Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: 6XzYGugTG7x/NOq3rYTXEGkNwAuLpCLRHyH7uMCVJV0=
Subject key identifier: 35:35:DE:66:FA:65:70:04:7C:B8:2A:62:F4:E6:3D:94:23:FD:3D:0A
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A0CEC839F03F61DF551F2AE7850E6FF72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 195D
Signing time: Wed 23 Sep 2026 15:00:23 +0000
Manifest this update: Wed 23 Sep 2026 15:00:23 +0000
Manifest next update: Thu 24 Sep 2026 15:00:23 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (hash: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=)
3: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
4: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
5: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: fQafOidsKwkb3FkVa9KFIv1s6SpvLUL1qTAWMV9VTro=)
7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
9: ndP5FL5P0NgyaX8bGr9alOA9HO0.roa (hash: Q7zGnzRCWrQDq88He7wb77+6qa5kJX5tVhXixyT+fsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:39:f0:3f:61:df:55:1f:2a:e7:85:0e:6f:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Sep 23 15:00:23 2026 GMT
Not After : Sep 24 15:00:23 2026 GMT
Subject: CN=3535de66fa6570047cb82a62f4e63d9423fd3d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:da:1f:36:de:cc:9e:99:d9:aa:f4:f4:5a:
13:47:c4:e4:5c:90:f7:7d:3d:b6:d7:a3:b7:c5:ce:
93:a6:56:30:33:59:cd:93:b9:de:fb:e1:4f:09:0b:
78:a9:a3:83:82:e1:88:b8:ca:37:54:e5:21:44:51:
12:02:e2:3c:4c:f4:7e:db:7d:45:60:cd:53:b4:ed:
c4:52:0c:9a:a8:59:54:7d:8d:f1:31:8d:08:75:b1:
fb:5c:ec:11:67:5a:ce:f1:0d:5c:38:67:bd:86:9b:
1a:83:e9:f1:8b:4f:c1:cf:32:e5:6c:a5:2d:b9:06:
fc:1b:57:78:66:b1:0f:4b:22:2f:91:c3:61:04:5a:
7d:5a:2c:e1:c2:8a:8d:55:cd:e9:10:d8:0b:86:4f:
11:60:3b:86:e1:72:4c:22:d7:21:c4:d1:26:b2:8f:
df:e9:ba:09:34:10:22:f4:2f:ba:aa:57:86:5c:bf:
5e:2e:72:50:5f:ca:2e:f9:a4:36:74:99:66:d9:6c:
5c:68:9f:6d:43:18:7d:ba:b2:5c:ab:08:4d:4e:79:
22:d2:a6:00:bf:e9:cf:9a:a6:4a:ee:1e:86:29:52:
91:81:a7:27:aa:fc:ea:a0:20:73:26:55:62:ba:5d:
66:51:28:74:36:be:ad:26:f8:61:77:d4:35:a2:bd:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:DE:66:FA:65:70:04:7C:B8:2A:62:F4:E6:3D:94:23:FD:3D:0A
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:0a:fb:e4:29:03:02:87:2b:b4:b8:51:4f:b2:22:c8:92:
56:b6:3f:fd:55:2f:8a:8b:10:62:eb:61:c2:bd:91:24:b3:7c:
c0:a2:ee:c5:f1:12:16:c0:6d:89:14:3a:15:78:c2:cb:d9:5d:
92:09:9a:d3:89:1c:92:f1:84:63:bd:61:70:b2:9a:14:f6:7e:
5f:be:e4:49:19:20:aa:2a:a6:6b:60:29:c6:3b:12:51:21:d6:
af:50:34:c2:82:30:7b:a6:0e:d5:65:17:4d:b9:39:b0:fb:f9:
3b:8c:73:78:86:6b:4d:b5:09:0a:bc:2a:72:a5:70:79:f1:fb:
98:3c:b5:bd:02:94:e6:c1:1c:bd:f0:13:ef:41:25:26:ef:3a:
d1:28:a8:ae:9c:12:b9:d0:ca:29:97:fd:1a:7c:7c:55:7c:5a:
59:b3:7d:4c:05:3b:3d:35:dc:31:21:7e:7c:35:1b:50:09:49:
86:8e:0f:d6:d0:be:f9:6f:97:26:4f:d2:0d:14:2e:f7:f9:40:
84:e1:03:32:23:f4:fa:a0:f7:b9:87:9e:dd:02:a4:70:ca:10:
b1:3b:83:7b:9b:83:5b:76:0d:02:ce:b9:e8:19:e6:03:75:26:
90:6f:3a:90:a8:37:5d:c1:43:86:57:1c:5a:c2:ee:a3:81:45:
28:0f:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:45 2026 by rpki-client