Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: FiSWh32Om30/8YxlKwvX4/KntUmfxtmbv39Z1MHkcOM=
Subject key identifier: 89:06:B2:22:0A:57:86:7B:BF:2D:D7:81:7C:78:50:BD:7A:20:19:76
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019D37C0197B627C687CF989E36E88D2E4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: SB2xfW6jXIfEK0CZN2fPsXOtkTIny5zYHesACNjzmR8=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:19:7b:62:7c:68:7c:f9:89:e3:6e:88:d2:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=8906b2220a57867bbf2dd7817c7850bd7a201976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:48:7d:db:56:8a:49:c5:0e:c5:1c:99:be:
fe:49:09:b0:76:2b:1f:4d:6b:88:a9:62:1d:c3:47:
f0:36:80:9a:64:21:54:5e:55:26:80:12:8f:2e:4b:
a3:25:d7:80:3a:03:b7:e3:1a:6f:af:b0:dd:a3:4b:
51:28:04:d2:cd:f6:63:44:f1:7f:6a:d9:b2:7a:aa:
6c:4c:8c:64:58:46:06:7d:1d:7e:09:6a:44:4c:b5:
f0:52:83:6f:3a:ef:60:6f:30:9f:9e:c5:0f:88:ff:
56:b7:b4:87:e5:21:db:ff:32:5f:03:36:34:cd:07:
8e:c2:b7:68:a7:12:ea:be:72:45:af:3d:5d:bd:a8:
fc:a0:cf:f5:75:89:fd:b1:da:cd:5d:ca:88:47:02:
30:19:b4:09:e5:71:58:4a:76:08:a2:f5:b7:78:ea:
0a:23:b9:2c:3b:f0:48:68:62:87:70:42:52:52:09:
21:fd:40:2e:55:6a:19:9c:79:e9:3b:52:03:21:69:
6b:6b:8c:9d:22:35:46:37:12:02:45:fb:6b:6d:1e:
71:36:1d:b2:46:17:2a:ee:ea:39:31:33:39:e7:31:
87:1d:85:d0:8e:fb:89:fd:e3:7d:9f:7e:6a:56:f5:
28:04:13:2a:7d:4a:3f:2e:d8:1d:cf:ce:9f:23:25:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:B2:22:0A:57:86:7B:BF:2D:D7:81:7C:78:50:BD:7A:20:19:76
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6c:c1:05:7f:fb:8d:97:f0:a8:80:7e:8c:08:66:35:ab:f0:
f4:dd:bd:92:1d:06:6f:90:60:77:09:2b:11:16:ba:b7:1f:69:
84:aa:c5:7a:2d:6f:39:4d:86:9e:65:3d:ad:79:87:0c:67:1f:
54:ae:5a:df:e7:a4:27:7b:3c:23:80:1a:98:e8:a0:15:e2:c8:
be:a5:5d:b5:10:31:87:70:36:43:b0:f5:cf:87:ae:4e:4d:a2:
35:bc:32:02:6c:4a:c5:7b:09:3d:fd:8f:e4:59:c9:d4:88:9a:
ed:d4:bb:8d:25:45:e9:15:1e:74:ce:6f:b4:3e:e8:9d:d8:5e:
41:a7:e2:aa:8b:c7:3e:85:d8:3e:3c:b3:77:7b:eb:17:21:0a:
4a:41:95:64:07:11:62:a9:46:aa:69:76:3c:3b:f9:51:b6:7c:
65:cd:73:0a:cf:b6:c2:8f:cb:af:a0:0f:90:45:54:4d:1b:26:
a8:71:c3:be:91:16:90:f8:1d:0b:cf:b9:89:32:b0:e0:05:f8:
26:90:fb:71:de:61:93:32:a6:43:86:73:68:b4:8e:fc:60:90:
4c:21:40:f9:2e:a6:88:23:c8:95:85:13:0a:bf:41:eb:18:97:
5c:df:9a:01:a0:f4:d0:19:a6:f6:6a:8b:b6:5f:99:62:5d:67:
ed:51:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:15 2026 by rpki-client