Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: 9hymFCxf5Hggywr8MoB5VZBEHnFI0w3mnyV+Gf0lj+Y=
Subject key identifier: 8D:D9:F6:69:24:97:E2:4F:53:CA:09:97:B0:6C:58:4E:5C:3A:44:3E
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 01A0D614E7465E15C406E6B259938F0E8877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: 0314
Signing time: Fri 25 Sep 2026 01:01:29 +0000
Manifest this update: Fri 25 Sep 2026 01:01:29 +0000
Manifest next update: Sat 26 Sep 2026 01:01:29 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: 0dF1AqLT1SdjjrJyBqyU1VOJNPxYvvyGDSzXmgTqmDo=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:e7:46:5e:15:c4:06:e6:b2:59:93:8f:0e:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: Sep 25 01:01:29 2026 GMT
Not After : Sep 26 01:01:29 2026 GMT
Subject: CN=8dd9f6692497e24f53ca0997b06c584e5c3a443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:54:fc:d5:1b:45:a7:c0:a3:57:2f:b0:e8:
1c:34:af:48:32:65:0f:20:91:0a:c8:6a:b2:ae:14:
03:40:f2:50:d7:1f:4f:d9:f7:33:4e:2a:5a:e9:06:
15:c3:fd:4d:18:d2:34:9b:d2:80:3a:ec:8d:21:cb:
37:80:47:40:3e:d0:85:ad:79:82:38:f9:07:6a:aa:
14:59:ad:87:2a:e6:2c:4f:39:e8:1a:00:d4:09:91:
ce:8e:6f:b4:60:5c:41:9c:d0:f4:05:ab:80:ff:ef:
2c:f8:00:c7:68:bb:ce:32:16:b7:1e:20:f1:5e:b8:
1a:d4:3d:85:88:0a:df:ac:d2:7d:f1:9f:16:89:d2:
e0:14:21:ca:44:ba:de:26:8c:c6:27:cd:2f:30:31:
0c:23:21:0c:d7:fc:8b:48:32:44:f9:4c:a3:a4:d5:
27:01:2e:63:1e:8b:7b:be:18:ee:0c:bd:8e:33:47:
63:3e:d5:1d:fb:bf:a7:1e:63:ec:57:bb:43:00:60:
3e:91:3a:a2:05:d7:50:9b:7e:96:1c:89:48:b8:3c:
75:2e:fa:00:60:14:4e:b4:d0:a5:47:b5:79:ee:e6:
c3:4b:17:76:f2:db:19:a5:e6:b5:bb:06:bd:88:bd:
7f:a5:d4:d4:bf:1a:47:ff:a8:8e:14:d2:f1:eb:af:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D9:F6:69:24:97:E2:4F:53:CA:09:97:B0:6C:58:4E:5C:3A:44:3E
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:b6:63:e0:78:5b:f9:8a:45:3e:be:ad:fb:f5:07:0b:a2:
69:62:5d:a8:49:48:39:1d:02:f8:c9:68:28:75:5e:f5:88:0a:
87:e8:d9:9d:7d:05:32:7f:99:92:2f:d9:12:89:47:aa:ac:05:
39:e5:31:74:8a:7f:c1:09:54:11:5b:42:a2:03:5d:b4:77:80:
79:55:29:77:12:58:fe:38:2d:ec:cd:78:ac:50:15:ac:d3:eb:
50:b2:c5:52:e0:12:97:3f:bf:ab:a6:86:58:af:dd:d3:26:62:
91:a9:04:36:ee:a5:c8:dc:4a:ef:5c:88:55:e4:17:42:2a:23:
84:c2:69:7a:f0:56:d8:f5:c2:a3:64:d2:27:6c:14:e3:e8:2c:
7e:0c:eb:37:05:94:c2:65:ef:21:5c:f9:60:b6:1d:e5:d7:9f:
3c:d1:63:af:52:45:85:2a:62:fb:06:39:07:89:5b:61:af:9d:
ca:86:6b:28:2d:dc:0c:7b:6c:ed:5d:00:bd:df:47:80:20:c6:
27:cd:1b:d8:dd:41:86:4e:99:b1:6c:ff:40:3f:db:dc:43:49:
86:77:79:03:29:af:da:4d:a5:f5:58:63:fb:04:c7:38:18:ec:
08:73:0a:d6:f4:88:4b:d1:9b:01:4a:a7:26:f1:65:0f:6c:84:
b3:27:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:27:33 2026 by rpki-client