Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: e4szJL/DArcS1k9Yo8F/T0okL5RDtVTd9wlOW/Rf+9k=
Subject key identifier: C2:A3:E1:23:7D:E2:23:DE:24:FB:15:4B:2D:1E:6F:59:8D:D2:1E:CA
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 019D389C3343C70BF5071334E210BB21B325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: CmWfma+vWN8Mb79tA8zAPflFKp10KdzzIhQiNBbWNKE=)
2: h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa (hash: qSSIAnAv4EJAYyJT2DsdReTrWjgda1IMNFZ6WGYfBOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:33:43:c7:0b:f5:07:13:34:e2:10:bb:21:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=c2a3e1237de223de24fb154b2d1e6f598dd21eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:0f:53:4b:9c:f6:9d:c9:fd:bc:4a:c3:6c:
38:30:83:9f:7f:c1:01:05:4c:f0:0d:34:f2:be:79:
74:12:9d:a0:0e:25:50:cb:73:51:7a:2a:ce:2a:39:
62:48:c9:ba:21:3c:9f:50:12:65:74:1d:39:c7:64:
e9:f2:9a:5d:39:de:11:63:6a:92:6d:53:e5:45:7a:
42:6f:03:3d:3b:7e:ee:bc:9a:5d:b3:0b:96:ad:c8:
09:b1:cb:b1:c6:95:96:26:1b:d3:06:91:81:4e:5d:
b5:33:82:21:8e:c6:e9:01:81:f5:9f:e1:79:a8:ba:
0e:62:50:2d:4e:f8:5f:32:e0:85:81:20:72:04:8e:
f1:80:b7:9d:59:73:1e:b7:18:4b:2b:07:53:76:19:
01:73:71:4b:c9:63:a9:aa:a0:e6:65:39:95:52:49:
73:e6:f4:68:d4:39:0b:60:fa:a1:ff:45:eb:5f:6e:
89:3b:68:89:95:8e:4b:36:a8:f9:03:0b:92:a9:fc:
59:52:ad:88:06:20:da:a6:f6:fd:4e:80:39:8c:f4:
c2:01:d3:8c:ba:7c:b0:9c:11:bd:5c:d4:a5:14:7c:
bf:26:27:b9:a9:48:fc:bd:ba:2a:bc:e9:5a:e1:41:
84:60:ee:6d:69:ee:27:48:72:f1:c2:9b:7c:60:6b:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:E1:23:7D:E2:23:DE:24:FB:15:4B:2D:1E:6F:59:8D:D2:1E:CA
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3b:65:c2:72:66:fe:f5:45:64:1b:0a:5f:ac:41:29:cd:cf:
06:62:48:5e:f5:5e:4f:3d:24:ff:f0:6d:de:98:5c:bc:c8:23:
72:d1:da:26:6a:b4:de:e4:13:58:dc:bd:35:f4:32:f2:7d:59:
fd:38:52:25:62:c4:9c:cb:51:09:6c:0c:3b:8b:08:b9:c3:56:
12:4c:4a:ed:ca:7c:d5:de:15:64:54:fc:47:45:8f:b5:ab:74:
96:46:c5:f9:4a:b8:64:18:3f:da:10:6e:ba:04:c7:7c:bb:03:
80:47:5c:0d:d5:72:39:3d:95:1d:6b:19:10:19:fd:6d:84:c8:
6d:b8:e1:5a:2a:1e:61:20:84:d7:a0:42:f2:44:d0:2c:8b:e2:
88:56:bd:28:d3:d5:42:75:95:c3:67:dd:c8:1c:3a:15:6d:4d:
0e:69:b5:c1:40:1d:2b:29:5e:ce:90:c9:63:99:8c:40:5b:36:
2b:be:6f:4c:89:e8:a0:bc:bf:70:ef:92:f2:8a:17:ab:d0:ef:
a0:d3:9a:04:f0:4c:d9:11:2b:4c:5b:d8:2e:5a:0b:96:cc:49:
ed:14:b6:85:c8:08:6a:30:cb:57:6f:91:ab:9c:da:2a:38:4e:
3c:7f:25:4d:ed:00:9e:eb:a7:5a:47:ed:b8:89:29:7d:f3:1d:
be:7f:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:11 2026 by rpki-client