Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: tFJDqbMg4xf9TkIy6numVobrBGKe337W7xY6r8UbAv0=
Subject key identifier: 4F:F6:A4:6C:3C:0B:8F:BA:83:AB:F5:F8:EC:7E:DF:51:1D:E0:E4:35
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 01A0DCBB8B96628AF2703046E55AA0893EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 08:01:13 +0000
Manifest this update: Sat 26 Sep 2026 08:01:13 +0000
Manifest next update: Sun 27 Sep 2026 08:01:13 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: IGC8fjDvPch+7Qkcb9DnvHWeZSaQI7snUbEQ5awfAl4=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:8b:96:62:8a:f2:70:30:46:e5:5a:a0:89:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Sep 26 08:01:13 2026 GMT
Not After : Sep 27 08:01:13 2026 GMT
Subject: CN=4ff6a46c3c0b8fba83abf5f8ec7edf511de0e435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:66:96:d4:a0:5c:aa:d9:6f:e1:53:96:1e:
d7:d4:19:17:2f:4b:9c:e8:a8:af:71:d4:f4:68:ef:
26:c8:0e:ce:05:2e:e7:a9:69:f1:5c:b2:76:aa:74:
d9:3d:6c:e4:ae:c8:16:74:52:5d:b1:76:19:8d:f4:
e0:e3:46:00:ab:25:08:48:f0:99:8f:8f:6f:d2:0d:
db:7a:5c:91:d9:c3:3a:7d:54:6b:21:71:48:5a:17:
a8:8c:a9:41:f1:61:ac:98:e2:7f:46:75:8d:d4:99:
42:ff:a6:1e:a6:1f:d1:23:11:86:dd:68:20:d3:c6:
92:99:e1:ac:97:2a:82:b1:61:02:17:8d:6f:43:bd:
89:b4:55:83:e2:5c:bb:93:cb:1a:48:39:5a:71:2b:
da:67:73:12:7b:cd:2e:9e:6e:e6:c9:d3:1c:42:e3:
01:19:e9:21:13:18:8b:c7:6b:95:10:bf:1f:25:7b:
0a:b2:b3:60:e9:c0:a0:37:37:8e:73:92:9f:b8:71:
50:11:8e:5e:e8:7c:55:72:92:42:82:14:9e:80:eb:
9c:42:13:48:5c:bc:7d:5a:f6:d0:4f:17:f1:a1:08:
8b:b2:8b:df:84:e1:9b:47:91:cf:a4:f2:fa:38:53:
5a:7f:b0:ee:47:f2:dd:e8:6e:ae:89:f1:36:40:27:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:A4:6C:3C:0B:8F:BA:83:AB:F5:F8:EC:7E:DF:51:1D:E0:E4:35
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f5:ac:4b:49:15:7d:1c:19:44:8d:a4:8f:65:8e:6b:dc:c7:
d2:28:bb:e8:4f:03:5f:ed:c7:da:4a:74:0a:78:68:69:0b:07:
e9:72:71:6a:c0:32:15:89:14:7d:b3:0b:37:95:b8:9e:f8:ec:
a9:2d:56:0b:20:ce:d6:f3:c1:88:e8:99:b4:e3:5b:e3:1e:8e:
97:25:b0:f2:4c:08:b6:9d:89:05:29:bd:35:a4:a9:6e:0d:0a:
b2:5d:08:e4:49:6c:d8:8a:15:5a:b3:55:70:2f:34:ca:e4:cd:
78:d0:11:cd:31:f6:d7:8d:2f:74:e0:e2:37:c0:0b:4e:e0:40:
7f:e7:97:75:00:5a:28:57:01:7d:fd:80:72:17:80:59:50:ab:
76:a2:f9:75:50:07:d4:25:c0:41:a9:27:1d:9f:e7:d6:60:f8:
14:5c:a2:51:96:4d:91:64:21:e1:cf:0a:f0:4f:70:98:dc:98:
a8:6c:c0:de:44:c4:2c:89:c1:7d:84:5b:c0:09:e8:fb:69:42:
10:cb:d3:6b:67:58:5b:71:70:7b:49:60:8c:be:11:7a:49:03:
9a:5b:2c:cd:48:a9:c1:ce:0e:7c:45:50:60:57:01:75:fc:48:
dd:27:c9:af:1e:0c:34:6a:81:ab:40:85:6b:a6:32:58:d3:02:
e3:de:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:09 2026 by rpki-client