Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: 5WqXEZaBT05J6tuOxJQMYjvvAn6H2rNgKUQSxRR1uWc=
Subject key identifier: 0E:02:9E:93:79:C3:07:2F:38:04:10:28:6A:1C:BA:B5:DA:D6:D5:4F
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 01A0D538C05D79FE0B7AA20CB06F771CFB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 21:01:01 +0000
Manifest this update: Thu 24 Sep 2026 21:01:01 +0000
Manifest next update: Fri 25 Sep 2026 21:01:01 +0000
Files and hashes: 1: a1IDt2xomxWARvsJeU8MLNXS4IU.roa (hash: 426ydjesv20i56PFyO1tKmNiavKTm2qYefp1CVawqKM=)
2: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: e+M/OZ1Dl1BzujXlS8SIwNJn8byDCUDgDJdFAaiP8Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:c0:5d:79:fe:0b:7a:a2:0c:b0:6f:77:1c:fb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Sep 24 21:01:01 2026 GMT
Not After : Sep 25 21:01:01 2026 GMT
Subject: CN=0e029e9379c3072f380410286a1cbab5dad6d54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:87:c2:f1:87:15:c5:51:74:28:64:f6:2f:
42:a5:36:35:79:2d:7f:52:ca:d8:67:c1:bc:d8:05:
b6:19:d6:b0:6b:f1:70:d0:94:66:8a:5c:23:2a:9a:
a1:61:fa:2a:9b:59:70:1a:4d:8b:f6:db:50:76:5a:
d2:da:66:b7:38:07:0e:83:ce:76:c2:3a:15:7d:4c:
bf:99:37:8a:48:13:94:09:b7:ca:e6:78:9e:66:1b:
38:0d:8e:e0:c6:68:82:78:28:52:43:e9:06:d1:03:
8b:50:59:92:06:10:4a:12:5e:8d:1a:57:a1:55:00:
c3:b2:f8:87:94:bf:d6:78:59:2e:1f:af:30:1c:e3:
78:ea:07:aa:38:e4:82:38:d6:fe:e6:32:1d:71:61:
b5:b4:92:c8:1f:5d:e9:38:63:27:5a:64:df:b4:d1:
b5:71:39:f3:d5:94:62:55:b0:18:2f:84:37:46:75:
b5:9d:9e:b3:b4:a1:3e:8b:d3:41:8a:cb:2c:4f:77:
94:1f:d6:56:1b:9f:03:bb:3d:d8:8f:bb:99:96:e2:
4d:ba:85:db:aa:83:3c:33:07:fe:d3:d4:93:91:c6:
39:e2:fb:27:56:31:f1:30:5c:9e:06:32:36:f2:ab:
89:38:ad:2d:95:23:ad:9d:5e:ec:57:52:19:3f:dd:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:9E:93:79:C3:07:2F:38:04:10:28:6A:1C:BA:B5:DA:D6:D5:4F
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:67:6a:67:3a:54:a3:60:0e:58:9f:8b:7c:87:15:48:9d:c7:
01:20:bb:65:26:9f:67:b2:14:1b:2c:5d:6d:72:cf:c3:a0:1d:
c9:69:51:98:18:49:60:9a:2b:2c:9a:0b:c0:f7:9d:36:ad:60:
bc:02:99:01:5a:77:18:02:88:ef:08:97:9c:28:b5:9d:5f:70:
41:e4:ae:52:5a:35:42:7b:b0:f6:ca:c1:0a:14:cc:1a:79:00:
44:ad:e9:c7:d5:86:33:c9:0e:cd:a1:08:b3:09:a6:c6:8a:fa:
13:9f:80:e7:fd:01:cc:10:1e:b9:da:b3:ba:e8:bd:e1:81:82:
d9:1c:4d:48:71:c0:07:82:ea:fa:81:20:1f:eb:20:5f:85:13:
c7:59:b0:a9:c7:5d:0f:7b:23:0c:c1:88:08:9b:65:dc:cc:c5:
db:67:ac:6b:1b:f5:d6:61:c9:1c:e0:9b:ff:04:10:8b:35:2e:
ab:30:1e:c2:87:2d:b3:33:7f:ad:c3:84:87:83:b4:d5:75:99:
af:0b:5c:1d:73:44:5c:bf:df:19:71:df:07:0c:83:b3:f2:21:
25:37:31:20:99:9d:d1:a9:84:4e:84:97:69:f1:bf:a2:84:1f:
b8:ee:05:23:94:7a:a6:80:75:bf:1c:3c:9c:b8:fe:4a:5d:a9:
06:34:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:28 2026 by rpki-client