Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: 5bdb8gQxWGCMvSw9BFT64Efhj+Terbe7WnKs9KLzneg=
Subject key identifier: 46:8A:69:63:FC:0A:89:42:CD:31:FA:27:B2:45:2F:A6:53:B5:41:82
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01A0D9170BC326D5A0C22205C035EBE0C382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0A8B
Signing time: Fri 25 Sep 2026 15:02:41 +0000
Manifest this update: Fri 25 Sep 2026 15:02:41 +0000
Manifest next update: Sat 26 Sep 2026 15:02:41 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: YpgeIMikGKprZUgUaP4C8kLATaM4oQp4UW/55tid/qY=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:0b:c3:26:d5:a0:c2:22:05:c0:35:eb:e0:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Sep 25 15:02:41 2026 GMT
Not After : Sep 26 15:02:41 2026 GMT
Subject: CN=468a6963fc0a8942cd31fa27b2452fa653b54182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:df:b0:0d:0a:3e:3d:cd:4b:63:7c:a4:28:
c0:fa:a6:0f:2f:2d:67:e5:87:53:a5:a8:20:85:c2:
5a:97:c9:23:02:e2:36:04:8a:ce:d4:ab:c9:27:af:
9c:94:13:b6:59:a6:9a:80:1f:78:03:aa:12:80:65:
16:e5:9c:56:fc:f7:74:1d:1c:47:a7:81:79:3e:65:
71:81:2a:48:3b:9d:f4:71:4d:84:c1:7e:8d:c0:82:
a5:e6:19:81:06:fe:ac:9e:03:a6:03:15:9b:93:14:
ea:2c:93:45:6f:ac:ed:2d:e5:2c:a7:7a:8c:4f:81:
8e:90:9d:46:63:85:2a:62:e1:51:22:f4:dd:43:ee:
0e:40:01:a8:76:9f:f7:34:69:d4:5b:52:a2:c6:6a:
76:4b:8a:d5:84:bf:b8:c6:ed:bd:99:64:50:40:59:
b8:70:55:81:15:66:ce:dd:60:42:aa:48:51:29:bc:
05:4f:c1:85:26:b0:e5:0f:51:24:ca:5a:9f:b7:1b:
de:c7:ed:98:9b:0e:43:0b:c0:c5:b9:75:85:86:45:
48:46:fb:ab:b0:05:75:68:db:22:37:20:15:dd:a0:
64:70:55:f0:5c:f3:29:02:b0:02:01:70:34:f2:be:
39:74:eb:42:29:eb:33:36:2b:7e:dd:30:cd:97:f0:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:69:63:FC:0A:89:42:CD:31:FA:27:B2:45:2F:A6:53:B5:41:82
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c2:de:f4:85:f7:fb:66:21:54:f1:62:57:bc:0a:1f:1f:67:
fb:d5:6e:6c:f7:e4:66:03:6c:f7:ee:10:2a:3f:fb:42:3d:3b:
47:b0:c3:a9:71:3a:7f:2b:68:f2:1f:e0:73:f2:da:9f:a8:df:
6a:25:27:75:b0:28:9b:4c:3c:44:f3:da:0b:69:ea:87:b9:55:
40:5e:5a:a9:39:0f:90:ab:1d:70:19:d5:e1:3b:d8:58:3b:c5:
87:87:a9:76:e0:ad:e4:44:e7:7b:5d:5f:67:79:c5:1c:ba:2e:
95:29:e4:94:c3:7d:cd:a0:03:eb:69:8b:c1:59:f5:8a:85:a9:
01:89:e3:1b:3c:97:a4:45:4e:0c:6d:ac:04:8d:83:00:59:a9:
ce:36:bb:09:02:1b:11:a8:c4:c6:38:a8:8c:01:da:3e:9d:44:
b9:b8:07:b0:16:a3:9c:a1:64:c8:3f:e7:b4:cf:20:1b:d4:48:
6b:8d:47:be:34:77:be:4e:47:46:e7:be:c8:89:d7:bb:ba:23:
da:27:95:0c:cd:d0:e8:a9:bc:9c:f8:b7:52:da:eb:65:32:a6:
25:98:b1:1b:2e:df:8f:9c:f4:dd:79:d7:20:6d:9f:fd:17:1f:
35:d6:0c:33:40:f6:e5:7c:f7:2c:74:d2:6d:a5:91:2c:54:ac:
d0:04:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:37 2026 by rpki-client