Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: Ymb50DSrrVLlQm7TfkzVpKrMC8LACSJsNrUtCxppcnM=
Subject key identifier: 8B:7C:AC:93:96:B0:A9:46:92:CB:EC:EC:84:DF:98:16:A3:FA:A5:C8
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01A0CA7DFE85E8BA3BACC9CF3212C1F740E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 19:00:49 +0000
Manifest this update: Tue 22 Sep 2026 19:00:49 +0000
Manifest next update: Wed 23 Sep 2026 19:00:49 +0000
Files and hashes: 1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: Bm/pmbL0V4S76XEPUGu4YC/Y5/UNV/UGNuDh0v5sers=)
4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:fe:85:e8:ba:3b:ac:c9:cf:32:12:c1:f7:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Sep 22 19:00:49 2026 GMT
Not After : Sep 23 19:00:49 2026 GMT
Subject: CN=8b7cac9396b0a94692cbecec84df9816a3faa5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:86:4b:15:a3:6d:31:df:70:f5:16:1d:63:
b8:48:38:e7:fd:0d:b2:5c:4f:a8:69:bc:24:5d:8b:
6d:97:3f:22:12:5c:93:0a:67:dd:9b:17:3d:77:e8:
bf:5b:c0:72:2f:5b:8a:92:d5:94:1b:33:63:bc:77:
b9:e7:ae:5b:b2:d0:53:7d:70:61:b9:05:08:38:d7:
87:e8:64:c4:85:49:18:e1:5b:f6:9e:29:52:f6:a4:
38:99:ee:a6:a9:43:eb:94:ea:26:e4:b1:91:99:ec:
91:76:b5:75:d1:70:fc:73:5c:24:a6:2b:3f:8f:75:
98:cb:b9:66:c5:24:ef:45:95:86:75:88:b5:46:02:
2b:b5:e8:05:05:88:65:d1:87:f3:0b:79:3d:d1:86:
45:97:72:4f:1a:17:0d:a8:22:e2:34:c1:5c:41:38:
7c:4c:f4:6c:1e:d8:9a:20:be:a6:de:a8:22:b4:51:
e5:c6:d4:1a:ed:8d:dd:a6:69:ec:d4:bc:c4:02:ed:
4b:38:07:04:a7:0f:de:17:98:58:84:fd:ca:6f:ef:
db:af:dd:1e:32:ba:dd:fa:18:15:f8:be:d9:01:ff:
17:ea:e8:c4:5d:93:01:90:22:31:03:95:f0:eb:67:
d0:76:b5:2a:6e:c1:d5:c4:7d:82:f6:33:d4:bc:71:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:AC:93:96:B0:A9:46:92:CB:EC:EC:84:DF:98:16:A3:FA:A5:C8
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:48:0f:f2:2e:31:be:54:23:77:80:86:29:42:ca:a5:c9:
2c:4b:33:a6:a4:6b:6d:70:87:f2:50:14:5b:cb:d4:e5:45:25:
f7:d6:5a:aa:16:fa:cd:52:7d:cd:f1:de:e2:11:b5:23:54:88:
4a:3a:25:ef:92:53:8c:ac:16:63:06:bc:bc:66:d0:da:80:81:
47:5a:69:63:e7:97:56:d2:81:ec:cc:63:b8:9e:ae:e2:c7:59:
65:81:a9:39:9d:0f:e6:1e:bd:3d:29:f6:55:9f:e4:d4:ed:09:
7b:cd:8e:c7:75:2a:57:7c:5e:1e:d3:36:6d:13:b5:20:20:cb:
69:cc:0b:0b:13:89:b7:c6:dc:e2:bc:b9:57:d6:33:bd:06:74:
49:d9:aa:14:61:00:d1:2e:6f:09:33:69:05:6a:0e:f8:72:a4:
2a:6e:dd:6b:d1:2f:8b:88:08:34:d7:1a:28:7f:13:d9:dd:4d:
b8:91:52:7c:d3:30:fa:75:8d:7f:e3:90:f0:04:0c:fa:c3:79:
f5:d1:e9:cb:2f:6a:15:75:ee:5e:7e:4d:78:75:8d:73:ef:40:
e1:ab:08:7f:7f:be:3a:ef:25:3a:26:35:e7:5e:47:d3:07:3f:
b4:79:46:6c:fb:8f:16:33:8d:68:ec:93:7c:44:14:63:6a:6b:
a0:dd:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:08:05 2026 by rpki-client