Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: hCaEtQpjRtbPy9ZX7MeyAbet5+283gVUsOO6Wf5fAck=
Subject key identifier: 89:31:97:02:D1:2D:20:0D:24:E4:77:D0:ED:6A:EF:A5:69:59:25:85
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 01A0D2002F177F9653C77BA83420684F48EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:22 +0000
Manifest this update: Thu 24 Sep 2026 06:00:22 +0000
Manifest next update: Fri 25 Sep 2026 06:00:22 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: 12HP4moIubSK26YRczbdL+Tu1Q3wVEUnj0B8RBP3iIk=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:2f:17:7f:96:53:c7:7b:a8:34:20:68:4f:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Sep 24 06:00:22 2026 GMT
Not After : Sep 25 06:00:22 2026 GMT
Subject: CN=89319702d12d200d24e477d0ed6aefa569592585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:8c:71:95:c2:56:73:ca:29:f6:eb:76:73:
57:8c:9d:44:c5:ae:c5:73:21:31:e2:c9:ac:f9:c7:
91:07:11:da:0a:66:27:38:3a:d1:c4:b7:0f:0a:0e:
b5:f4:f7:5f:6f:c8:8c:6a:f3:f0:84:80:b4:7c:8b:
29:84:be:3f:e1:f0:e9:84:e5:fb:14:b6:a2:de:45:
00:89:c9:3f:31:06:c9:d1:5d:df:5b:5a:8c:7e:a0:
bb:c6:a7:6b:94:2e:9b:d8:22:84:5f:a3:0e:c6:98:
89:00:f7:66:03:00:b2:36:d0:84:93:e8:e3:d2:1d:
b0:53:b9:93:15:82:9e:2e:00:06:c7:c6:4f:ed:ac:
6f:e7:c2:29:da:bd:bf:d0:56:f7:67:c1:20:24:9b:
5e:0f:2b:ee:08:94:f8:44:43:07:cf:a8:99:4a:df:
0b:a2:93:6f:9d:65:ce:4f:d7:a7:de:f8:a5:c5:8d:
d1:30:79:af:4c:0c:d2:17:76:85:c2:41:21:07:36:
2f:12:7f:34:97:3f:cd:9c:a2:9b:72:8a:44:f6:58:
e0:19:9f:09:95:b0:f9:be:36:e9:5f:75:95:88:96:
ae:8e:3a:a2:d9:f1:73:ce:23:9e:93:19:37:00:34:
b9:e0:42:92:31:dd:7a:c3:44:b2:7c:14:40:a6:ae:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:97:02:D1:2D:20:0D:24:E4:77:D0:ED:6A:EF:A5:69:59:25:85
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:3b:ee:05:7c:59:42:18:f6:fc:e9:ca:8f:72:ed:8f:38:
69:6e:ed:00:66:5b:e2:3b:95:07:41:f0:bc:4e:ae:51:04:e2:
96:fd:19:bd:17:55:75:88:26:28:dc:2a:5e:ca:46:f3:e5:3f:
36:30:4e:c5:75:24:b9:77:43:5b:cb:89:c7:99:f6:f4:f2:20:
c6:e9:da:eb:ce:d0:a0:83:b6:74:fa:5c:ee:6f:7d:f2:1e:55:
7e:0f:4d:83:16:d7:b4:f3:03:e7:d2:16:0e:af:33:73:c8:ec:
41:79:85:50:d8:99:d7:d2:50:03:c3:21:f2:d2:9a:dd:36:b9:
93:aa:a6:cf:9c:48:6b:8f:a2:7b:37:70:73:6f:3e:79:3b:d2:
e7:3c:bc:8b:38:3a:4a:17:fb:2e:41:71:54:23:6e:17:d7:cb:
4f:81:f4:d0:c7:8b:26:87:1f:eb:ee:19:0d:1a:70:16:86:0b:
bb:d5:80:40:dd:81:b4:fa:fd:86:08:32:a3:a9:87:bf:b6:a9:
0b:d3:81:d9:ff:7f:fb:9d:8b:ea:ed:f5:3a:fd:9d:42:64:3a:
bf:3d:5a:91:74:d5:62:ee:15:a5:9b:58:1a:f2:18:a2:ae:cf:
bd:fd:91:fd:cf:00:d9:de:76:5f:9a:b8:bd:6b:4a:6d:80:17:
7a:cb:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:10:45 2026 by rpki-client