Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: eO/7DVd49pphDJFGTe2bWdxYf/hP5IxuV9OchwDFJbU=
Subject key identifier: B0:53:A1:D2:47:8B:99:BE:46:4C:2D:87:86:67:C8:DB:30:77:66:20
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01A0E0989B5720307E16F2A958F47393ED59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 176C
Signing time: Sun 27 Sep 2026 02:01:32 +0000
Manifest this update: Sun 27 Sep 2026 02:01:32 +0000
Manifest next update: Mon 28 Sep 2026 02:01:32 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: TYh0fup3e8x88Wr7pnRjsvHrjIlTadPpR2T5y8JBRdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:9b:57:20:30:7e:16:f2:a9:58:f4:73:93:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Sep 27 02:01:32 2026 GMT
Not After : Sep 28 02:01:32 2026 GMT
Subject: CN=b053a1d2478b99be464c2d878667c8db30776620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:7c:6a:bd:b7:b4:7a:e9:b7:14:2f:7f:43:
84:5b:c9:6b:a6:48:f5:c6:8e:fa:9b:b1:63:17:af:
7a:66:60:5f:5c:ac:77:cb:9c:06:17:bc:5c:74:4e:
e2:61:84:be:9e:3f:73:84:4a:4b:73:54:4f:16:85:
e8:39:0e:36:5f:b9:c3:31:d2:28:b6:84:b2:df:d1:
26:fc:88:2d:2b:73:18:1b:91:6e:7e:3b:a1:df:8a:
00:eb:30:71:a7:ab:2d:d9:a3:9a:c5:a7:42:8f:73:
72:f6:29:e7:22:d6:7a:9c:e1:36:ab:27:c3:00:de:
df:6a:87:f5:aa:d7:e3:b7:55:a6:61:ad:4e:97:9b:
ee:b3:a9:6c:e6:2d:ee:90:37:b5:6b:50:69:74:c4:
0e:b1:1f:19:2b:dc:7a:a4:39:95:b1:93:fb:ad:4a:
a6:1f:c4:a5:c3:34:84:09:ad:0e:d8:db:b6:3b:5b:
7a:70:7a:db:2e:26:69:15:49:c6:07:db:5d:e6:98:
37:99:d6:bf:c5:96:4e:06:b2:76:12:fd:d9:b4:1c:
c8:b0:aa:05:9b:62:79:ac:27:86:97:d4:34:67:fb:
7e:13:f6:30:43:03:ae:37:93:a1:99:da:fd:ec:64:
98:a7:cb:f5:a0:f4:29:cc:ba:58:ab:16:b3:fe:69:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:A1:D2:47:8B:99:BE:46:4C:2D:87:86:67:C8:DB:30:77:66:20
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:ef:c1:2e:01:9a:52:ee:79:f3:75:6c:da:91:09:ab:a0:
73:f0:ed:10:47:3f:6c:78:65:b8:ec:dd:6c:96:4d:39:0f:c1:
7f:54:32:b9:fc:45:71:15:e2:0b:41:7a:c1:53:fb:1c:e9:35:
b1:86:40:6f:a6:e8:23:ae:bd:21:f1:7a:1e:63:42:6b:67:c7:
35:af:2e:f8:a1:85:9f:8b:39:9f:b8:52:d8:89:97:2a:67:da:
90:1e:d6:e5:85:2b:f7:26:17:5a:8c:b7:1a:38:87:57:bb:fc:
ec:5c:42:21:b2:9f:fe:df:e6:51:70:42:9b:dd:d3:d2:60:d9:
be:ac:27:66:4b:dd:19:11:0e:bf:a8:9c:47:90:fc:c9:88:16:
92:8d:97:f8:d3:c2:9c:2e:9d:de:47:ea:a6:58:08:a7:0b:6e:
8a:70:99:64:38:cd:53:c3:2e:a1:c0:ca:0b:06:9a:4f:a5:e4:
73:3f:7b:2e:1e:94:14:ff:0f:2a:3b:4e:ec:ee:f6:9a:54:e1:
bc:d6:42:1a:fb:8e:23:23:ae:d6:cc:c5:1e:6e:ae:9b:10:d0:
c3:6a:ee:2e:c0:60:29:2d:f1:d8:59:c8:ab:e0:bc:00:c9:9f:
28:cc:ed:ca:3e:81:96:54:a0:c9:00:a8:11:ca:9c:cb:0f:9a:
c0:74:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:37:15 2026 by rpki-client