Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: IfbH9n3M7SWxzyfKZPyi0TwaCofYBNtX47a4wPvsa9E=
Subject key identifier: BB:CC:78:AF:87:76:C7:BA:76:91:47:4B:37:AA:D0:55:85:9A:61:E5
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01A0F30CC796303B1FF8ECF96BCDA8DAD3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1349
Signing time: Wed 30 Sep 2026 16:01:36 +0000
Manifest this update: Wed 30 Sep 2026 16:01:36 +0000
Manifest next update: Thu 01 Oct 2026 16:01:36 +0000
Files and hashes: 1: 2yM5Do3zWOnr0yQBZ1vtd1vIjV8.roa (hash: xC4pizZCJao9T4oTMaaLUU+A5wr8fDYQOCKbRN4Gjs4=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: iSX/m/V3ryRgiqF4RWSiYrT3PdU5DxqD4OOcWDh3GIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:c7:96:30:3b:1f:f8:ec:f9:6b:cd:a8:da:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Sep 30 16:01:36 2026 GMT
Not After : Oct 1 16:01:36 2026 GMT
Subject: CN=bbcc78af8776c7ba7691474b37aad055859a61e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:3d:90:99:25:79:d0:19:21:2d:14:ea:54:
2c:20:0b:23:8d:dc:4d:9f:ea:0e:d2:8a:68:fe:4a:
b8:9e:5a:df:4c:1a:0c:9a:f1:ab:9b:b3:da:a2:41:
d0:73:d1:a1:c8:a9:d1:04:86:50:54:7a:c3:71:b8:
d7:20:44:53:27:91:10:1d:c2:b8:40:2a:b5:12:ec:
b0:a9:cd:d5:4c:0b:ff:17:ca:26:fe:7b:6d:35:78:
33:7d:5c:ac:1b:d2:eb:7f:c7:19:3e:4c:06:90:87:
aa:9f:9d:c8:a9:75:f6:47:0a:22:82:3a:eb:f0:52:
5b:68:d8:23:09:58:8d:86:93:74:b3:53:c2:e5:0b:
0f:fb:2f:5e:31:5c:66:bd:59:13:39:39:a6:05:b0:
51:4d:a9:b1:77:a1:cc:89:89:eb:56:0d:58:09:0e:
ff:a1:ae:f8:65:c5:7d:4b:e3:1a:d3:b8:7b:5f:08:
aa:be:8f:8c:fc:17:3e:7c:b6:df:6d:2d:a9:46:9b:
27:48:19:70:bd:e2:d4:ac:b3:82:61:6c:b4:a7:96:
cd:29:ad:58:14:99:c7:b8:81:c5:a1:60:2d:a3:90:
28:e5:13:b8:e6:87:d2:86:b6:ac:b0:27:4c:1f:b7:
49:fd:40:80:67:3b:a4:ca:68:37:81:21:b2:4f:72:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:78:AF:87:76:C7:BA:76:91:47:4B:37:AA:D0:55:85:9A:61:E5
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:15:02:f5:06:00:4f:bd:73:90:4a:32:57:5a:99:7b:ed:
57:ef:e9:a8:0b:3d:2d:1a:e5:a4:6f:56:40:50:9f:f9:3d:1d:
da:61:b6:74:d1:a0:ec:1d:eb:55:90:50:50:0a:6c:af:e8:97:
9b:03:bd:8c:0c:45:32:50:ad:58:74:6c:41:a5:f0:7a:58:06:
66:64:b6:df:9d:d3:57:f1:89:ca:34:27:6a:ed:93:5a:05:5d:
55:fa:0b:81:0b:0d:6e:af:af:57:92:ae:2f:ac:ba:3f:16:f9:
e3:a6:05:ff:66:66:e4:92:a9:98:ff:70:79:9a:18:f0:d3:8b:
84:b3:84:23:ba:b4:c7:b9:cf:8f:c4:6f:4f:70:ad:9a:7e:ab:
d9:cb:ab:d7:cc:01:72:97:52:3b:46:a2:fb:1b:8f:2a:08:a3:
e4:94:2d:7a:76:0f:06:33:3b:13:56:fb:09:c7:1f:fa:33:ee:
7d:aa:88:ae:25:39:11:84:bc:01:5e:a3:0b:b2:d2:5b:35:21:
bf:79:da:ab:30:fa:a5:40:14:23:9f:23:d4:61:7d:d2:f6:12:
28:46:24:b4:e1:eb:9c:39:8c:06:74:88:cb:a6:8e:f3:19:7f:
1b:75:57:50:17:45:d8:19:3f:45:17:ad:95:fb:d0:6e:80:ef:
3f:d1:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:11:36 2026 by rpki-client