Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
File: aZjDB3nmXTenYUVBuarjuzK0LGY.mft (raw, json)
Hash identifier: 5THSuVlEMplSn80fY+A+hLLbCJ33e4ZEJlcYpGwycVo=
Subject key identifier: B8:11:8B:83:83:BA:9E:71:2F:D9:32:DA:09:57:77:1B:76:FB:B0:3C
Authority key identifier: 69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
Certificate issuer: /CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Certificate serial: 01A0D45D86FE9E48866CE101CDE209979F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
Manifest number: 7F
Signing time: Thu 24 Sep 2026 17:01:34 +0000
Manifest this update: Thu 24 Sep 2026 17:01:34 +0000
Manifest next update: Fri 25 Sep 2026 17:01:34 +0000
Files and hashes: 1: aZjDB3nmXTenYUVBuarjuzK0LGY.crl (hash: 7uqa34Iboyw40LKVx/dDTWplfCWFL4YcQPAK9P6HWMg=)
2: fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa (hash: H/Qtg2MVE67F1b0Jil386VOnCKa4In18ScPS/BN4YB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:86:fe:9e:48:86:6c:e1:01:cd:e2:09:97:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Validity
Not Before: Sep 24 17:01:34 2026 GMT
Not After : Sep 25 17:01:34 2026 GMT
Subject: CN=b8118b8383ba9e712fd932da0957771b76fbb03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:fe:fc:8e:c6:7a:22:d8:6d:e4:83:3c:9c:
d2:c3:c2:e0:e3:49:f6:fc:a7:6a:5b:5e:80:ad:3b:
3d:c0:1d:e9:8c:ef:7b:59:da:43:d3:1e:27:06:96:
2f:87:fb:6a:e2:28:de:2c:d9:75:49:95:59:74:e2:
0d:ca:dd:5f:a6:44:50:85:aa:76:72:6f:73:4e:b0:
d1:a3:04:ca:36:8b:29:0a:50:e2:2c:8a:5e:a5:f3:
46:3d:cc:62:5b:ff:de:f7:a2:48:13:c9:2e:de:3f:
d5:4f:8b:4f:70:3c:f4:40:50:2e:83:90:6d:82:71:
df:17:53:b7:9a:8d:a7:7b:49:79:c7:bd:d0:39:83:
90:66:7e:ae:53:e9:77:d0:39:52:a2:df:f3:aa:94:
75:6f:a2:dd:07:30:fd:4e:69:d8:80:04:fc:b4:30:
f0:04:0e:ed:db:68:87:49:da:25:9f:12:1c:d2:90:
bb:a3:a0:58:cd:75:5b:c1:30:b2:53:63:b1:98:5d:
1a:99:28:12:90:36:bc:ce:1d:12:0f:39:64:d0:63:
52:5f:56:45:79:81:53:62:3f:ee:3b:86:f8:2e:ac:
5d:51:c0:a0:3f:0c:c7:74:e8:f8:96:48:c2:f4:c8:
f0:87:af:78:d8:9d:0b:37:87:82:cc:c5:32:ca:84:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:8B:83:83:BA:9E:71:2F:D9:32:DA:09:57:77:1B:76:FB:B0:3C
X509v3 Authority Key Identifier:
keyid:69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d2:33:1d:ac:f2:79:7c:f0:03:0b:4e:b9:f0:35:f5:57:81:
c4:25:0d:e3:3f:a4:b7:f5:53:4c:76:ea:70:9f:0a:19:80:71:
b9:6c:43:28:f8:5b:aa:05:3b:e2:c9:3e:43:cd:66:64:53:20:
a8:23:3d:3a:8c:f5:0d:05:87:db:b0:7b:45:3d:8f:17:27:3b:
cd:ec:b6:d4:64:88:38:ae:b9:64:64:24:c4:6e:0b:9a:6e:b9:
b0:14:eb:3c:f2:74:62:c2:88:ea:88:01:3e:8a:c7:5a:05:47:
d5:48:ed:36:d8:8c:31:6d:fa:17:02:57:20:45:46:73:ee:0e:
4e:98:d6:c3:66:d0:c7:65:ee:d8:4e:b6:a9:60:dd:fd:e8:a4:
e7:51:1e:c9:3b:04:94:02:a7:19:43:94:60:a6:07:24:c0:d9:
09:5a:31:f7:30:07:39:3e:76:fc:eb:ac:77:51:ed:5a:7f:2f:
7c:19:30:8d:25:6c:cc:0c:27:12:e4:9f:e7:60:19:93:9f:32:
7a:35:50:51:16:76:4a:b0:e9:e6:8e:87:22:75:aa:59:af:86:
75:e6:5a:21:8f:8c:68:3c:7a:b9:ab:a1:47:41:7b:c0:3c:e0:
f6:73:d7:2e:7d:94:69:cc:e5:67:f9:9b:d5:d4:14:ab:8b:3d:
7f:1b:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:43 2026 by rpki-client