Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: 3xgMHOU8Gza8on6aGlEnKvQvF2V3RxPlKwkuUNXj6Lo=
Subject key identifier: B5:A2:CC:51:89:80:47:FD:6D:90:B3:D2:E2:F4:B6:E0:77:75:EF:DE
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019E1E6CAB6455BBED74CECC5AF57EEE7005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 01E4
Signing time: Tue 12 May 2026 23:01:38 +0000
Manifest this update: Tue 12 May 2026 23:01:38 +0000
Manifest next update: Wed 13 May 2026 23:01:38 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: 8+57IBEoyh3hISBlhDPZh6b7z72RVxqAFmVV+0crH0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:ab:64:55:bb:ed:74:ce:cc:5a:f5:7e:ee:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: May 12 23:01:38 2026 GMT
Not After : May 13 23:01:38 2026 GMT
Subject: CN=b5a2cc51898047fd6d90b3d2e2f4b6e07775efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:c5:9e:82:70:82:14:9f:74:3d:34:77:5f:
41:9b:11:9a:da:76:36:97:5e:f8:0b:e5:be:53:18:
db:cd:68:2b:27:ce:66:6f:7c:ef:cd:0c:7c:4f:c9:
a0:b9:fb:42:04:84:96:73:2e:66:d1:3a:de:82:76:
2d:3f:89:8b:8d:f1:50:d4:0c:4a:09:f1:55:74:1c:
d2:19:d2:11:0e:40:a1:9c:3e:82:aa:f8:0e:6a:b7:
2b:81:ed:3c:95:4d:eb:fb:be:ad:bb:70:bf:1a:0f:
0b:e3:2c:08:14:1a:ef:f9:39:e6:56:03:cf:5b:d4:
34:77:67:bc:1e:cd:37:3d:93:13:a8:a6:73:15:31:
4f:c9:af:3f:9b:c2:b4:6e:45:e5:99:15:d4:2d:b5:
8c:17:7e:00:60:80:c7:2d:00:01:fc:70:22:7d:02:
55:f1:20:bb:a8:d8:04:76:19:75:df:3c:8b:53:a3:
51:26:5d:b6:34:cb:8e:bc:b9:9e:16:97:b7:2d:18:
24:1e:81:86:5f:a1:2c:f1:62:ba:45:a6:a9:e0:eb:
27:43:ff:5c:10:a2:6e:35:34:6b:9c:a5:90:4c:c9:
d0:e1:08:b4:84:70:50:84:bb:bd:4c:13:9a:05:c1:
3b:27:88:e3:aa:f0:7c:b8:88:6e:8c:96:1a:5f:a0:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:CC:51:89:80:47:FD:6D:90:B3:D2:E2:F4:B6:E0:77:75:EF:DE
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:a4:eb:af:4c:24:6f:4a:65:46:b1:33:66:8a:6e:a9:41:
ae:c2:98:3a:6f:cb:bc:98:a3:cd:b3:2f:be:18:d3:1d:5a:4a:
bf:b7:2c:a3:38:74:c2:d1:06:c3:99:ac:6d:6e:4d:fe:a3:86:
da:ba:5a:e0:21:1d:f0:7d:81:2a:5e:b2:fb:11:fe:12:a6:9d:
78:06:5b:06:59:e1:55:96:29:64:cd:f0:a9:91:dd:89:bd:4e:
be:df:fc:07:c6:e4:eb:c6:3c:12:1e:b1:9e:47:7d:72:b9:a3:
25:2f:87:81:4b:0c:9f:f3:1e:fa:e1:0a:0c:72:d1:f6:bb:96:
72:49:44:41:e8:d4:95:a8:a2:27:d7:e9:36:0a:85:71:80:6f:
1a:2e:01:a9:66:dd:d8:3f:c7:db:9f:0e:3b:de:2e:62:35:25:
a0:ef:22:15:e2:55:72:4b:5c:f2:5f:c9:ab:e8:4a:f6:89:42:
a8:0e:51:ef:72:97:7e:d4:6c:63:de:e4:ef:9f:54:84:c0:d8:
03:ed:0b:3f:42:bc:6a:25:e7:fc:40:d5:a2:1f:7f:08:08:8d:
69:a1:80:1a:f7:72:d3:1e:e4:3e:31:1b:01:7c:5b:27:65:f3:
d9:99:4a:d8:92:f8:b0:ad:bb:95:ef:57:f4:95:09:87:52:ae:
42:1e:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:30 2026 by rpki-client