Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
File: aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft (raw, json)
Hash identifier: as7rADjr4aL/mYqFKDisfPAKSy4VareQbzlx+rZ4yk4=
Subject key identifier: 78:E2:EC:3F:62:57:98:0C:34:72:83:9A:7D:01:EB:6F:0E:33:E1:DF
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Certificate issuer: /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial: 01A0DA291FF632DA8AF91153C1190D0C6415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
Manifest number: 0123
Signing time: Fri 25 Sep 2026 20:02:03 +0000
Manifest this update: Fri 25 Sep 2026 20:02:03 +0000
Manifest next update: Sat 26 Sep 2026 20:02:03 +0000
Files and hashes: 1: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (hash: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=)
2: aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl (hash: jsNDlQWb2NgI0gAdtKPk0JpQFWuD6HGhjMXeFCwqDTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:1f:f6:32:da:8a:f9:11:53:c1:19:0d:0c:64:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Validity
Not Before: Sep 25 20:02:03 2026 GMT
Not After : Sep 26 20:02:03 2026 GMT
Subject: CN=78e2ec3f6257980c3472839a7d01eb6f0e33e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:1c:c2:88:34:2a:bc:f1:38:8e:ad:d3:92:
c7:77:6a:e3:e8:9c:b5:e4:f0:d7:88:08:db:53:4b:
4a:70:e5:71:8a:c5:91:80:6b:9a:bf:5c:c9:ed:ec:
9a:f9:68:b6:af:f0:32:5b:ee:6c:4f:d4:96:32:ed:
e0:44:b7:bd:d5:32:07:a1:1d:41:82:1f:12:3c:da:
2c:5c:44:1c:ac:86:22:d5:99:48:1b:16:b7:2a:42:
5a:5b:e7:f6:b0:6c:bb:8a:2d:84:ea:5b:e7:e8:2e:
d2:0e:59:85:2c:39:f9:a9:de:57:22:00:9e:f5:2f:
8f:d9:a3:66:dc:01:1a:31:04:d0:69:48:63:cf:18:
54:7e:17:c2:37:5f:9c:8b:25:40:0c:52:71:12:86:
ab:dc:23:68:95:47:96:71:5b:7e:6b:c5:f0:23:79:
76:39:fe:12:58:91:1d:7c:47:6d:4b:13:b6:7e:52:
69:48:c0:de:60:81:04:d2:7b:a8:e9:a0:00:21:34:
c0:de:c0:43:ca:63:ca:f2:72:c1:5b:f6:f3:18:69:
d3:31:b3:d4:de:3e:bd:8f:a8:1b:a1:b6:ff:7d:fd:
7f:18:39:5e:62:bf:0a:f1:6d:a6:fa:a7:d2:9e:12:
0b:e2:14:fd:ee:4b:a5:ed:83:e3:b4:13:b6:81:69:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:EC:3F:62:57:98:0C:34:72:83:9A:7D:01:EB:6F:0E:33:E1:DF
X509v3 Authority Key Identifier:
keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:85:03:bd:02:d3:96:61:cb:c2:da:e7:b6:4e:04:5c:bb:ad:
e1:fd:e0:ee:d1:53:a5:74:88:cb:f0:a7:89:56:74:bb:ad:ec:
14:fe:30:dc:3d:de:d3:47:c3:d6:98:3a:87:ce:5e:82:9d:a4:
d0:a0:95:46:08:5e:65:c5:86:be:4c:c6:ac:40:19:ca:cd:71:
c1:44:81:6a:be:91:07:98:86:0b:ff:fb:41:94:3f:f0:9b:9e:
ae:73:67:66:d8:7c:5f:0e:80:79:56:59:2b:f4:f8:f9:ce:5e:
0f:20:2e:f2:57:f2:07:de:c4:b4:fe:c0:9e:65:44:04:cb:f6:
35:fd:6e:5d:74:1a:18:ad:9f:08:2c:46:84:a5:a6:c7:ae:21:
d3:32:7c:8d:22:89:7e:b6:ad:cf:a6:c6:e8:e5:57:a3:93:ea:
da:f1:48:2f:8f:8c:15:b1:31:65:3e:c8:a8:dd:ab:01:20:35:
ca:cd:69:37:59:bc:aa:b5:96:dc:76:7c:3e:19:ee:dd:f8:ef:
72:ac:3e:8a:8d:f2:c4:93:1c:2b:07:96:a8:09:a0:c2:ca:3f:
29:98:22:f5:2c:19:cd:12:91:a8:18:aa:3e:1a:e1:96:a9:73:
d7:0e:e4:0f:97:cd:f8:6c:e8:28:45:b5:f2:7c:fe:06:24:f3:
b6:78:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:58:26 2026 by rpki-client