Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: zVm0u1Jzy5YSg2CefIN7BX3Z68//9/giWUUTvce/RGA=
Subject key identifier: D1:97:1C:8A:F6:89:29:4E:1B:BA:A5:18:92:24:47:D0:A7:FD:DF:D2
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01A0DD601005DD52C78B95EE16CC0B81E57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0960
Signing time: Sat 26 Sep 2026 11:00:55 +0000
Manifest this update: Sat 26 Sep 2026 11:00:55 +0000
Manifest next update: Sun 27 Sep 2026 11:00:55 +0000
Files and hashes: 1: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (hash: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw=)
2: I-sXuwtEcITmgnvZanC5hRWQbdA.roa (hash: dw1mUItwtqi8VkSL6GcnsYfa7bo73GyWptZqIgXTIXU=)
3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: qyLWt30Kn3ibAhI5WMEikUKFN1J2cOHIwp28eUhp6T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:10:05:dd:52:c7:8b:95:ee:16:cc:0b:81:e5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Sep 26 11:00:55 2026 GMT
Not After : Sep 27 11:00:55 2026 GMT
Subject: CN=d1971c8af689294e1bbaa518922447d0a7fddfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:9b:35:8f:9c:9c:1d:b6:00:1a:8d:4e:34:
da:4e:06:74:d1:21:46:07:4e:ed:0a:f5:80:47:77:
ce:b0:44:cf:ca:f4:1d:58:ed:78:b2:77:9e:e7:d7:
c7:0f:f6:29:55:8a:67:b8:08:d5:c2:ad:ff:21:5b:
7e:b7:26:d0:2e:06:3b:56:f3:f9:53:c8:99:96:19:
55:4c:ac:1c:a6:e4:2e:c6:cd:0f:b2:82:e5:d0:19:
31:90:d5:b2:b1:db:7a:8f:09:6f:58:c7:7f:9a:34:
b9:58:59:af:dc:ea:bc:06:02:60:6a:d7:a0:0e:7c:
20:56:ec:95:32:22:b5:a1:17:18:1c:72:37:8e:ee:
7a:37:09:da:24:06:a5:fd:8c:a3:4a:e1:66:51:66:
36:e6:88:e9:c8:fc:e3:91:f2:1b:3c:7e:0c:73:6c:
b1:f4:15:3b:9c:81:9b:80:7b:ee:bd:11:44:49:62:
9d:44:27:b8:43:23:b5:e1:b0:9f:25:8d:fa:2e:db:
9a:31:0b:28:31:1f:6b:58:ca:c4:7a:76:a1:ef:6c:
13:82:95:0d:61:39:72:c3:da:3a:a0:a8:e4:48:c9:
ed:67:80:f3:9c:29:33:38:aa:29:9c:3c:88:e0:40:
91:ca:da:1f:f5:a0:ab:6b:24:76:1f:e0:4c:93:5c:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:1C:8A:F6:89:29:4E:1B:BA:A5:18:92:24:47:D0:A7:FD:DF:D2
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:4f:1e:92:38:56:f8:db:26:8c:dd:0c:61:2d:2e:60:89:
19:02:02:4e:0a:eb:72:00:c3:8e:5f:89:c7:6c:e8:3f:d6:1b:
e0:ba:73:5c:46:d6:cf:16:04:8f:05:5e:be:26:f7:be:57:b5:
34:1f:bc:5d:b5:a3:71:55:db:2d:9f:03:c6:88:2f:73:e4:bb:
83:e8:03:43:71:e4:2a:f2:6d:01:0a:df:f9:ed:2f:21:68:8d:
0b:8a:8f:1a:e2:7f:ae:eb:be:3b:a9:97:ad:09:14:68:98:d5:
ef:1c:4f:a8:12:7d:cf:a3:95:65:47:e1:74:80:39:15:ad:e3:
a5:18:0b:04:14:01:3d:35:79:0a:8c:35:93:0a:74:6a:e1:75:
7a:99:d4:e6:02:c2:ad:8f:53:75:f0:f6:e0:00:9e:47:b8:20:
9f:b0:d9:e2:c1:da:c7:51:e1:5f:b4:df:be:67:48:55:76:d5:
19:e1:c3:b8:37:33:5c:89:d1:a1:d0:52:a2:7b:18:17:f7:e6:
29:bf:d3:ab:ce:26:f1:82:78:e4:43:62:a4:3d:6b:15:02:58:
51:13:d8:04:90:eb:9d:bb:6a:5f:ba:c1:bd:92:f3:50:d3:13:
2c:f8:e8:91:d3:41:62:e0:85:fd:79:66:9a:25:6f:9e:9e:7d:
a4:83:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:26 2026 by rpki-client