Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: MjssxpGnJyFe7En9/ppQda9GkdvZMm+mMx/7z1wUAVU=
Subject key identifier: F2:32:FE:6A:A9:79:B3:4C:74:0C:9C:A1:A6:C5:45:E5:27:7C:E6:88
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019D39AF7208689B42A479820D5B596C39D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 131A
Signing time: Sun 29 Mar 2026 13:01:32 +0000
Manifest this update: Sun 29 Mar 2026 13:01:32 +0000
Manifest next update: Mon 30 Mar 2026 13:01:32 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: yBBaUUdlxUxhaLF/+/iLNfDiF2sm/JJn4zLrv2tHpeM=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:72:08:68:9b:42:a4:79:82:0d:5b:59:6c:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Mar 29 13:01:32 2026 GMT
Not After : Mar 30 13:01:32 2026 GMT
Subject: CN=f232fe6aa979b34c740c9ca1a6c545e5277ce688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:5e:f3:e8:68:8f:18:4a:f6:e2:ee:01:82:
e1:b2:4e:51:3f:af:da:ea:48:7b:17:1b:bb:64:44:
3b:7c:dc:7b:58:f2:d5:8b:a7:4a:a8:13:08:e0:0b:
20:c2:a9:48:e0:1c:e2:03:12:99:42:9b:b7:cf:d0:
9b:87:0a:7d:76:1b:d6:de:a4:8c:0c:bb:f1:f1:80:
23:3f:36:07:ab:e3:9f:dd:17:f0:b0:6b:8a:af:ff:
85:fe:49:17:a8:51:51:b6:4f:e8:1c:78:87:10:0d:
3a:7a:bf:da:01:af:71:09:f6:de:04:15:68:5f:23:
f9:34:80:24:46:16:a1:e7:9b:01:ac:9a:89:de:0d:
45:c0:c4:6f:d1:48:5c:45:31:b5:04:39:94:ab:be:
43:bf:a5:65:3d:e0:9f:d3:5f:1c:72:bc:a6:01:99:
17:08:49:51:5c:dd:c3:b7:b3:19:3e:49:5c:3a:dc:
6d:99:8c:be:e0:45:fd:ab:3c:23:54:30:e8:bb:c6:
5c:43:d5:13:2c:5f:c7:a3:95:79:1f:5d:23:f3:1e:
c0:a0:ba:0a:df:02:5c:19:03:ec:e8:00:88:85:9e:
07:b9:a7:c4:07:09:46:2b:ef:5a:1f:b3:6e:21:de:
e6:4f:f2:d5:52:08:10:82:a3:5a:ba:b5:af:a2:b8:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:32:FE:6A:A9:79:B3:4C:74:0C:9C:A1:A6:C5:45:E5:27:7C:E6:88
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:e9:53:4b:93:4a:90:37:bd:08:ab:7d:72:10:ab:99:1b:
7f:d8:54:65:c0:c2:fa:ee:73:b0:e1:26:3e:e8:9a:20:ec:9b:
b4:44:b4:17:92:f5:bc:6d:cf:08:28:6e:05:9d:89:4f:d0:43:
5a:d0:45:fa:4b:53:3a:c4:e4:9b:73:ac:24:61:6f:9c:39:72:
11:a9:e2:29:58:66:0a:2c:9f:f4:b1:e8:56:d5:72:65:96:e4:
14:07:a0:51:47:9c:61:8a:ca:30:79:bb:a4:3c:95:db:fa:9d:
e0:37:38:cf:0b:10:15:56:19:e8:42:1a:d6:06:96:07:2c:25:
00:29:fb:19:2e:3c:a0:99:97:33:c1:f7:1a:cd:24:14:bb:6c:
f1:d4:48:b5:2f:33:cf:3b:b9:44:cc:6d:a3:c6:c6:6d:77:fb:
a6:93:a4:39:43:f8:94:63:1a:67:a7:1d:65:85:8b:1a:df:b4:
33:a1:15:dc:08:ca:06:65:23:fc:9f:cf:9c:2c:18:63:ad:cf:
5e:0c:48:8e:96:6d:6f:5a:ce:1a:60:05:c9:c2:6c:44:4c:1b:
60:34:6b:58:6f:26:11:fe:c5:56:d2:8f:4e:db:37:e3:9b:9b:
8e:6b:d4:03:a1:6e:38:4f:3e:3f:4a:30:65:4d:8f:57:a5:e7:
fa:80:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:15 2026 by rpki-client