Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
File: aK8jteBWV7foypaQC_n6OP2SNJ8.mft (raw, json)
Hash identifier: HwXFqzw/2OJ66DXKcUJy3xXMVhQHaJA3ockYWUt2JKc=
Subject key identifier: 2E:1D:9B:B2:55:77:DB:1F:5F:21:48:BC:D0:85:CC:0E:40:D9:38:01
Authority key identifier: 68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
Certificate issuer: /CN=68af23b5e05657b7e8ca96900bf9fa38fd92349f
Certificate serial: 01A100C8B397C33B52B2461F39564D3D16CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
Manifest number: 0156
Signing time: Sat 03 Oct 2026 08:01:55 +0000
Manifest this update: Sat 03 Oct 2026 08:01:55 +0000
Manifest next update: Sun 04 Oct 2026 08:01:55 +0000
Files and hashes: 1: 2McywBJYbv6sSIEH3ac9iaDUde0.asa (hash: dSyQOPoAPQUvKcSYeLQJ1H53CLWVO61BXDha8+8J7VM=)
2: aK8jteBWV7foypaQC_n6OP2SNJ8.crl (hash: M+eKjTA2bEbBAHzClVGRfbbf7xvHNE7c6Fb1zWpHSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:b3:97:c3:3b:52:b2:46:1f:39:56:4d:3d:16:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68af23b5e05657b7e8ca96900bf9fa38fd92349f
Validity
Not Before: Oct 3 08:01:55 2026 GMT
Not After : Oct 4 08:01:55 2026 GMT
Subject: CN=2e1d9bb25577db1f5f2148bcd085cc0e40d93801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:fb:2a:7f:ca:d7:11:8b:67:ba:f0:86:22:
f6:81:2d:25:cd:df:e8:27:1b:1b:f7:9b:25:ce:ff:
1d:c6:9b:f0:1d:ef:d3:a5:95:69:a5:18:18:2a:ad:
3f:33:37:2f:85:3c:86:8c:50:36:19:bd:f9:88:e5:
b6:89:12:c3:6f:02:27:a7:b6:2e:cb:0b:d7:bf:c0:
2f:1e:39:5c:3a:58:1f:ec:2a:fb:76:ed:8a:d5:8a:
9c:4a:f3:d5:d1:13:b5:dc:38:96:cc:f4:a3:96:71:
8f:6d:c1:9c:95:2c:63:0f:ef:f1:5d:6c:37:22:4a:
1a:b1:e2:64:d6:9f:ff:60:3e:9c:9d:2d:c9:6c:a5:
d3:f6:19:ee:43:f0:32:74:d4:13:d8:da:72:3d:5f:
fa:7f:43:c9:9f:11:31:e9:42:c3:2f:17:55:7e:6c:
b7:3f:6e:4c:a5:77:64:14:67:ca:bf:85:22:db:09:
3c:c1:01:dd:af:6f:45:de:00:fd:b4:8c:a8:c1:1f:
bd:ab:da:76:13:f9:a9:dc:bd:18:c5:04:21:13:1c:
9f:b6:3f:17:60:4b:8e:80:23:79:c6:07:48:43:e7:
aa:e4:6c:21:17:c1:75:67:4f:a6:f2:c9:2e:cc:d1:
47:ec:22:c7:43:a8:97:ff:9e:d6:e7:1b:58:23:1e:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:9B:B2:55:77:DB:1F:5F:21:48:BC:D0:85:CC:0E:40:D9:38:01
X509v3 Authority Key Identifier:
keyid:68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:72:4e:fc:62:88:f4:89:5c:7e:be:de:0f:03:19:a0:e5:47:
3d:c0:01:c5:26:bb:92:10:03:47:4f:c1:93:fb:ca:b4:44:18:
27:eb:87:6f:58:dc:1b:b2:86:30:54:be:0e:db:b3:ab:e3:ef:
ca:eb:c6:a9:dc:bd:54:61:77:76:84:5b:c2:b3:49:f0:13:62:
dd:58:92:fd:46:90:23:fe:6e:76:a7:a0:5d:e0:30:85:3a:ae:
27:79:8d:24:c1:6e:7f:bc:72:6e:4f:31:50:5d:89:fb:e3:dd:
0d:79:b1:82:84:e6:e9:38:8c:1f:83:e5:14:a8:12:6a:e5:27:
42:0c:de:4e:c3:88:25:8a:b4:8f:ef:af:ca:db:32:24:f2:b1:
d6:d7:ef:3a:16:85:4b:ea:c8:ab:c6:ba:39:59:56:50:5f:88:
8e:6e:6e:5c:f8:93:d4:d3:c9:52:27:1c:00:a3:2c:e1:e3:46:
6c:c3:3c:b4:9f:c7:a4:c8:2c:c5:a5:93:11:23:4d:56:65:32:
59:1c:3a:b3:a9:50:9f:35:a7:c2:54:5d:92:57:7b:cf:fe:ce:
69:9d:df:24:45:e1:18:b2:19:f9:d0:e5:6a:64:b5:5e:00:e4:
40:84:fc:5b:1f:2e:49:ec:34:76:fe:66:52:4e:ed:4d:d9:c8:
c6:97:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:44:00 2026 by rpki-client