Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: SrUm0gb/gWipnVdV25pp+S+raEkuA19AiXxoQA2iKyw=
Subject key identifier: 5C:52:D8:8F:FC:A1:12:0D:91:C5:5C:76:8B:4E:FA:F2:96:46:5E:63
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 01A1062613CAFF5CED730B856D73C3CAE6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:02:01 +0000
Manifest this update: Sun 04 Oct 2026 09:02:01 +0000
Manifest next update: Mon 05 Oct 2026 09:02:01 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: nLDKY7iT4cnAJNrjpDEUsxCox56eiIOtNoiGSarrLpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:13:ca:ff:5c:ed:73:0b:85:6d:73:c3:ca:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Oct 4 09:02:01 2026 GMT
Not After : Oct 5 09:02:01 2026 GMT
Subject: CN=5c52d88ffca1120d91c55c768b4efaf296465e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:be:3b:85:b4:40:4f:37:08:38:a3:75:18:
d7:aa:54:09:25:bd:ae:21:0f:81:9e:5c:dc:03:38:
5c:ae:72:58:92:aa:af:ac:08:74:98:d1:5b:3a:69:
01:bc:7e:0f:b0:e6:4a:4a:fb:b7:6a:80:30:7c:8c:
88:9e:77:9d:0b:09:35:45:2f:96:3e:23:2e:9d:24:
c7:d3:b3:e1:1d:de:11:d5:4b:2b:88:27:49:b1:2c:
89:12:3c:4a:4e:b2:51:b7:e9:86:55:0e:50:3a:03:
e3:28:5a:8e:55:dd:6f:f9:9c:7f:a9:a9:d4:06:e4:
ed:dd:4e:5e:53:c4:07:9c:b4:72:19:71:46:12:44:
99:60:a5:b7:3a:a7:c6:0e:18:fb:e5:d5:c1:e5:25:
28:78:68:1a:34:d1:7d:1b:77:6d:bd:69:7a:33:5a:
a2:e2:45:0f:04:89:cc:14:6e:1b:0b:7c:72:08:10:
c4:1a:cb:b6:14:83:70:1d:20:e1:18:69:0d:af:8e:
7c:a9:4d:e8:e8:8e:03:ba:fe:ca:e3:ec:1d:a9:7a:
12:20:46:93:70:ab:ae:28:92:1d:ec:ec:a9:90:e3:
32:7f:42:e3:c2:34:f7:9c:79:cc:b5:4e:86:06:33:
21:18:ae:e6:5f:0d:3f:09:c3:d4:8d:b9:83:90:38:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:D8:8F:FC:A1:12:0D:91:C5:5C:76:8B:4E:FA:F2:96:46:5E:63
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e2:38:dc:62:87:84:37:e1:28:49:74:33:09:9c:f2:50:7f:
7d:45:12:82:b7:9f:f4:39:10:3a:b0:76:f5:30:49:49:6d:cd:
44:2e:0e:3d:96:2f:0c:51:ea:50:f2:e5:91:ca:07:97:9e:b4:
85:16:0a:75:9f:41:ff:4b:37:92:35:19:c2:f7:37:00:3c:fe:
8c:9e:ba:06:8d:87:a1:cd:e1:2b:53:ba:47:6f:6d:4b:6a:e7:
a8:50:b6:81:c3:2e:5f:f0:83:7e:00:71:77:f4:c5:5f:0b:7c:
d1:8b:b0:fa:9a:00:93:af:1a:83:46:ea:1f:7d:2e:b5:9b:43:
4a:e6:37:cc:37:df:c8:ec:f6:0d:72:84:af:8f:f9:92:82:39:
a4:3d:44:ea:6f:e9:f6:85:28:48:ff:bd:d6:77:49:53:42:2e:
82:0a:a2:37:3a:30:74:31:97:b0:6e:67:0b:0a:06:3b:9d:fb:
bb:d1:e3:48:66:9b:2d:23:8f:4b:3b:0e:44:4f:62:67:a2:dc:
a5:c2:2d:e6:0e:6d:97:4d:f0:3b:37:4f:1b:39:c6:82:09:4e:
47:92:54:2f:c4:3e:a6:34:c8:d6:c5:25:4a:eb:11:42:22:35:
fe:13:07:c0:fb:a5:a1:5b:b5:6b:5d:5d:67:b9:97:da:39:d4:
24:82:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:59:29 2026 by rpki-client