Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: wyYtNKostjMe56H2lW9fjajc9ZTm8J79k+JH/Qua6U0=
Subject key identifier: B9:45:F0:2B:59:B9:86:56:EC:5F:8C:9F:6D:69:47:20:2C:32:E8:EE
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01A0F8330AFADBEAA26DDB236C9DC7A4A94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0BDF
Signing time: Thu 01 Oct 2026 16:01:29 +0000
Manifest this update: Thu 01 Oct 2026 16:01:29 +0000
Manifest next update: Fri 02 Oct 2026 16:01:29 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: zLxT8iBhc8gR8hvR3IA7/aPSt0AbBoa5/Tjn2p8h0FE=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:33:0a:fa:db:ea:a2:6d:db:23:6c:9d:c7:a4:a9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Oct 1 16:01:29 2026 GMT
Not After : Oct 2 16:01:29 2026 GMT
Subject: CN=b945f02b59b98656ec5f8c9f6d6947202c32e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:6c:4f:30:a0:4b:7e:06:02:5e:8e:38:cc:
66:e7:f3:a5:c5:c2:64:83:18:ea:9a:ca:a5:4c:92:
ff:fe:b7:10:8f:ee:44:17:91:3f:ae:89:5a:e3:77:
9b:36:64:62:39:06:77:8d:5d:92:9f:d2:da:a7:c6:
bb:a8:e2:0d:1c:52:f4:f7:1d:a1:13:91:c6:19:31:
d5:f4:a3:fb:4f:99:f5:16:c4:3f:d4:85:73:0f:b3:
83:7a:eb:cb:9e:05:89:a3:f5:a9:5e:ab:fe:3c:e3:
8d:d5:db:9b:e1:d5:a9:05:5d:19:f2:f6:37:f0:ce:
f4:5a:15:e3:ea:c2:58:b6:12:c6:be:c9:80:2e:19:
0c:59:e8:de:a2:33:80:37:ef:d0:eb:e2:b4:16:53:
40:90:36:73:6d:6a:cd:a5:61:1b:43:59:70:58:ed:
06:b7:7a:cd:d3:c1:90:b9:62:01:0f:4d:a8:ea:28:
18:12:9e:b1:44:76:e1:41:b9:fe:36:14:0b:f2:c1:
68:be:a3:4d:7d:c1:e5:62:33:ed:5b:e8:34:1b:3d:
b6:76:4d:12:c1:42:e5:08:74:c6:4a:4b:c1:3a:9d:
88:23:ce:6b:db:de:1e:3f:98:c7:6f:1b:0c:7b:95:
a2:41:cc:6f:3e:24:fe:21:a5:8e:1f:6d:94:11:16:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:F0:2B:59:B9:86:56:EC:5F:8C:9F:6D:69:47:20:2C:32:E8:EE
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:58:15:ec:e9:1c:de:86:9c:55:03:62:8c:2f:c5:70:d5:
9a:65:85:16:3b:e8:30:bf:b6:8b:3d:b3:b2:fb:ca:95:0f:1e:
87:10:e6:ba:a2:fb:7c:8d:5f:22:79:07:1a:ae:a7:2f:85:25:
a6:83:c6:2f:37:70:5d:68:d5:d1:e2:80:4d:ff:46:4d:d8:18:
52:76:14:41:f1:bd:29:34:ec:ab:ce:12:4f:f8:04:75:43:d3:
8b:31:aa:35:e8:99:a2:cc:bd:f9:d6:ce:72:d9:52:fd:6c:ed:
e6:40:fd:c5:4d:26:ed:55:b3:b1:89:66:83:a3:5d:68:ef:76:
f2:79:08:58:d6:97:fd:d7:01:3a:f8:db:b7:3b:1d:92:e1:95:
2a:df:07:43:cc:2b:3d:5e:e4:77:d8:99:54:11:29:9f:19:fa:
9c:40:26:42:87:89:0d:3b:45:ae:4a:c5:6b:9e:ec:96:d4:b5:
6a:50:a8:1f:b5:49:5b:4a:c5:d7:33:be:2b:6e:e9:cf:3a:6f:
ca:cf:3d:85:04:a1:83:3d:f2:dd:bd:fb:10:c6:1f:d0:a5:13:
59:50:90:3e:9a:ea:80:fa:88:a9:bd:82:7f:88:a7:71:75:36:
2e:e7:8d:12:8e:81:aa:ef:0f:07:85:0e:62:c7:56:35:e8:96:
f6:7f:2c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4Mwr62+qibdsjbJ3HpKlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjYxMDAxMTYwMTI5WhcNMjYxMDAyMTYwMTI5WjAzMTEwLwYDVQQD
EyhiOTQ1ZjAyYjU5Yjk4NjU2ZWM1ZjhjOWY2ZDY5NDcyMDJjMzJlOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmdsTzCgS34GAl6OOMxm5/OlxcJk
gxjqmsqlTJL//rcQj+5EF5E/rola43ebNmRiOQZ3jV2Sn9Lap8a7qOINHFL09x2h
E5HGGTHV9KP7T5n1FsQ/1IVzD7ODeuvLngWJo/WpXqv+POON1dub4dWpBV0Z8vY3
8M70WhXj6sJYthLGvsmALhkMWejeojOAN+/Q6+K0FlNAkDZzbWrNpWEbQ1lwWO0G
t3rN08GQuWIBD02o6igYEp6xRHbhQbn+NhQL8sFovqNNfcHlYjPtW+g0Gz22dk0S
wULlCHTGSkvBOp2II85r294eP5jHbxsMe5WiQcxvPiT+IaWOH22UERZd7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlF8CtZuYZW7F+Mn21pRyAsMujuMB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabxYFezp
HN6GnFUDYowvxXDVmmWFFjvoML+2iz2zsvvKlQ8ehxDmuqL7fI1fInkHGq6nL4Ul
poPGLzdwXWjV0eKATf9GTdgYUnYUQfG9KTTsq84ST/gEdUPTizGqNeiZosy9+dbO
ctlS/Wzt5kD9xU0m7VWzsYlmg6NdaO928nkIWNaX/dcBOvjbtzsdkuGVKt8HQ8wr
PV7kd9iZVBEpnxn6nEAmQoeJDTtFrkrFa57sltS1alCoH7VJW0rF1zO+K27pzzpv
ys89hQShgz3y3b37EMYf0KUTWVCQPprqgPqIqb2Cf4incXU2LueNEo6Bqu8PB4UO
YsdWNeiW9n8sWg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:23:52 2026 by rpki-client