Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: BqobdsVFgB4EiWlM2TZJMA4VUmezYHipFP63NtDu8PY=
Subject key identifier: D5:49:96:C8:4A:9C:82:FA:7D:66:EE:7A:8B:98:FE:A9:1E:86:82:F4
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 01A0E173FC5D1C09C1B96905012AB2824563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 06:01:09 +0000
Manifest this update: Sun 27 Sep 2026 06:01:09 +0000
Manifest next update: Mon 28 Sep 2026 06:01:09 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 17WnkwEc68pMAmkSscZhVZ1KAeejd0FW+P7HbFJoWvg=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:fc:5d:1c:09:c1:b9:69:05:01:2a:b2:82:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Sep 27 06:01:09 2026 GMT
Not After : Sep 28 06:01:09 2026 GMT
Subject: CN=d54996c84a9c82fa7d66ee7a8b98fea91e8682f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:4c:51:35:fd:48:04:a0:f0:39:e6:07:3c:
64:cd:57:00:0e:03:35:b1:11:e4:e4:f1:49:4e:28:
37:40:c7:5d:96:cd:ed:c5:ac:bb:17:47:23:66:82:
be:86:51:cc:9b:9f:7b:43:f9:ff:98:cf:b5:e5:d9:
33:c9:2f:be:53:85:f5:30:96:c8:97:fc:58:83:e7:
f9:04:13:a5:af:cd:3b:4c:f8:ec:1d:f7:8d:96:42:
1e:24:cd:39:a1:68:07:54:82:30:41:2b:57:0c:a6:
b5:b8:0a:e5:b3:59:b7:47:66:ba:ba:6d:ec:ba:05:
25:a9:fa:82:5c:43:95:30:6c:91:e3:ef:e3:94:3f:
c8:15:a6:ed:b8:54:6e:51:f5:04:73:a1:8a:36:26:
a5:00:fd:18:8c:aa:a3:5e:fb:ee:85:e4:e4:b9:dc:
c5:b1:a0:09:8a:a3:dd:83:49:40:2b:e2:bb:f6:15:
c2:4c:e1:b8:f9:30:55:12:71:98:3c:1a:29:d9:2b:
64:85:e4:37:f3:2e:88:3c:13:9b:46:a4:eb:d8:47:
0e:58:e5:f0:95:d9:ee:8a:08:38:88:da:f4:2a:e1:
f9:4a:a4:c0:2a:3d:91:cf:01:13:a9:76:18:ac:18:
bc:0b:c1:e3:66:5e:a4:53:fa:7a:fb:28:76:31:1d:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:96:C8:4A:9C:82:FA:7D:66:EE:7A:8B:98:FE:A9:1E:86:82:F4
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:63:ab:23:bb:62:79:50:b3:a4:c6:20:63:3a:bd:4b:d5:
54:93:6f:1d:eb:64:bb:f8:c7:8c:4d:ed:91:fc:1f:8e:64:83:
98:66:46:a1:6e:4c:e8:d5:0a:c0:e8:4d:f0:09:36:b9:49:81:
19:b4:46:2e:10:f8:40:2c:78:4d:c3:f4:13:ad:e7:e1:57:42:
81:da:ea:37:1e:54:3e:81:aa:12:f5:c0:e8:c6:6d:fb:5c:7b:
cb:99:f0:17:a6:ec:c2:29:fb:0f:0c:51:95:3f:b6:dd:d7:d8:
f1:03:dc:3c:26:9d:16:2e:ec:5a:81:ee:93:b7:b4:3e:c6:54:
de:cb:ea:67:2c:6f:09:d9:30:2b:28:30:75:4f:81:4f:a1:97:
6c:65:9a:5f:14:04:60:05:95:3a:4a:3f:0a:1f:cc:07:6b:7b:
26:26:63:f2:51:ba:4c:c0:8e:38:05:47:5f:7e:b0:45:57:14:
99:b6:d6:92:d2:74:ea:b8:53:dc:d9:9a:7f:de:00:8b:25:a9:
8f:9b:3c:75:a3:1d:2e:12:ed:89:7b:98:ee:3e:39:59:a7:e2:
41:e7:b4:ad:d8:27:5a:51:a8:71:39:76:08:f2:5d:d2:33:b3:
b1:ea:7a:3b:79:fe:c2:3b:c9:9f:54:64:56:d2:50:c8:5a:02:
e4:fa:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:35:25 2026 by rpki-client