Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: hPBCWxUcCdXv/tTCWvD1gREihzlHseNMeVEzTCCSNUc=
Subject key identifier: 1B:FC:EB:57:62:FB:72:1E:A6:AD:50:02:0B:A6:3B:C6:B6:46:68:63
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019E303BAF9FD302125259BECCC7ED415B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0563
Signing time: Sat 16 May 2026 10:01:18 +0000
Manifest this update: Sat 16 May 2026 10:01:18 +0000
Manifest next update: Sun 17 May 2026 10:01:18 +0000
Files and hashes: 1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
2: UuJYJB8qqQVCGi-vt_wHrI42MfU.roa (hash: jzA4jxCzEMlyx7GLDIuObiY90eTPpxuRqUa3CtlcCok=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: YH5I1AwCW6gBpG9rNVrZVmBHQMiUMqtMbjaq79ZlkBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:af:9f:d3:02:12:52:59:be:cc:c7:ed:41:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: May 16 10:01:18 2026 GMT
Not After : May 17 10:01:18 2026 GMT
Subject: CN=1bfceb5762fb721ea6ad50020ba63bc6b6466863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:e2:6d:7c:08:ee:ce:69:d6:ed:7b:6e:7d:
96:e7:f2:e9:88:1c:e5:c5:32:b6:55:04:05:4b:7a:
4d:08:27:9d:ea:28:25:ed:39:13:d4:be:b8:f4:e0:
b8:6d:3b:66:f8:b5:45:59:fe:18:35:ca:87:b7:53:
c8:2e:89:6c:4a:3a:c3:c5:1f:be:fe:ae:ca:b9:e7:
4b:0c:f4:ce:7d:dd:a5:f0:19:8b:39:63:55:53:ef:
48:15:41:d0:52:46:4f:47:d8:0f:aa:c6:0d:95:6f:
17:6c:d3:95:dc:2d:dd:42:ff:0b:e4:a2:30:37:43:
f2:16:b9:b7:86:96:d9:e7:98:d1:97:b0:88:24:c5:
14:67:92:92:12:a5:23:29:c6:e8:d0:38:4c:3a:3b:
1b:9a:3b:f9:03:0d:e5:b4:52:e1:4d:02:08:85:55:
70:73:18:f9:49:70:43:fe:e9:b4:a1:42:87:66:3c:
53:0a:da:e8:c7:70:aa:34:1e:18:f5:a9:7b:bd:6b:
f7:8f:86:c9:21:2b:19:d8:ac:97:8f:6d:92:25:ef:
32:dd:42:69:0c:d9:a9:66:6b:25:04:9a:fe:2c:e3:
72:0d:5f:cd:32:a4:6c:38:0b:36:1f:42:10:ce:5e:
39:59:cc:be:ff:2e:fa:c3:db:98:42:96:38:00:7a:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:EB:57:62:FB:72:1E:A6:AD:50:02:0B:A6:3B:C6:B6:46:68:63
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:24:04:06:2f:74:66:b6:cc:bf:9b:5a:4a:30:65:85:97:35:
38:ed:5c:37:86:14:56:5c:c2:68:a4:ff:85:66:06:18:93:02:
b2:a5:da:ea:07:96:d9:8a:6d:00:fc:9a:f0:ee:3c:5b:70:e0:
6d:0e:ff:a6:e6:44:fd:8c:68:48:3e:21:b1:13:e3:e3:29:f1:
49:0c:d3:ec:43:e4:97:ff:2c:17:f6:7a:ec:9e:2f:5f:33:3f:
87:b9:67:80:48:f6:b1:cb:3a:c2:0f:8d:0c:5e:8f:56:5b:2d:
f8:be:11:e3:e8:df:bb:c8:12:d8:51:77:31:68:c8:2b:61:b6:
b5:d0:e0:90:35:78:f0:a4:58:21:09:a1:b4:18:b9:f0:e8:ba:
ea:f6:34:1f:7b:0b:97:17:c1:78:33:f0:73:fd:08:ce:0a:f6:
bb:0b:8c:bc:83:af:00:03:50:a1:69:a8:8a:15:45:b2:19:1f:
07:c7:17:3d:2f:48:a8:ee:8d:d8:b2:a9:b4:bb:2d:94:8e:a2:
58:43:ae:41:7d:64:e9:55:40:57:1d:a8:0b:47:82:98:01:2e:
e4:a7:27:df:ec:77:32:b5:f3:8c:98:56:5f:87:cb:5f:fc:91:
4c:51:4f:a7:92:3f:e9:c2:4d:90:1d:72:e6:da:56:c4:fa:51:
d2:e3:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:22:59 2026 by rpki-client