Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: RNadnj8++QV2wEflX/h5iIqxBF33f2icEjpzhpTfn3k=
Subject key identifier: E7:18:09:53:32:E2:B3:16:4A:1A:04:B4:DA:F3:84:DB:3D:EE:C0:80
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 01A18299CB8097C88D135F83896882633B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 152A
Signing time: Wed 28 Oct 2026 13:01:19 +0000
Manifest this update: Wed 28 Oct 2026 13:01:19 +0000
Manifest next update: Thu 29 Oct 2026 13:01:19 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: gyKDtU0j+J0ZTq7DGNSYtUhhakaXmQZWAabbQTk5BfI=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:cb:80:97:c8:8d:13:5f:83:89:68:82:63:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Oct 28 13:01:19 2026 GMT
Not After : Oct 29 13:01:19 2026 GMT
Subject: CN=e718095332e2b3164a1a04b4daf384db3deec080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:b6:66:a3:bd:4e:a5:cc:ef:c7:fa:ad:dd:
59:c3:27:7d:dc:fc:10:2e:e9:5b:7c:65:6d:f9:bf:
05:72:50:95:76:b7:c7:5d:60:c2:cf:bc:cc:a3:01:
4d:74:ad:44:7a:b7:67:92:0c:19:4e:21:47:55:9b:
ad:9c:d3:ac:ba:4a:2e:68:31:e5:8d:f0:3b:ad:74:
5f:49:a5:c7:5e:04:b8:2e:e6:b6:e7:bc:a0:83:79:
72:2b:f4:13:a0:76:6c:6f:b0:23:37:50:ac:e6:6a:
b9:bf:80:08:9e:8b:2f:b3:19:05:ce:24:d3:97:cf:
d5:a8:14:58:e6:f6:f1:0a:b9:60:44:36:f4:6d:e2:
e2:b5:ca:b0:82:cd:17:84:9e:04:66:1d:3d:2c:7b:
1e:89:5b:3b:20:af:c5:27:ac:f9:2f:9c:ab:2b:07:
37:d6:4e:34:37:6b:97:e7:96:03:61:25:8f:f8:eb:
91:02:ac:2e:2c:ed:fc:2d:4b:fe:68:f1:0d:2f:a7:
29:a8:e9:b7:62:52:7a:65:d2:d8:0e:b1:bb:34:5a:
18:fd:ab:9d:8e:01:40:07:b3:6f:c1:62:6a:07:11:
7a:f2:dd:cb:fb:9b:bb:b6:2c:54:be:68:2c:9f:54:
07:b4:df:21:2a:a6:5f:dc:f9:76:f1:db:c5:84:76:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:09:53:32:E2:B3:16:4A:1A:04:B4:DA:F3:84:DB:3D:EE:C0:80
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:5e:eb:1a:6b:41:95:3d:66:89:c0:8f:17:5f:5e:bc:f9:
93:aa:fb:a1:4b:b9:3e:ec:9d:c8:5f:2b:f3:4a:49:77:9b:2d:
67:53:eb:96:b0:46:88:04:0a:54:96:c5:68:5d:8a:e1:71:e7:
ea:a3:04:c8:31:cc:8c:20:76:2c:ba:b5:00:33:ed:3d:ce:c6:
c4:83:12:a8:74:5f:b9:6f:2b:59:8e:cc:e8:15:98:13:9f:29:
cf:50:e6:e9:0d:4c:0f:67:4c:8b:ca:57:2a:18:4b:45:13:71:
44:4a:e8:c9:77:56:a6:ce:4a:5b:e3:3d:db:92:73:e7:9f:50:
a2:c9:be:34:d9:96:87:3b:bc:17:2b:e3:e2:47:19:53:31:d1:
bf:b8:3f:51:ac:7c:02:5c:a3:0f:c1:2e:75:93:3d:c6:cc:a6:
6d:f1:28:d4:86:43:42:95:e6:08:8c:c8:c4:1c:f8:61:67:24:
4c:44:a8:19:34:5f:ff:b0:4b:7a:fa:38:b4:3c:a3:82:2a:67:
ef:03:9f:37:85:69:77:2a:9e:a2:5b:55:d0:8a:44:b9:5c:ca:
67:19:ec:e6:9e:13:c9:02:d1:0f:c7:ae:31:c0:03:0d:b8:be:
77:bf:e9:fd:0a:74:2a:4e:3e:dc:96:a7:6a:6a:9e:8a:a6:b9:
31:8d:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:44:37 2026 by rpki-client