Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: wPDR5DNOsAeeYSGq35xlu9KWZyZV73ms++cV7WQcbHs=
Subject key identifier: A5:80:65:70:98:46:8A:34:62:91:94:D1:F9:24:2C:4F:A4:53:FB:A5
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 019D3A53D913559F2A86DA5221F4168A4267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 16:01:06 +0000
Manifest this update: Sun 29 Mar 2026 16:01:06 +0000
Manifest next update: Mon 30 Mar 2026 16:01:06 +0000
Files and hashes: 1: Uocr9SIrv8jbsgJXhQAIDOX3hGs.roa (hash: 4iPmjoYeqHL7835MhflNIw3FaZg4Ojg4Y6QdIx6OiEc=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: WdEN6wU0AjqrE1jYPdKMElhLSQR65uHomUYx0Q54ANE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:d9:13:55:9f:2a:86:da:52:21:f4:16:8a:42:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Mar 29 16:01:06 2026 GMT
Not After : Mar 30 16:01:06 2026 GMT
Subject: CN=a580657098468a34629194d1f9242c4fa453fba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:df:70:4e:9b:40:3c:f3:38:a3:97:1a:e9:
a7:54:aa:0f:d5:ec:fb:c2:24:e6:1a:4e:e0:f1:21:
22:bb:35:1e:bd:fc:f9:13:72:9e:65:16:5f:85:8f:
57:52:db:f6:33:76:b3:11:b2:18:a9:ca:b7:49:41:
86:1d:60:9d:15:dc:3c:62:82:dd:4b:a4:ce:b6:4d:
be:18:2c:3a:22:f6:8a:18:00:a6:73:27:5e:c1:cd:
58:90:de:96:ec:a3:87:f0:f9:9e:8e:e5:23:dd:96:
b2:c4:63:8b:91:06:5c:4d:0f:a0:3a:3a:40:dd:eb:
08:09:d5:44:4c:bb:5c:33:3c:09:b2:2d:50:d4:73:
cc:3a:2b:4d:7f:6c:af:64:06:58:a2:df:82:ca:95:
3c:9c:ba:fb:e2:82:b2:a8:dd:85:3b:69:92:e8:37:
d7:c1:58:82:b5:5a:c7:e7:65:7b:1a:bf:05:38:3a:
c8:7f:34:b3:44:8b:41:4d:1c:3d:98:8a:04:20:73:
2f:d5:8a:72:c6:22:15:47:9f:c4:33:97:01:44:c5:
33:3a:7e:53:df:2d:4d:00:43:1e:1f:67:54:ab:1c:
9a:82:42:65:25:b8:a6:a9:84:62:1f:59:44:74:7d:
25:0a:8b:48:19:14:0b:e8:d0:1d:d6:8b:df:8e:b6:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:65:70:98:46:8A:34:62:91:94:D1:F9:24:2C:4F:A4:53:FB:A5
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:e4:a5:f1:a5:2f:3d:8f:69:5d:02:dc:92:59:df:13:97:
91:6c:e1:5d:33:50:a8:7b:ba:61:82:88:1e:32:53:ec:37:98:
27:5a:93:15:d5:04:ae:1e:41:5d:bd:e2:2b:9e:fd:8d:11:77:
db:46:cb:68:8d:4a:85:87:70:d5:d3:de:0c:63:ef:7f:33:06:
21:52:09:44:1e:43:0a:fc:aa:35:62:aa:dd:98:c3:c9:9b:3f:
e7:f8:85:1b:17:63:dd:29:60:16:fb:10:3e:ac:39:ad:fd:b9:
59:88:a1:78:4a:87:30:fd:f6:8d:96:e7:73:b7:62:d4:28:ad:
00:8b:b1:f5:52:8f:72:10:db:88:f0:dd:54:20:7f:ab:fa:53:
cb:01:24:1f:b8:3c:95:ca:e9:6d:e5:77:4e:03:02:8f:02:d2:
a2:ae:24:04:57:1b:27:be:6b:50:3a:48:1e:ad:1f:2c:21:36:
f8:82:bf:22:bf:10:2d:bf:6d:31:96:a7:ab:bb:e0:47:bf:c5:
7f:98:dd:86:de:c1:51:56:3c:ea:45:45:d9:4d:c3:45:74:33:
b5:15:a1:4d:33:19:2b:dd:59:d8:d2:fb:d7:c3:5d:c8:ac:74:
4c:29:02:b9:19:b4:31:02:82:9d:2f:04:b9:13:89:43:04:e1:
fd:a2:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:13 2026 by rpki-client