Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: pOYVVACzV5WMsQcNOFFajxwLMEfdirGrVXI3MDkq1Lk=
Subject key identifier: DF:CD:45:B9:B9:D5:DD:7E:1D:DA:15:DF:46:EA:99:0C:4E:DF:EC:3B
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 01A12A68B209263431F59FF33F6460D9850F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 043B
Signing time: Sun 11 Oct 2026 10:01:06 +0000
Manifest this update: Sun 11 Oct 2026 10:01:06 +0000
Manifest next update: Mon 12 Oct 2026 10:01:06 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: ReZIOra6Ve3ng5w+RyTJzzIOR8ezHm3jDGf5HpUE58Y=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:b2:09:26:34:31:f5:9f:f3:3f:64:60:d9:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Oct 11 10:01:06 2026 GMT
Not After : Oct 12 10:01:06 2026 GMT
Subject: CN=dfcd45b9b9d5dd7e1dda15df46ea990c4edfec3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:1c:93:f9:b2:45:dc:bf:fd:73:25:31:22:
06:6c:11:0a:d0:a9:2d:3c:f6:6c:48:c7:b4:21:4f:
cd:18:b7:b4:ca:68:62:1b:39:bd:78:82:2c:85:f8:
dd:27:8c:18:0e:eb:cb:a2:cd:b2:37:a5:57:86:3f:
90:fa:38:90:be:48:a8:75:95:3a:d2:c4:22:65:1d:
cf:8d:78:12:00:47:61:0a:7a:bf:0b:66:60:bd:33:
af:c2:04:01:2d:9a:4b:bf:8f:a3:33:48:c9:58:30:
ed:13:b9:df:61:19:46:b1:cb:33:6f:4a:0a:2d:c3:
5e:53:b1:ea:5e:1f:b6:2e:31:43:60:e8:e1:12:d8:
12:7b:af:25:05:a2:4f:a7:57:7b:65:52:37:32:a3:
69:64:a4:cc:62:db:27:cb:76:bc:be:2d:c4:87:a3:
8a:c4:a7:f1:72:b3:9f:27:e0:55:02:45:fc:b1:af:
66:84:bb:80:4b:bf:e2:e9:dd:a2:29:60:6d:4c:52:
4e:c3:5d:47:e0:e1:70:55:f8:79:50:2a:eb:d2:6e:
d1:a9:57:e5:50:d3:75:e7:85:51:02:25:38:29:10:
55:8d:77:ee:ab:9c:98:b4:8e:dc:dd:34:df:26:4a:
17:e0:22:5a:a9:a3:b2:45:b1:3f:ec:e6:89:dc:28:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:45:B9:B9:D5:DD:7E:1D:DA:15:DF:46:EA:99:0C:4E:DF:EC:3B
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:b7:b8:8b:f1:65:d8:70:e0:40:59:08:bb:39:88:57:aa:
8f:12:14:e3:28:7c:04:ba:f0:5a:a6:62:b6:3f:35:f4:5c:f8:
dc:7c:c6:27:12:1b:39:9d:33:79:31:2a:62:06:86:d2:4c:19:
7a:f6:ce:41:e0:63:df:7e:0b:16:f6:cd:7c:f1:70:20:80:35:
e8:60:c4:be:76:75:5c:a4:87:ac:af:8d:80:53:31:94:d1:76:
9d:e0:bf:69:55:80:ed:03:c5:b1:3f:c6:5b:d4:48:35:75:dd:
ee:fc:85:6e:b9:11:29:90:ff:20:35:be:da:d7:de:f8:aa:65:
f9:e5:7c:ab:66:72:e8:af:b1:a7:21:ed:ba:dc:da:99:d0:4e:
a8:69:0c:29:f0:3e:c0:7e:d5:2a:0f:c1:50:a4:ae:c7:db:b3:
7a:76:91:86:77:2d:21:90:19:95:bb:c5:f1:06:f6:ef:c2:88:
23:ff:2e:5f:43:d6:21:a9:43:a3:4c:c8:c0:82:04:0e:47:07:
b4:cd:31:00:cc:e3:59:c1:51:4b:f6:23:81:0b:f5:74:aa:32:
88:85:fb:0a:b1:ae:97:b6:23:b3:7a:8b:f5:b2:82:d6:b2:0e:
e6:27:01:08:7e:20:c9:66:84:36:36:59:36:43:41:d2:8e:e8:
f3:d4:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:45:23 2026 by rpki-client