Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: 11kogj+O3mQBYAZSCzmyUyhkOckXaqTOSnAO6R/yYJg=
Subject key identifier: 8D:65:C4:B1:15:17:7A:0C:21:00:1C:E8:C9:B0:D8:FC:95:BB:D4:EF
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019F94A43F80251AD68AE2503BA2209ACFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 03B0
Signing time: Fri 24 Jul 2026 15:00:19 +0000
Manifest this update: Fri 24 Jul 2026 15:00:19 +0000
Manifest next update: Sat 25 Jul 2026 15:00:19 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: dTUHZW3gN/G9GgclbZZ9MnvtoPKhtaONSMRTh+3PAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:3f:80:25:1a:d6:8a:e2:50:3b:a2:20:9a:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Jul 24 15:00:19 2026 GMT
Not After : Jul 25 15:00:19 2026 GMT
Subject: CN=8d65c4b115177a0c21001ce8c9b0d8fc95bbd4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:50:f9:95:fd:f0:6d:54:ad:57:22:c3:97:
cd:8a:01:ab:a5:d5:8b:93:55:35:e2:49:f9:93:2d:
02:b6:be:7c:00:0e:39:c7:08:91:4a:c5:2a:c7:ae:
4c:2c:6a:3c:8a:d2:e1:ca:d4:9a:c7:93:8c:4d:e6:
81:d5:63:a8:99:46:a0:0a:0d:54:7b:ab:99:b9:5c:
ad:33:b1:56:b8:c7:69:1d:64:2a:5c:5c:fd:6e:d4:
b1:91:82:44:0d:44:2b:e5:5c:ea:b4:dd:c1:b8:e6:
55:22:95:5b:d9:48:97:e0:ff:7b:4d:75:d5:54:28:
70:14:17:6a:53:eb:19:eb:15:42:4d:cd:a9:eb:66:
09:b7:67:de:62:dd:6f:01:ad:ca:c3:2f:46:39:c9:
28:7d:dd:e8:b4:22:1f:c1:4e:0e:7f:c9:db:f2:35:
82:28:ee:38:8b:40:d3:4c:38:08:b7:be:02:8a:b9:
6e:b0:5c:33:55:e0:4f:48:66:6e:34:64:5c:a5:9d:
2e:3b:6c:3d:43:f3:93:ef:39:04:44:dc:e8:d1:e4:
4a:72:3c:d7:50:f4:c8:66:6b:55:02:d0:f4:9c:79:
77:95:02:12:ca:b0:32:4c:c1:ca:0b:b2:c5:8a:19:
76:87:37:52:93:7f:66:f5:3f:f2:a8:3d:e2:1c:fe:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:C4:B1:15:17:7A:0C:21:00:1C:E8:C9:B0:D8:FC:95:BB:D4:EF
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:7e:22:b6:29:bb:4b:50:af:95:b6:0a:75:50:38:13:59:a3:
fd:6e:ef:fe:c5:7e:77:1f:6e:60:c9:0b:15:85:6b:34:8b:9a:
f2:79:85:2e:31:33:17:ff:20:f2:0f:7f:07:69:dc:55:d1:ff:
ae:9f:9b:b4:9d:27:95:e4:35:d4:26:34:37:bb:2f:f9:7a:99:
cd:fc:77:df:6f:51:4d:17:e5:c3:aa:ee:b8:b4:a4:35:17:90:
5d:9a:e6:c7:15:97:d3:eb:9c:f6:26:c7:e1:d6:aa:1a:0b:59:
f9:0f:e0:06:98:ed:d9:38:42:96:10:90:e5:ab:a4:3f:d8:64:
8f:7f:fd:16:20:da:e9:55:a0:9a:b1:21:df:ad:92:5a:02:ec:
57:31:48:96:22:bb:eb:57:53:5c:79:ef:fc:f5:30:8a:3e:f3:
6e:22:72:51:4a:b6:af:c3:d7:25:c2:fb:30:d7:59:88:58:8b:
a2:f2:5f:b7:2c:33:fc:ed:6d:6a:3d:19:47:e3:ff:b1:7c:9c:
45:9e:36:1d:a7:b8:23:76:08:8d:28:15:9c:55:59:8d:76:9e:
aa:29:b2:45:51:62:30:0a:fc:7b:af:9a:11:9c:98:16:cc:df:
f6:9d:3f:a2:fe:d5:1c:4c:e8:4e:42:98:75:50:d4:47:75:2d:
bc:83:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:02 2026 by rpki-client