Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
File: aWpeznnL3C_r_HF6MnDeyDCAhdM.mft (raw, json)
Hash identifier: N34pCAPHTkjNSD5zASzxxOyJZmXSkx/T64QDRSSfits=
Subject key identifier: 6D:78:4F:B9:7B:16:F7:8D:0A:AC:21:5D:0E:95:78:8D:5A:D3:C9:42
Authority key identifier: 69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
Certificate issuer: /CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Certificate serial: 01A0F75758DCC3D9DDBD567E3482A03CD692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
Manifest number: 42
Signing time: Thu 01 Oct 2026 12:01:31 +0000
Manifest this update: Thu 01 Oct 2026 12:01:31 +0000
Manifest next update: Fri 02 Oct 2026 12:01:31 +0000
Files and hashes: 1: Sn5dXPePTxw_-scztJAILPyJvn4.roa (hash: 2qiqIThOytILqksly7edBKOLfun0GmMPmkxmZW0F0hM=)
2: aWpeznnL3C_r_HF6MnDeyDCAhdM.crl (hash: 3cTBXT7fyxD4iOmXGj4zqnNvmeQt6+kaFDTrAcjPp+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:57:58:dc:c3:d9:dd:bd:56:7e:34:82:a0:3c:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Validity
Not Before: Oct 1 12:01:31 2026 GMT
Not After : Oct 2 12:01:31 2026 GMT
Subject: CN=6d784fb97b16f78d0aac215d0e95788d5ad3c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:f2:9b:b2:4f:81:59:a0:8c:10:5b:3c:90:
fc:b0:4e:bd:5b:45:48:0f:1d:fd:07:05:87:04:33:
8d:64:dd:95:d0:2e:df:c5:11:8e:02:9c:db:38:58:
52:d5:88:0a:97:ae:59:f1:8a:53:5e:f9:1d:6f:e9:
6c:26:e9:21:0c:46:c0:75:c6:37:86:97:f4:47:1e:
20:e7:b9:4e:b7:ab:dc:ac:8f:56:20:84:a9:3a:af:
f6:13:37:f7:21:6a:4c:fd:42:1c:9b:bf:68:f7:cf:
38:35:f9:b1:c2:22:32:6b:19:5e:44:06:9c:1c:94:
15:02:3d:c4:8f:c9:80:a6:84:ac:02:c3:86:15:e7:
d4:d5:37:32:69:76:8e:c2:6e:7e:8b:09:46:d1:05:
78:33:e2:6b:4a:46:af:5b:d2:4c:ee:63:2c:f2:7a:
62:44:57:23:68:da:39:b7:4b:c6:0b:95:a9:de:56:
4e:03:35:f9:2e:e6:92:53:10:fd:32:aa:24:b6:58:
96:7e:90:ae:6d:42:d0:ec:8c:cc:56:00:3e:93:c2:
5b:22:63:0b:4f:94:36:56:06:ea:5b:ce:ea:b6:89:
37:7c:6a:34:a9:27:fe:ac:b0:bf:35:a3:f0:a5:2d:
bc:d5:62:5a:61:3d:aa:73:52:2a:94:3f:84:3b:08:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:4F:B9:7B:16:F7:8D:0A:AC:21:5D:0E:95:78:8D:5A:D3:C9:42
X509v3 Authority Key Identifier:
keyid:69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:5d:7b:e2:03:bc:5c:fd:11:44:48:17:74:c4:08:d4:3d:
1e:be:7f:f8:c4:de:15:7e:86:6d:1d:49:b8:8e:aa:21:67:ab:
97:fc:c6:a7:cb:27:3f:c2:21:b1:e1:12:9d:e9:ad:d7:b7:91:
f4:23:f2:a5:83:ec:29:6c:19:5b:47:c3:9d:84:ad:73:98:e7:
fd:e0:87:63:cd:df:98:66:4b:67:30:0c:27:ef:fa:18:82:f9:
47:4e:23:0d:c4:c1:24:76:c7:24:2e:75:2d:a8:02:db:f7:de:
09:7d:cc:da:34:05:27:89:58:a2:87:ff:c4:27:0c:00:ea:9f:
62:29:ed:65:c5:f5:11:95:7a:cf:21:3c:50:eb:62:38:69:ac:
1f:2f:02:b0:61:51:f3:03:75:7b:7a:2b:5d:35:51:b6:7f:e6:
9e:6e:78:5a:96:98:d3:87:37:67:e7:0d:35:45:a6:d7:e7:a0:
7c:f7:84:7b:a4:f6:d8:4c:5c:c6:26:62:07:85:ef:81:a3:70:
97:60:b9:93:e0:aa:67:5f:1c:68:59:64:a5:dd:b4:86:75:ef:
3d:9e:c3:e7:1d:9d:3e:32:80:15:65:9f:21:55:48:df:93:1a:
3a:65:6a:83:79:f7:b5:03:e5:d1:b6:9a:5a:0d:bc:a3:f6:dd:
93:9e:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:52:58 2026 by rpki-client