Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: MemFxRyn2G54LDWOnizyPuLbG5ufR76vrfh5p8kmu1I=
Subject key identifier: 2B:B4:B9:C8:CC:CF:92:04:17:D5:A2:0F:07:6A:6E:E6:0D:A2:44:F0
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 01A0F0E73ACD9148896A0D64B3E5FCA72CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:20 +0000
Manifest this update: Wed 30 Sep 2026 06:01:20 +0000
Manifest next update: Thu 01 Oct 2026 06:01:20 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: fh+Zvn0/wzm7M1NGBFmi9g4goSOjPMgxEpe3wMZSqec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:3a:cd:91:48:89:6a:0d:64:b3:e5:fc:a7:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Sep 30 06:01:20 2026 GMT
Not After : Oct 1 06:01:20 2026 GMT
Subject: CN=2bb4b9c8cccf920417d5a20f076a6ee60da244f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:1b:2c:2e:11:b4:00:41:4a:48:cb:9e:a2:
68:16:33:0e:b5:fd:39:f9:ac:28:15:5c:58:85:54:
e6:06:5c:85:3d:39:0a:ce:d2:ee:27:00:ca:10:3d:
c3:44:80:bf:27:ca:2b:dc:69:d6:fa:d0:66:cf:ae:
fb:83:79:0e:05:62:b1:4b:36:48:92:ab:2b:bb:b4:
63:46:09:76:af:d4:b9:6f:0a:8e:fd:02:14:aa:24:
13:78:71:bf:65:2e:cb:d0:3a:b0:82:f6:82:de:5d:
bb:6b:97:cd:13:c3:45:03:ca:76:dd:6b:2c:3e:dc:
48:e1:36:d4:42:d9:89:68:26:91:92:d4:43:09:ac:
4c:97:3d:eb:65:dd:81:35:82:1f:99:6c:8c:97:e9:
98:ab:14:5e:76:7d:e7:21:7b:1c:b2:6c:57:5d:e5:
f8:c2:60:32:44:35:6d:c0:af:a5:7f:18:9d:07:3c:
94:cd:f2:94:89:08:79:c6:26:bb:0d:21:97:ee:a1:
ea:8c:dc:94:e0:8e:33:ad:df:8e:70:d8:ad:19:91:
b8:ca:c4:15:08:e6:46:62:f2:f5:60:47:19:4e:50:
e6:4e:87:1d:c0:6a:bc:dd:77:af:2c:de:72:9d:50:
f5:cc:f9:28:83:ca:7f:1c:5c:85:69:26:85:84:4d:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:B9:C8:CC:CF:92:04:17:D5:A2:0F:07:6A:6E:E6:0D:A2:44:F0
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:1e:0d:81:2e:9a:d2:da:e2:d0:4c:29:22:9e:71:b2:c8:
81:2b:3c:5d:17:9f:10:bb:91:6b:63:f3:57:ff:b7:39:21:ed:
7c:cf:47:ed:70:e8:73:91:75:66:72:0b:3b:34:d4:ac:70:cf:
39:7b:30:65:a1:e9:8c:2e:e3:19:d5:11:98:05:da:1e:23:91:
21:c9:86:b6:2e:bc:36:a9:ec:fd:ac:a8:3c:62:ba:44:3d:b2:
e2:62:66:fb:e1:d8:c4:29:b4:9e:55:f3:d4:5a:2e:51:aa:7e:
9e:46:c5:e5:f1:0b:e9:89:ab:73:31:c0:1d:6a:86:77:08:dd:
78:fd:d0:82:3f:00:80:67:24:ad:ea:14:15:b5:bd:45:ac:b5:
57:27:30:66:31:df:53:6e:8e:fa:ff:9e:aa:94:2b:96:49:18:
d4:a6:b3:2e:8a:c1:c1:86:ee:5a:e4:51:e4:c0:71:cc:92:9e:
cb:94:d4:ec:68:16:25:87:49:e0:33:1c:84:7b:21:69:da:d9:
b2:b9:0f:cb:42:bf:24:32:76:c3:b2:01:68:62:27:86:75:fc:
47:94:fd:35:d1:67:7e:26:67:89:d7:6d:69:17:2e:cf:32:7d:
85:16:02:c4:da:b2:98:de:fa:03:26:16:37:21:bb:7d:3c:92:
ec:f5:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:24:18 2026 by rpki-client