Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: DcUFGfT+e4lMTY3Fh5feaeHSFqIECmstCeWfdzpM/0E=
Subject key identifier: 34:07:F3:32:A0:77:56:C8:59:E3:00:02:38:61:DF:5A:FE:79:AB:56
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 019F954A6EBD9F84A293B8AD8C1650A02519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:50 +0000
Manifest this update: Fri 24 Jul 2026 18:01:50 +0000
Manifest next update: Sat 25 Jul 2026 18:01:50 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: OU4eRm7vnEi4CN8tw+axHZBWS6EMEx20Wu58Hn6Zmno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:6e:bd:9f:84:a2:93:b8:ad:8c:16:50:a0:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Jul 24 18:01:50 2026 GMT
Not After : Jul 25 18:01:50 2026 GMT
Subject: CN=3407f332a07756c859e300023861df5afe79ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:03:a8:15:4e:64:20:d1:58:4a:75:5e:cc:
20:b0:56:b7:97:bc:2b:93:28:2e:8c:e8:52:1b:fc:
71:6c:ad:99:e5:f5:2f:87:e0:51:51:8d:41:31:8f:
cb:7f:f1:1e:74:21:40:94:7e:86:59:95:8f:bb:db:
26:07:bf:29:40:10:89:9c:b3:6f:15:36:75:b8:aa:
50:ff:f6:2d:ed:7a:51:5b:31:33:a7:a1:17:ee:19:
6f:3d:6a:2f:33:b4:f1:72:2c:f4:cb:4c:f2:c7:1a:
5e:ae:e5:fe:40:03:ef:b3:7f:3d:f9:5c:4b:0b:c7:
ca:89:ed:92:68:93:ec:24:ad:f6:11:bc:4c:13:0e:
01:30:78:d5:95:0e:18:78:a2:d8:70:06:64:78:30:
16:5c:b6:7c:cd:a3:44:de:34:e5:fb:99:c9:36:e9:
a0:25:b8:bd:f6:da:5b:2d:03:0c:7f:23:52:ff:4a:
1b:e1:a7:20:70:e7:e6:43:e9:c7:c5:98:49:81:a1:
77:bf:8a:d8:b2:89:1f:84:ca:dc:2a:56:e0:79:0b:
3e:a6:8a:d0:25:0c:9b:9e:e5:49:46:3d:86:f8:4f:
6b:b2:35:69:df:ea:19:bf:6a:88:a2:a5:35:a2:b9:
af:ff:d5:46:2a:0d:65:78:da:06:9c:76:fd:da:36:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:F3:32:A0:77:56:C8:59:E3:00:02:38:61:DF:5A:FE:79:AB:56
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9b:58:8e:1c:39:e7:78:04:5a:80:f5:ba:9b:18:6f:6c:93:
aa:e8:41:cb:8f:0d:d8:60:98:96:d7:b6:d4:2d:0f:95:2d:9c:
cf:1e:ec:fc:0b:92:36:f1:4c:63:6f:51:88:c1:2c:79:78:8b:
d6:b3:20:42:6a:ae:39:05:c8:d9:14:93:f1:64:ec:e9:64:e9:
8d:25:13:a6:7f:9c:3f:fc:91:48:fe:8c:9b:14:e9:a9:4e:7c:
d3:41:14:ff:9f:a4:63:65:40:71:6a:f8:c2:fe:49:1e:08:52:
c5:06:cc:0c:7e:3c:f2:bd:bd:f9:c9:72:7a:4e:20:66:5c:be:
e5:7f:87:57:b5:f1:7a:9f:81:e4:a3:a2:59:e8:f8:32:00:5b:
2a:37:ed:ab:21:65:36:a2:94:b6:b2:eb:e2:04:c7:62:37:b5:
74:90:30:dc:3d:be:18:fb:22:d9:8a:74:d5:4a:2e:c5:ea:77:
04:5a:51:dd:b6:48:3b:88:46:42:87:2d:40:85:9d:7c:07:c7:
b2:a5:5e:30:b4:3b:90:78:13:33:81:af:45:b6:80:ab:62:be:
ab:27:10:5a:6c:95:f3:54:e4:6a:c4:61:87:65:e3:a2:cc:0b:
03:e6:00:ac:ef:9f:cf:5d:d1:1c:2b:11:48:1f:60:0f:13:62:
ab:7e:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:54 2026 by rpki-client