Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: zAVs8JzYlYpfqBae+1fNTZw5MSAQUKUpSsc6O0vR1eU=
Subject key identifier: DE:8F:FC:E8:0B:50:FE:06:96:E4:A5:75:CE:34:A8:3C:4F:86:8B:D4
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01A0D2DE04A0FEF24A077BBA71F18CEE9232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:02:40 +0000
Manifest this update: Thu 24 Sep 2026 10:02:40 +0000
Manifest next update: Fri 25 Sep 2026 10:02:40 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: jsftJwq2WaYQtu43TYFF9loTOP6MM8A7hW6jIpMiMvs=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:04:a0:fe:f2:4a:07:7b:ba:71:f1:8c:ee:92:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Sep 24 10:02:40 2026 GMT
Not After : Sep 25 10:02:40 2026 GMT
Subject: CN=de8ffce80b50fe0696e4a575ce34a83c4f868bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:8f:a8:8d:9e:03:ef:0c:16:2f:b7:b1:60:
1d:08:1e:81:14:91:62:94:b6:12:b4:20:04:42:61:
87:32:15:86:7e:76:0c:53:1a:9a:50:6c:21:26:3c:
33:c7:11:a3:cd:63:dc:ba:b0:b5:fb:17:1b:f6:2d:
2f:4d:cc:0d:35:01:47:99:6b:88:d6:e9:e7:b0:e5:
c6:e4:76:14:41:64:f3:2d:4f:32:57:f7:19:e6:e1:
5d:29:ad:8a:ea:b4:74:d9:67:00:e2:01:d3:80:ea:
2f:b0:9e:3a:7c:d0:dd:5b:02:dc:a5:bb:99:9b:12:
ce:4b:f5:1d:ee:d5:d2:95:8c:bd:3c:19:71:db:3a:
2d:0d:13:0d:85:f6:d0:2f:c0:e3:35:bd:17:d7:af:
5a:68:63:a3:63:63:ea:2a:4f:55:d5:75:15:b0:79:
df:44:07:f3:f4:09:eb:bc:fc:18:6d:85:e0:f4:89:
8e:49:02:e1:04:b8:2e:7b:41:31:ac:4c:d0:56:ba:
bf:d7:5b:8e:6d:fc:7b:20:07:ef:5e:22:18:ba:f1:
d3:3e:6f:76:07:93:40:2b:08:e3:16:bd:e7:61:d1:
03:82:52:38:f3:52:73:cb:41:e1:63:63:f4:cc:63:
f6:4a:b4:8e:d0:9c:10:38:47:49:74:14:60:bd:b3:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:FC:E8:0B:50:FE:06:96:E4:A5:75:CE:34:A8:3C:4F:86:8B:D4
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:3f:ad:4c:67:10:95:9d:c9:53:94:ea:b9:0d:88:87:dc:
5e:f4:c2:55:86:61:4a:d4:8e:97:4d:28:62:ed:58:b8:10:ea:
2e:67:eb:e2:dd:31:b5:f7:ea:76:3e:b0:06:42:d9:86:a3:27:
28:bb:ff:d1:24:58:5f:a4:d7:b6:8b:65:50:b0:1f:bc:14:85:
42:f6:cd:dc:6a:26:ae:4d:28:9c:42:71:be:37:83:13:d6:94:
71:e9:03:24:ef:9e:c5:8a:84:8b:9b:98:9f:31:a3:cb:54:d7:
db:9d:e1:5d:dc:33:04:56:36:44:0d:36:56:7c:c7:5b:ab:e7:
9b:9e:44:3b:3d:fe:d6:1a:b8:f3:26:9e:d5:9e:51:22:35:39:
0f:df:7d:83:1a:fb:d0:09:39:df:df:64:25:0a:81:b2:b6:52:
8f:ae:bb:ba:7e:21:ae:5b:87:ef:df:fc:63:0a:a5:bc:35:eb:
63:8b:50:e5:c6:ae:0b:9d:ba:fb:d2:cb:c7:9d:19:65:2a:b8:
ea:f7:e9:86:0f:8a:65:f9:08:c0:6d:92:39:4b:c4:7f:2b:dd:
e5:83:8d:cb:b0:7c:32:a2:17:35:89:34:a9:1b:c5:20:fb:99:
26:0a:81:0c:21:41:49:99:53:f5:d1:e7:ed:17:01:03:6f:06:
d1:c0:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:08:43 2026 by rpki-client