Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: k+mCCLey1I0EdjWYNM6GwqROTEGrnuYEblTRo7b9nuM=
Subject key identifier: 54:C4:C5:1D:EF:A0:5A:D2:60:E3:13:2B:75:0D:0A:36:E7:60:37:27
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 01A0DD2A142FE4E9576BBEB3211E3EDF7491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 04DA
Signing time: Sat 26 Sep 2026 10:01:57 +0000
Manifest this update: Sat 26 Sep 2026 10:01:57 +0000
Manifest next update: Sun 27 Sep 2026 10:01:57 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: uE2rmFWiG3ZR4e7cSERoUbls/96YZ0S3YLv80pyBhuE=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:14:2f:e4:e9:57:6b:be:b3:21:1e:3e:df:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Sep 26 10:01:57 2026 GMT
Not After : Sep 27 10:01:57 2026 GMT
Subject: CN=54c4c51defa05ad260e3132b750d0a36e7603727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:b7:53:e6:55:0b:e1:e1:d5:80:ca:df:51:
38:50:25:12:b6:c7:46:f0:7d:aa:5a:e1:53:fc:11:
89:ca:c0:bb:7d:d5:5b:ff:ba:bd:b5:27:bb:4d:d6:
cb:e6:26:fe:ee:f7:6d:c8:1e:6e:05:f5:d8:d2:c7:
0b:96:de:09:3f:33:6a:46:61:3e:dc:2b:6e:c0:f3:
48:0f:f9:58:62:37:3a:16:e2:42:33:7d:eb:af:e5:
17:9f:e4:b1:cf:d9:b5:5d:15:a5:ac:43:7a:22:91:
2e:82:bc:84:94:bd:da:3f:83:74:da:e9:10:8f:13:
66:57:10:86:a0:b5:92:77:b9:8c:fd:74:df:8a:33:
23:d1:01:62:2a:48:fd:c3:66:81:ec:af:2b:99:53:
c6:3a:89:ba:a3:1d:7d:83:c9:73:92:13:ba:b6:23:
5b:0b:6a:f9:49:02:76:74:08:f9:7e:c7:80:fc:ed:
84:4a:42:77:d8:27:91:54:e8:72:21:23:a0:94:56:
0a:3a:6d:7f:ca:b5:12:57:af:2a:8f:1b:93:71:5f:
0a:98:48:f1:9c:13:6e:24:6a:d9:a6:fb:d7:62:06:
47:0b:8f:25:41:c2:31:b0:82:3a:3f:80:78:bf:31:
cf:59:ae:5a:22:8c:d4:a4:e7:67:fc:d9:81:4f:8f:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:C5:1D:EF:A0:5A:D2:60:E3:13:2B:75:0D:0A:36:E7:60:37:27
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4c:04:3c:5a:30:65:e3:13:99:ea:73:f3:3c:94:c5:2e:39:
af:6e:ec:8e:d4:f3:d1:c1:8a:4a:29:fa:49:84:f7:68:12:d8:
45:ac:34:c0:e2:d9:cd:75:e3:29:de:19:53:d0:e6:93:47:6e:
2d:95:c6:7c:64:dd:e2:9c:cf:85:af:61:c5:ad:1e:47:c7:ee:
9b:ed:6a:dc:83:c7:e9:7b:17:a7:bf:53:93:29:da:97:3a:88:
0c:fa:f4:70:a2:78:84:86:3b:b9:dc:79:f6:8f:a9:06:b8:48:
b5:93:22:05:d0:cf:26:8b:7f:6e:bd:44:4f:d1:be:8b:0b:43:
01:46:de:bd:d8:6a:65:21:43:69:78:13:88:5f:de:7c:2d:45:
5e:3a:3e:5f:2a:09:f7:28:76:55:4b:e0:ea:ff:a1:3b:6f:19:
25:25:a4:22:44:e4:08:06:37:db:9d:b1:77:b0:e7:a7:ab:7c:
cc:d9:c5:7a:c3:71:41:c5:f0:d2:57:3a:e6:5d:f9:c3:d3:57:
6e:2c:17:9a:20:61:0c:c9:fa:d4:9d:8a:4e:e4:e4:fb:51:4f:
c8:95:74:cb:0c:27:d8:32:fb:4a:86:dd:e1:df:02:5b:53:45:
b5:aa:c3:8c:f8:aa:8f:ed:90:e1:ba:d4:47:37:06:e7:c0:ff:
1a:fe:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:43 2026 by rpki-client