Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: ww6uOYu7DDjXrJ1x/3RPoXyznhyx2cPkQBySnB5CUK0=
Subject key identifier: F5:B6:D7:D7:B4:8A:C9:E2:13:DA:07:CB:B1:33:30:B7:51:17:D6:A1
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 01A0CE247A448568E195D55D2A9506E02B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 12:01:32 +0000
Manifest this update: Wed 23 Sep 2026 12:01:32 +0000
Manifest next update: Thu 24 Sep 2026 12:01:32 +0000
Files and hashes: 1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: Gp9Yw2j1I8jTv7z9+j703+/DLX8YR6WpkFR1sz4eUHo=)
3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:7a:44:85:68:e1:95:d5:5d:2a:95:06:e0:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Sep 23 12:01:32 2026 GMT
Not After : Sep 24 12:01:32 2026 GMT
Subject: CN=f5b6d7d7b48ac9e213da07cbb13330b75117d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:ba:03:10:d8:72:58:6f:c7:6b:52:f6:fa:
cc:1b:58:22:fa:c8:77:55:a0:d5:5c:ef:23:cc:cf:
8c:c2:bb:be:e9:22:19:20:7f:05:38:5f:bc:c4:57:
ac:f5:09:0a:aa:11:b8:5e:47:b7:4f:27:44:70:db:
98:84:52:19:6b:31:2d:9d:39:67:2b:ed:5c:0c:cd:
fd:61:03:39:5b:65:ca:28:dd:ff:d9:b5:75:86:a2:
f6:6d:de:40:92:75:8f:f3:97:d4:2c:93:a4:ba:62:
ef:32:a9:4f:a5:fc:b2:80:ee:e9:b5:9b:9d:c5:e9:
83:05:40:02:9a:e1:b2:11:0e:2d:f8:8b:c8:35:b6:
31:0f:08:74:17:83:15:09:72:22:dc:8b:25:cd:da:
89:a4:8f:7a:7a:d1:9d:5d:7f:46:24:4b:97:68:27:
5f:04:2c:b7:47:3b:e0:85:08:e2:4d:7d:83:c0:bc:
d5:52:34:12:01:dc:92:0d:12:d9:4f:da:56:c9:eb:
71:26:d2:4a:78:05:e7:bc:da:55:6d:db:2b:52:9e:
e0:9d:5e:b3:79:99:22:eb:92:de:e3:79:b0:f3:ab:
ff:c2:2c:11:bd:93:8f:8f:ec:35:b1:b7:4c:36:42:
3c:7b:28:44:95:42:8b:d1:78:76:af:f1:eb:66:f2:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:D7:D7:B4:8A:C9:E2:13:DA:07:CB:B1:33:30:B7:51:17:D6:A1
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:24:82:36:d4:66:c9:ef:21:0c:97:fd:a7:e6:82:9b:07:97:
92:f9:92:a1:2e:d9:8a:ac:3c:a2:ed:d6:e8:92:12:8c:d8:da:
cc:a0:a1:48:be:6c:6a:b3:a2:f1:5e:06:5a:4b:be:4c:49:8b:
d9:86:26:19:a0:9e:15:25:4e:69:37:55:98:41:4b:04:f3:88:
35:13:d0:62:2b:16:bc:8c:b6:83:d9:cd:4e:a1:ae:8b:8e:67:
b3:50:43:7d:bd:f9:93:d7:e6:18:73:6a:76:27:c2:1c:1a:97:
aa:be:6e:62:92:a6:4e:8d:99:fb:05:16:85:b2:3d:a2:76:ef:
3a:9a:1b:f4:fe:c7:52:8f:5c:81:f5:40:d9:c9:4f:e3:97:98:
91:03:ea:da:7c:cf:65:34:0e:9a:6d:bb:76:f6:82:f7:67:9e:
c0:cc:21:1c:38:0e:3c:5a:1d:2a:8a:b9:a0:ac:79:c9:35:39:
9b:5a:ab:0d:6c:2c:94:a2:a2:96:af:18:5c:db:94:9b:3a:65:
34:fd:ba:37:3c:d5:3c:01:e2:6c:9b:3e:42:25:49:0b:b6:b9:
c1:bd:5f:73:98:5d:c0:d5:25:0b:69:4f:9b:4c:2d:d4:12:bf:
88:ca:f8:97:91:0f:b9:83:13:b7:45:b2:ee:ad:e3:d0:45:81:
4f:4f:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:59 2026 by rpki-client