Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: 88xVSQa7tNyFQxOL5b+YVftzOyqJKeNRqREWf+98NgQ=
Subject key identifier: 20:DC:CC:1D:43:70:BD:99:08:53:54:E2:0A:87:47:13:A0:0E:19:F5
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01A0ED4156DDBD52B3EBE9E55039E40C28CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 1795
Signing time: Tue 29 Sep 2026 13:01:17 +0000
Manifest this update: Tue 29 Sep 2026 13:01:17 +0000
Manifest next update: Wed 30 Sep 2026 13:01:17 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: XVRZzXHrl5q82ykfXrJmWczD9yoN0hQq5p6qHA+ioOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:56:dd:bd:52:b3:eb:e9:e5:50:39:e4:0c:28:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Sep 29 13:01:17 2026 GMT
Not After : Sep 30 13:01:17 2026 GMT
Subject: CN=20dccc1d4370bd99085354e20a874713a00e19f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:aa:c7:39:ee:89:eb:1f:57:08:8a:fd:cf:
ed:de:8b:6a:4d:2e:4d:2d:c1:30:03:18:73:bf:ba:
3a:a2:d5:5b:21:e8:5c:7f:a0:53:34:4e:95:f5:eb:
8c:20:4d:6b:c1:a3:e4:61:6a:78:12:0d:a8:9a:74:
03:5a:d6:cd:42:0f:29:1e:6b:01:98:86:73:80:7e:
7a:68:11:f7:e8:b7:e7:9f:4c:e9:e2:e5:a3:84:4e:
60:6f:db:3d:80:92:0c:28:5e:8b:3f:4b:f2:38:44:
bf:15:df:8c:4a:ce:61:04:18:d4:84:1b:6a:4e:7f:
15:6e:df:13:f9:79:7c:c3:09:7b:ba:2c:10:78:68:
2b:00:9a:35:10:cc:56:5e:00:2c:ea:fc:af:ee:54:
65:ba:22:5a:3c:40:55:83:ee:ec:ee:49:e5:86:7f:
81:2d:6c:52:78:a5:ad:e9:f6:9e:64:e4:ff:03:42:
c3:fb:cd:07:e7:f6:a7:67:a1:c0:18:14:6a:ed:4c:
32:00:e7:86:9b:15:e8:15:df:37:08:a0:58:47:09:
0b:cc:4e:d3:99:f6:2c:4b:89:77:1e:25:eb:60:75:
d2:ac:fc:b2:5a:80:60:08:0d:54:43:30:17:92:cf:
f0:fa:67:dc:9c:21:63:6b:d6:d8:81:03:5b:4f:1b:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:CC:1D:43:70:BD:99:08:53:54:E2:0A:87:47:13:A0:0E:19:F5
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fb:f9:f0:be:a6:c4:09:d6:d0:1d:2c:1a:bd:82:dd:56:df:
8c:e4:e3:04:3e:7a:5f:57:5a:2b:38:d1:7d:09:fd:f0:b8:e8:
27:5c:09:38:93:f4:ab:f7:02:fc:28:cd:af:e8:34:a7:9e:ec:
14:ff:06:69:98:6a:e1:fb:b4:6a:99:bc:da:9a:49:32:17:c6:
ae:88:7b:90:a4:b5:7b:70:37:77:8d:44:6d:49:eb:a6:b8:39:
87:c0:e5:ed:d8:3c:ee:dc:6a:63:24:6b:c4:91:1e:c6:53:a0:
6d:56:0c:32:52:5f:70:7c:0a:86:4e:2a:3c:a1:94:31:10:c9:
b0:f8:95:16:16:8d:03:c8:35:32:35:89:8d:2e:04:8f:89:20:
ad:89:06:6c:1c:b9:e9:6c:e0:9a:a9:c0:0a:1c:15:30:b3:72:
8a:62:31:9e:d6:e5:77:b2:a9:89:1a:38:a9:48:c2:1f:ae:36:
4a:d3:22:fe:de:fa:44:81:3a:90:d3:59:87:a0:e6:75:93:04:
65:ec:8b:3a:83:81:08:3a:07:37:22:69:1f:a0:ea:e1:7b:13:
61:23:e4:bc:3f:26:da:da:41:39:14:81:db:7e:23:a8:b3:c2:
0f:1c:09:14:1e:9d:ec:5c:1c:c4:33:f2:81:dc:1c:5d:5a:3e:
dc:af:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:05:32 2026 by rpki-client