Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: i0EmQqqugrQqYNUKzcZQJdE0UzHc0Kp0keLbq3qh4PU=
Subject key identifier: 1A:9B:BD:0F:77:78:9D:37:6D:D4:6A:C2:B6:8B:34:E1:1E:22:C9:44
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01A0D0ED6440F46BEA4A375D3FDD210276F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 01:00:13 +0000
Manifest this update: Thu 24 Sep 2026 01:00:13 +0000
Manifest next update: Fri 25 Sep 2026 01:00:13 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: GSWnpIQiWc0ogOZ8AMtX+J+RP9EZ5y4ZWkgez180enM=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:64:40:f4:6b:ea:4a:37:5d:3f:dd:21:02:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Sep 24 01:00:13 2026 GMT
Not After : Sep 25 01:00:13 2026 GMT
Subject: CN=1a9bbd0f77789d376dd46ac2b68b34e11e22c944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:88:a8:58:7e:96:8e:42:79:e7:19:ae:c1:
31:d0:f3:e9:ca:fc:93:2f:ad:07:91:fd:65:89:66:
ee:fa:b7:fb:a1:62:0d:f7:fa:65:a0:f4:8f:a1:a3:
6c:c0:54:dd:fb:3a:bf:44:6c:93:89:5f:2d:90:f9:
ef:bf:85:15:97:fb:6c:6f:25:fd:d8:70:2c:93:8d:
57:27:d8:b9:aa:b7:fd:df:7c:79:99:69:24:44:40:
0e:d3:9f:99:1c:82:2c:bc:e7:80:da:92:54:7d:f9:
10:47:91:51:51:6e:6a:6d:26:d9:28:70:42:8a:4d:
7d:12:aa:92:f2:3e:e2:6b:41:08:90:c7:04:b5:23:
0e:0c:ff:e2:49:5a:2e:c7:87:89:0c:35:19:67:f7:
a4:bf:e7:5e:bf:6d:c7:35:d2:45:0e:2c:9f:93:7d:
53:a6:8b:18:3a:0d:77:08:4b:70:26:8e:76:14:7d:
17:46:27:e9:8f:91:4d:ee:99:f0:48:52:09:50:4b:
1b:44:21:68:e4:d0:be:a2:9b:a1:a5:b2:57:f9:0b:
33:53:1e:ea:75:b5:e6:57:86:b6:11:67:42:d0:a0:
2f:1f:26:8e:34:5e:a9:a4:b5:c1:e5:5d:b9:2e:08:
51:7c:d9:3b:1d:a7:cd:97:ef:2e:8c:38:bf:c2:1d:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:BD:0F:77:78:9D:37:6D:D4:6A:C2:B6:8B:34:E1:1E:22:C9:44
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d0:ae:3d:51:7c:e1:12:8f:88:26:e1:90:70:55:a0:bd:07:
1b:96:e7:4d:b8:2f:0c:00:56:19:05:6b:7f:ab:c9:e2:df:2c:
8e:8b:bb:64:6e:56:5a:4f:b3:a9:e0:64:f7:d8:2b:5a:65:8e:
30:41:d7:a3:28:79:d9:a7:20:59:ec:39:49:fd:3c:df:4d:01:
29:f8:9e:a4:a2:7c:cb:55:63:d5:90:14:a1:95:6b:91:82:9a:
49:ff:98:dc:a6:e0:f1:2f:ab:80:d8:9b:6e:2c:f7:3a:4f:5d:
4e:e7:9c:fe:cb:88:cb:d2:ef:0d:1c:08:a0:77:95:4f:71:78:
4f:a4:e9:7e:24:89:df:78:2c:8c:79:44:9a:2a:e6:db:93:f2:
42:cf:a7:53:4e:01:7a:d5:b2:02:30:87:fc:1b:21:32:7b:3d:
a7:6d:05:74:ac:94:12:61:c7:98:f7:ef:1d:0f:f6:d9:f5:a6:
b1:08:58:9d:ad:b9:25:1d:b6:96:35:11:e8:e1:a9:30:52:71:
c6:37:7b:48:b2:e3:34:8e:52:eb:1a:8a:5d:c0:79:c8:73:a6:
98:4d:ce:ff:c3:4f:83:83:db:53:c4:56:ab:37:16:99:59:fc:
ce:e0:e1:e2:fb:5d:0f:58:6d:32:72:93:ee:b7:f4:46:eb:0b:
c6:23:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:09:34 2026 by rpki-client