Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: wVZuL0P7MkaQo5x8zroUj0AuLArfwpEqLM1rcI8PrHU=
Subject key identifier: A2:48:66:F4:FD:63:C1:45:AB:BD:02:DC:15:4A:99:AF:0B:E2:63:98
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A1DE02ED053D5B45159A661E2FD5D6CB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 19EB
Signing time: Sun 15 Nov 2026 07:01:35 +0000
Manifest this update: Sun 15 Nov 2026 07:01:35 +0000
Manifest next update: Mon 16 Nov 2026 07:01:35 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa (hash: atMPgRGqsPQYurIN2nF56uTQOvoNuMbY4V1WXvm2t6k=)
3: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (hash: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=)
4: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
5: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
6: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: pfjhyEIAnwvYs40rzkpjw7liBHoM2ST8l004f20sN1Q=)
8: h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa (hash: b0rWEYGwa7xjd8bh0IRkVhSdpTV7x20TYWLjgsw3Vkk=)
9: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:ed:05:3d:5b:45:15:9a:66:1e:2f:d5:d6:cb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Nov 15 07:01:35 2026 GMT
Not After : Nov 16 07:01:35 2026 GMT
Subject: CN=a24866f4fd63c145abbd02dc154a99af0be26398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:61:94:34:43:ba:3c:4f:d7:ca:87:8a:fa:
4d:30:51:be:86:97:a2:6d:82:ee:f4:0a:67:6e:08:
ea:5c:55:3f:04:de:7c:4b:87:19:95:c2:0c:9e:69:
0e:8c:b7:ca:99:a4:51:6f:3e:2c:9c:07:7e:84:54:
9b:ab:b7:f4:78:8e:97:a3:2f:6a:81:8e:1d:5a:8d:
c7:95:52:7f:b8:d1:4f:1d:91:4d:02:8b:7a:6a:b7:
4b:70:1f:c7:b1:ed:fc:03:20:1f:06:0d:17:71:88:
83:17:e2:a8:c1:22:01:3e:b8:47:09:73:b3:b7:b1:
7c:df:2b:96:83:22:51:90:28:16:ed:66:b1:ed:85:
9f:e8:13:0f:c5:6c:d1:2f:12:c3:f7:bd:27:0d:c8:
d1:4a:76:ca:49:60:37:7b:f8:90:57:f1:95:8c:24:
66:ee:4d:4d:dc:f6:c7:b6:0a:36:17:4e:c0:56:7a:
74:1f:07:b1:65:52:25:6e:2e:ae:34:2c:40:14:e7:
a8:52:01:75:54:e3:60:6c:ef:6b:7a:f9:b0:b3:4b:
32:6b:da:74:dc:41:55:e8:bd:86:83:a2:2e:53:4a:
47:bb:68:af:80:89:ff:de:20:a5:24:cc:f1:5c:86:
41:3c:da:23:aa:9e:87:7a:98:e7:c0:9a:cf:59:6f:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:66:F4:FD:63:C1:45:AB:BD:02:DC:15:4A:99:AF:0B:E2:63:98
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:0c:40:37:4a:b4:c7:83:7d:e9:04:f3:86:68:08:f9:eb:
63:98:f3:c6:05:ce:b8:1c:6c:35:99:e2:81:a0:15:c8:3c:33:
0e:40:0d:5c:88:bd:89:41:04:d3:9a:15:67:23:20:e7:ff:3d:
97:8d:5c:4e:78:7e:29:45:29:56:6f:16:2a:49:51:99:ef:43:
e7:2d:90:6b:45:de:53:d2:df:dd:2e:8d:d3:bf:c4:ab:55:42:
31:4e:d5:85:db:d5:3f:30:c9:34:4b:c1:84:fe:41:8d:47:99:
9a:af:ed:0d:57:1f:ec:10:c9:a3:f1:d0:44:59:30:9c:13:61:
6e:49:b6:5b:74:f9:2d:84:fc:28:29:5e:2a:dd:bb:21:6c:83:
65:75:7d:6e:92:f5:49:65:cb:1d:58:39:3e:b6:8b:d5:70:be:
cc:ec:8c:0d:ed:99:21:bb:61:64:c0:f5:bc:5b:33:80:3d:e1:
49:bf:83:b5:ad:32:eb:f2:d7:a2:18:c0:00:1e:67:70:80:ec:
04:64:f8:dc:54:1a:da:53:ed:c9:bc:a8:c1:85:85:45:78:ef:
f5:0c:fa:8b:a6:db:7a:cb:81:18:2d:9e:fd:b6:8d:fd:b3:54:
dd:68:f3:b7:b6:0a:4a:2c:05:72:06:97:3c:04:e8:bc:69:88:
26:5a:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:54:49 2026 by rpki-client