Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: /t6ZwfAusktFjVWFq2anqhLjLGlRzUXK0Kca3HcxBf8=
Subject key identifier: EA:98:81:35:C0:B4:3E:30:F2:05:C0:D1:36:B7:EF:C0:54:CB:86:C0
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 01A0CB591E825067B541E87C903AC2D506DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 114F
Signing time: Tue 22 Sep 2026 23:00:10 +0000
Manifest this update: Tue 22 Sep 2026 23:00:10 +0000
Manifest next update: Wed 23 Sep 2026 23:00:10 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: wLC4CGMq/IL+tancOaqUmDXcDEG3rI6N6m8U3r2fA9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:1e:82:50:67:b5:41:e8:7c:90:3a:c2:d5:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Sep 22 23:00:10 2026 GMT
Not After : Sep 23 23:00:10 2026 GMT
Subject: CN=ea988135c0b43e30f205c0d136b7efc054cb86c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:74:ae:7f:9b:4f:f2:d6:0c:2c:c3:91:7a:
5f:0e:d7:8c:43:30:f1:63:c5:18:69:0a:35:14:2c:
aa:c3:3a:fb:5b:29:29:2e:db:f1:2c:e0:a5:93:80:
0b:db:ab:f4:64:d9:f3:36:8c:69:84:f5:e7:03:e1:
7d:91:e7:70:00:97:93:2a:1c:57:c9:da:94:cc:71:
60:3f:c9:ce:92:a2:d3:52:8d:16:3e:46:b1:aa:6e:
71:07:a9:c3:5e:f1:86:da:15:a1:3f:5e:2f:93:ec:
ad:a2:e5:9a:1f:d1:5b:07:a5:11:d5:a5:ca:15:f1:
31:82:13:5d:08:5d:01:9c:eb:d4:e9:51:7d:66:49:
47:14:6a:e0:1e:7d:40:b1:fb:f6:ec:f4:fb:f9:99:
33:f7:e4:04:a7:77:fc:11:c5:70:fc:0e:ec:56:33:
d6:41:c4:a4:cf:61:f9:da:4d:bf:d5:4b:1e:11:f2:
39:5e:c3:86:60:b8:44:76:40:1a:bf:22:25:91:c7:
34:41:4d:3c:a3:ed:ac:55:ab:16:aa:0b:96:6a:51:
ec:26:5b:04:63:30:9c:72:3a:35:cd:ea:29:9d:06:
ca:a7:9d:cf:1b:d2:10:03:6c:dc:8e:ad:3b:a8:b0:
53:70:bb:ee:04:62:60:02:0a:4a:d2:74:07:1e:5d:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:81:35:C0:B4:3E:30:F2:05:C0:D1:36:B7:EF:C0:54:CB:86:C0
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:6e:19:fa:a2:12:fd:ec:36:97:06:d1:61:cb:87:f5:3e:
58:f4:c8:35:e4:1c:03:a5:ba:18:38:18:2b:2e:6a:9d:ec:0a:
d5:99:e7:24:b3:4e:57:bd:53:21:48:ba:fb:49:54:e7:6a:78:
00:3a:4c:9c:1b:8a:72:6a:60:a5:b1:77:62:e1:2e:62:17:d1:
e0:08:19:12:e5:b2:ab:c3:76:93:b9:98:bb:35:fe:21:51:ac:
92:ae:84:7f:2a:08:53:2a:69:42:a3:50:1d:21:d7:7d:83:9d:
8b:d5:03:0a:20:7a:59:06:84:0b:ae:44:b9:6b:b8:0b:c9:8b:
dd:ee:2f:69:1c:ab:3f:62:11:5a:e5:16:7a:0e:f5:0d:ac:8d:
d4:b2:b6:88:6f:6c:82:61:bb:99:78:8b:69:91:f5:e0:e9:a1:
ca:a5:ab:8e:40:a0:1d:c7:7e:19:eb:c4:0c:7e:25:8f:0f:b7:
0f:42:c2:85:9d:64:6a:9c:ed:88:f9:79:14:a7:e5:3b:31:53:
52:b2:31:54:60:ba:c4:45:53:2d:a3:a4:88:aa:07:ec:3f:b6:
8e:b3:07:d5:e3:c8:d2:45:ca:38:65:e4:bb:a5:28:d9:81:84:
1c:7e:52:e4:02:78:b4:a4:1a:06:41:1b:43:da:82:38:72:58:
13:93:9d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:25:15 2026 by rpki-client