Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: m5Svr2VMXHPBbzbPWIfBBeCBo5cl+xPKxQHGYqVpjn4=
Subject key identifier: F9:94:E3:6D:7A:94:E3:4F:E6:A0:55:B7:0E:34:84:A3:C2:3B:EE:A3
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 01A11CACBDA215163B7ECBAF9CFCB410C49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 01B5
Signing time: Thu 08 Oct 2026 18:00:45 +0000
Manifest this update: Thu 08 Oct 2026 18:00:45 +0000
Manifest next update: Fri 09 Oct 2026 18:00:45 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: NjIeDLqn14mpbagZMTRrDU1/Jrr8uxrwr6RU9uQX0Aw=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:bd:a2:15:16:3b:7e:cb:af:9c:fc:b4:10:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Oct 8 18:00:45 2026 GMT
Not After : Oct 9 18:00:45 2026 GMT
Subject: CN=f994e36d7a94e34fe6a055b70e3484a3c23beea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:63:8f:2b:75:82:27:a3:6a:ef:06:8d:9f:
8d:53:29:4f:b9:78:3e:ad:5d:bb:68:49:ba:c7:f4:
25:ee:85:f1:b2:fc:d8:46:a3:c8:21:c0:80:df:95:
29:06:fa:05:fc:a6:44:a5:17:f5:d8:a8:58:05:91:
2a:eb:ef:86:12:f9:18:69:ea:33:72:2a:af:13:04:
d5:63:02:33:47:3c:bb:f8:6b:48:d1:43:6f:ad:fe:
62:65:ef:56:21:8a:b4:34:a0:73:fa:2c:6e:e1:3b:
c8:33:64:38:00:bf:44:f4:d1:0e:57:76:3d:1e:39:
3f:a1:00:e2:f2:42:1d:8f:a7:41:d9:88:45:7c:8b:
4a:01:8a:24:e8:82:bb:5e:3b:5a:96:da:37:16:d8:
2b:70:5d:8c:bf:2d:79:ff:96:d1:05:45:15:03:bd:
28:2e:f5:da:8b:cb:6f:5e:83:72:b8:95:07:29:55:
46:96:2e:03:0b:9c:ce:01:05:0c:13:df:87:fc:20:
83:f6:bd:7d:76:ff:33:1f:ef:69:d3:49:0a:1e:de:
74:ea:1e:a9:61:a1:68:7b:6e:bf:25:a1:0d:83:11:
62:20:c5:1a:d5:95:26:76:4f:96:e3:59:08:f4:56:
23:a3:92:24:3e:6b:94:60:50:1a:60:b5:15:34:71:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:E3:6D:7A:94:E3:4F:E6:A0:55:B7:0E:34:84:A3:C2:3B:EE:A3
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:5b:85:67:60:85:ce:c4:89:74:11:5c:f3:57:75:74:a0:
ff:d9:4e:73:1e:00:e7:7b:78:7d:a1:62:fb:a6:24:5d:fb:80:
b6:2b:41:d8:a4:e9:48:53:78:90:d8:90:17:fd:74:ac:65:8f:
4a:91:e2:3c:13:03:bd:cd:54:bc:80:f0:f7:1f:5a:a1:6e:88:
24:f8:9b:34:58:f9:5f:a2:34:9f:ed:de:98:4d:e3:66:7f:59:
91:7b:e8:c9:87:77:0c:20:74:14:af:5e:cb:27:46:bb:11:0b:
c1:31:27:46:36:34:17:93:07:f8:ee:45:f6:b7:41:cf:ee:0b:
6b:7e:fc:cb:77:cc:9f:9c:fe:22:df:8c:5c:75:2d:56:e0:59:
b3:82:44:f4:f5:0d:39:42:a9:51:e4:f9:29:73:54:7b:81:cf:
67:9a:41:ff:a9:6b:35:7d:fe:17:c4:34:a6:b6:23:f2:4e:88:
4c:c9:d0:28:79:77:2a:60:65:d9:98:08:e9:ca:16:20:6c:07:
6f:dc:f2:01:7a:3a:9c:30:22:59:dc:d7:14:99:9d:cb:76:a8:
ae:1f:dc:02:d4:db:f7:98:07:66:52:6d:25:a9:bb:df:94:03:
01:a8:79:e6:f8:63:ae:22:55:89:72:fa:4f:23:c4:dd:aa:65:
3a:92:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:32 2026 by rpki-client