oct 15 20:01:03 2026 GMT
Not After : Oct 16 20:01:03 2026 GMT
Subject: CN=4aab8819986c9a77ab057162985f6cad5bf19baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:16:5b:c2:99:92:63:ee:ab:6a:13:23:1e:
9e:d7:6d:aa:60:00:1e:87:27:26:40:b4:e5:01:9a:
e1:1a:ca:23:3a:32:55:26:a0:8b:a5:a7:d9:ee:d6:
e1:b7:e4:39:2e:f5:56:da:fc:89:af:12:a7:b5:c8:
ee:68:6a:33:7a:12:a3:7b:a2:34:d9:6d:28:ad:00:
03:7e:90:f1:50:e5:70:26:59:06:97:b7:55:0c:04:
12:f8:8f:a2:a6:e4:d3:b5:6a:2d:68:ee:66:14:30:
60:e9:39:76:9e:1c:13:87:ed:95:9e:e4:a8:63:b0:
6d:ee:87:fc:60:de:0a:99:25:bc:ba:fd:c5:56:2d:
1f:5a:04:a5:48:77:f4:23:48:1f:77:89:ec:7a:c7:
81:8e:5b:a6:a1:a0:9c:f1:61:52:ea:75:7c:e9:9d:
2c:a1:dc:ed:09:bd:44:b3:4f:16:52:d1:30:4f:92:
d7:04:d8:ff:91:f5:29:12:ca:ae:1a:3e:48:e6:65:
8b:ea:41:44:4f:cc:5e:91:02:86:d9:cf:8f:9c:6c:
1d:bd:7d:a9:b5:92:e0:e1:ab:2c:2f:77:c6:5e:15:
69:5f:ab:78:30:ed:68:8e:44:12:c6:29:58:90:69:
2c:58:4c:b8:56:18:ab:2b:89:66:3c:a7:2a:44:47:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:88:19:98:6C:9A:77:AB:05:71:62:98:5F:6C:AD:5B:F1:9B:AA
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d0:a4:a9:44:c4:c1:90:f4:78:ed:9a:bf:8c:4a:54:d2:c7:
b9:c1:2c:50:14:47:a6:ce:d9:00:47:47:8c:af:d6:71:a2:c9:
dd:e8:a8:06:fd:4a:b9:3e:a9:07:b2:9d:4d:13:ec:fd:02:36:
0f:05:a4:6a:e3:c8:1c:2c:ae:f1:82:42:0d:74:70:a4:13:9a:
85:c0:eb:a9:e2:9a:64:67:29:23:ea:16:9a:f9:8a:1d:8d:9a:
4c:84:a1:a5:a5:7d:cd:27:89:47:82:f0:7f:85:e1:95:d4:a5:
6d:24:52:26:84:21:38:1b:91:11:71:7b:5e:50:77:cd:6b:48:
d3:9d:ff:d0:c0:01:91:58:c9:45:cf:1f:0a:36:8b:af:51:a8:
bf:0e:c8:72:66:63:76:3f:ea:31:12:68:a6:c5:af:a2:b2:e5:
59:b8:e6:a8:64:8e:48:36:13:3c:6b:ce:f3:1e:5d:8e:48:02:
60:13:b2:65:dc:a2:de:4a:db:d3:21:c2:9c:b7:37:44:9a:f4:
b0:5b:26:f0:62:ce:b0:38:46:2a:d4:e5:e6:e0:4d:50:5a:2d:
91:23:73:50:af:82:09:0b:00:bd:9c:26:2b:1c:f9:1e:1d:24:
cf:04:69:ad:54:7d:66:e4:fb:ca:e0:f0:b9:83:a6:88:07:06:
d6:9c:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:51:37 2026 by rpki-client