Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: zsKJbJj3nEe1+3HWcJmjUYM075h2uOh/qHdaDfe+MXA=
Subject key identifier: 5C:AE:E0:74:11:91:7C:3C:28:A5:B9:7F:FA:01:FA:2C:C5:83:A6:D4
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 01A0F41F0D017F99A89AB4A52F7E8946A60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 0466
Signing time: Wed 30 Sep 2026 21:01:10 +0000
Manifest this update: Wed 30 Sep 2026 21:01:10 +0000
Manifest next update: Thu 01 Oct 2026 21:01:10 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: ckYeZeEEYSp/fHbsaKkZ+inl8SodlPZCdmewvl0Jn78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:0d:01:7f:99:a8:9a:b4:a5:2f:7e:89:46:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Sep 30 21:01:10 2026 GMT
Not After : Oct 1 21:01:10 2026 GMT
Subject: CN=5caee07411917c3c28a5b97ffa01fa2cc583a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:71:fc:51:6d:fb:85:86:08:d6:83:be:91:
ac:8d:d6:fb:2b:07:21:e6:30:40:23:02:40:b5:5c:
fb:87:b2:d0:82:e0:46:10:64:97:cc:95:8e:d2:48:
1b:1f:18:86:69:0b:38:6e:88:a0:c9:66:c6:52:37:
64:b8:1a:d6:1a:3d:23:65:d4:3b:22:d3:ef:0c:31:
05:fa:06:08:ce:94:9d:39:91:2b:0e:03:77:9e:67:
ec:fb:48:25:bd:9c:58:43:6a:51:77:a0:04:62:e1:
26:c0:4c:f5:c1:3e:3c:a6:56:51:f4:07:d9:5a:0a:
f2:f3:07:88:a2:f2:7c:2f:a0:23:31:ee:48:5c:e7:
5c:03:f6:6b:be:1a:8a:d4:83:12:a4:6f:87:24:0b:
9d:79:f6:e7:21:37:53:57:16:a1:fc:1b:f1:f4:d2:
9c:56:ed:2d:da:4f:cc:68:1a:9b:f7:a0:fa:3e:51:
7f:e8:a6:ca:79:f6:a4:59:23:04:37:3c:4d:a6:62:
42:e8:45:4b:0e:a2:ff:db:4d:73:e5:3a:c4:ca:c2:
53:55:26:e7:99:27:97:6b:4c:90:75:5a:7d:c9:65:
4a:73:ee:ad:f9:5f:b5:e6:5d:7b:ef:a3:52:71:d2:
67:c8:46:61:47:de:71:a9:d0:6e:6d:34:ac:1a:b5:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:E0:74:11:91:7C:3C:28:A5:B9:7F:FA:01:FA:2C:C5:83:A6:D4
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:10:b1:5a:6a:0f:9d:91:53:18:ec:85:c0:e6:69:b7:10:
3a:08:89:41:e0:96:a4:ff:86:04:25:3d:9c:bd:a9:ef:85:a8:
9e:3a:0d:37:48:2b:72:43:97:f0:ec:65:18:55:ea:56:dc:ff:
ec:68:b4:cf:8c:4e:9d:65:c6:a8:3e:49:55:a2:a5:23:b0:2b:
e8:81:5f:8b:e8:4e:fa:34:d7:ff:fa:d1:e4:73:20:2b:05:c5:
ef:01:78:76:03:4e:72:a9:10:ae:9e:5c:01:9d:92:90:99:96:
49:33:9b:99:37:f5:cb:45:6e:1a:6b:28:25:ad:7f:94:d1:85:
a6:10:a4:eb:12:53:b9:7f:45:82:9b:2c:90:83:99:f4:6c:a0:
62:a9:e6:be:68:57:eb:1d:c9:90:13:0e:b5:28:f7:42:51:18:
cc:3f:11:74:5b:15:5c:02:8b:71:ee:43:f8:d5:66:4d:2f:e1:
98:db:61:bc:2f:69:63:81:82:d6:38:2c:42:8c:c8:2d:53:6f:
0e:2c:64:c6:0a:9a:91:a7:de:3b:c7:95:30:a0:36:ce:6e:96:
87:b7:19:8c:9e:15:c6:e4:99:ba:d3:c9:c1:bd:be:df:69:45:
90:cf:ee:fb:9b:6c:d3:c4:5e:ad:e1:b3:8e:b6:b3:80:30:be:
f8:d3:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:51:27 2026 by rpki-client