Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier: k+LoP/4egEiiG+3duqh388ormXdsUTx+7r91fTUGzWk=
Subject key identifier: DD:C4:34:93:98:0C:45:85:9C:1E:5A:33:64:7C:92:DB:0F:31:33:C3
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 01A0DD980B641136E71E21D0E8FC4A51738A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 12:02:03 +0000
Manifest this update: Sat 26 Sep 2026 12:02:03 +0000
Manifest next update: Sun 27 Sep 2026 12:02:03 +0000
Files and hashes: 1: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (hash: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI=)
2: Prdw3L1Fwkc8ytRFu-oUK_xAQuU.roa (hash: doY6BOzth/370lmaa2UkKcv45HRXOMVWu34UaSPlsc8=)
3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: cZiUFemjI/3IMwVA0WXoOCAXqPp3DphMa7OwdiW6Lro=)
4: mQRanHoIY0IoJuE4VcyHEcinjeo.roa (hash: fBz0EC50LChidWvY4MFa5hHhW36+s8IY+jpOw7hyIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:0b:64:11:36:e7:1e:21:d0:e8:fc:4a:51:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Sep 26 12:02:03 2026 GMT
Not After : Sep 27 12:02:03 2026 GMT
Subject: CN=ddc43493980c45859c1e5a33647c92db0f3133c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:54:e9:4d:af:d8:97:bb:bf:c6:0f:0b:3f:
f1:d5:f4:ea:2c:29:cf:0a:a4:52:98:78:f0:a0:f7:
9e:45:5b:6a:8b:2a:41:ba:55:36:33:18:e9:7f:8b:
85:d3:13:31:92:f5:f5:39:46:0f:27:48:ad:b5:5f:
dc:b3:7a:e4:f3:17:31:3f:31:3a:0f:7f:10:47:ed:
68:c8:de:12:85:a9:c3:df:50:54:dd:73:6a:e3:0c:
ff:3c:7e:50:29:ac:41:2f:fa:fa:c2:70:67:ba:d5:
80:da:34:68:a9:5c:e3:fc:ea:f7:86:7b:27:ad:6b:
f0:c6:4d:c5:02:24:65:c9:25:48:2c:03:e0:cf:02:
a9:46:b0:2c:40:00:4f:56:89:82:2e:b7:b6:bb:91:
37:5b:50:3f:1f:29:f0:dc:58:26:5b:cf:c8:34:58:
24:4e:81:79:6d:51:cc:e6:66:d6:61:ec:0c:4a:b0:
64:f8:ee:4d:7e:bb:af:9a:a9:0f:34:c4:d8:1d:10:
27:0d:26:a3:0c:ad:25:f2:29:62:f3:25:a8:45:f9:
fd:be:f2:2d:4e:e4:6a:df:52:6f:85:9e:a6:49:79:
2e:57:67:6a:c8:2a:58:0b:9b:4f:8b:56:2f:47:4c:
0a:87:f1:44:4e:3d:e2:2f:52:06:65:c5:47:07:c2:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:34:93:98:0C:45:85:9C:1E:5A:33:64:7C:92:DB:0F:31:33:C3
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:81:ca:5e:eb:8a:f8:7c:d7:3e:09:80:8e:b4:f2:6b:40:af:
da:bd:46:72:0a:6b:9c:52:78:44:c6:68:68:c6:6b:dc:6a:27:
18:4d:f2:f8:b9:8a:aa:d5:9e:a0:e9:77:c8:75:1f:be:28:ad:
20:03:95:29:ea:b4:8c:44:89:34:df:44:e9:40:b5:bd:4f:73:
dd:91:d7:52:df:43:09:4b:29:b9:9b:19:c5:42:1e:fc:3c:ea:
83:5d:eb:54:af:d7:3f:b8:61:03:ce:8a:a0:d8:1b:34:63:ea:
2f:94:f5:d5:ea:d1:e6:d0:01:b5:94:b7:ac:db:a6:cd:ad:53:
e4:00:fc:04:91:f9:38:55:a0:78:73:ee:64:7e:8e:01:44:41:
9e:37:0b:eb:3d:5f:e8:67:8b:d4:6a:74:e5:ab:e9:55:8f:db:
ea:1e:1c:3d:99:d0:31:f2:d2:d2:ed:01:70:a0:d4:28:79:b5:
c1:bf:ec:25:22:1f:2e:33:8f:2a:6b:6a:e5:28:23:39:bb:f9:
89:79:ed:df:02:bf:9c:96:31:b9:f4:4a:46:96:41:99:b6:91:
15:0a:11:fc:f7:90:93:8b:f5:dc:91:60:ba:95:94:3c:96:4e:
24:aa:4c:d2:26:e5:17:65:9c:8b:25:a4:fc:52:8a:32:7b:51:
d9:cd:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:30 2026 by rpki-client