Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: MMSCvw6ENY00Ywa4EFEzPKLGfu6/xOo2x3g3lWxRUSw=
Subject key identifier: 54:A8:1B:9F:44:1A:43:13:B2:60:BD:78:73:B5:4E:6D:02:03:DA:ED
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 01A0EB1BBEB6995156EE41CD6FAAF3AAB19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 1542
Signing time: Tue 29 Sep 2026 03:00:58 +0000
Manifest this update: Tue 29 Sep 2026 03:00:58 +0000
Manifest next update: Wed 30 Sep 2026 03:00:58 +0000
Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: nWWlzjItjkVnqJEGwTth7cTKChvQmt6/IWmWQ5bKAjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1b:be:b6:99:51:56:ee:41:cd:6f:aa:f3:aa:b1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Sep 29 03:00:58 2026 GMT
Not After : Sep 30 03:00:58 2026 GMT
Subject: CN=54a81b9f441a4313b260bd7873b54e6d0203daed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:88:9a:16:9f:d4:c5:3a:c6:8a:16:cc:8c:27:
8e:4a:09:0b:17:3a:84:ac:dc:cc:41:d4:b2:20:34:
01:46:14:85:52:45:e4:33:54:e5:fe:cc:14:ea:65:
c6:5e:e6:de:d4:a8:9b:ea:ca:fc:38:2f:46:34:02:
0b:0b:55:87:bd:e3:b4:cd:6d:f7:cd:3f:ee:fa:c4:
15:22:e4:97:c1:2a:60:30:a8:2d:31:01:7a:76:d3:
7e:45:87:1d:f7:19:24:f2:31:53:ae:63:ae:8a:11:
e0:9b:71:a9:f0:35:f8:35:5f:8c:e6:a7:0d:de:56:
ae:8f:b1:9d:a4:ed:5c:78:27:be:8a:e9:a8:da:a4:
e6:1e:bd:d9:6d:58:3b:28:f4:35:5a:96:d5:88:95:
e7:4e:3c:bd:ca:ca:8a:c1:55:cd:db:aa:57:68:cb:
71:c7:52:6d:f7:d1:b1:9c:f3:38:14:bd:23:50:01:
13:48:b2:cb:34:02:51:10:91:2b:c5:4c:8c:03:e6:
15:0b:e6:26:42:4c:d8:a0:4f:ff:6b:e9:87:2f:0d:
e6:2d:f4:b9:26:07:70:d5:a7:eb:a0:df:80:77:ca:
52:9e:3e:71:fa:5f:c9:d6:f9:e4:cd:95:a9:9c:f5:
ef:ea:53:45:18:9a:98:3e:eb:34:8c:bb:83:89:09:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A8:1B:9F:44:1A:43:13:B2:60:BD:78:73:B5:4E:6D:02:03:DA:ED
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:b7:5a:3b:95:12:d6:03:da:f6:04:ae:b3:5a:18:be:90:
d9:05:e8:bf:5b:61:96:b7:82:b0:d1:9e:a5:b2:b0:2d:81:07:
d6:f6:e6:b0:a2:1a:bc:9d:16:7c:91:3b:45:69:d8:28:cf:73:
cd:7e:c7:dd:16:0f:39:06:b8:83:89:a6:ac:b2:23:16:fd:1f:
d0:84:35:1c:3c:c8:8d:93:8c:43:d0:3f:be:75:ec:5f:74:50:
11:09:2b:97:21:b2:c4:15:24:39:a4:99:32:76:ac:d4:34:61:
1f:83:25:6f:56:74:54:59:d8:e0:a0:63:7f:74:50:38:dc:f8:
f4:09:38:db:7e:c7:1a:b3:16:6c:be:67:93:90:f2:75:ca:10:
81:a0:1b:f5:b7:cd:d2:a6:1c:00:a7:45:91:41:be:f5:49:64:
74:56:9a:de:4c:6c:14:c7:4e:0e:89:6a:2b:fe:ed:e9:92:31:
02:ef:77:9c:5b:60:c8:b8:1a:c7:3a:06:2c:91:f4:a7:4f:86:
1f:5b:90:e4:2e:2b:4c:56:8a:1f:0c:05:65:dc:fb:94:eb:e9:
eb:0a:3e:70:3b:77:b2:59:6a:ef:5e:46:57:8e:ca:f8:ba:87:
e8:9d:f5:3a:93:39:0b:b9:8b:fe:39:30:45:f2:28:01:e4:ba:
6b:5a:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:46:33 2026 by rpki-client