Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: 7V2LmRwCIelaKjU5YvUC6mxxrIzqIp7rSoIU4XjEuaQ=
Subject key identifier: 2B:81:00:EA:C6:93:53:BF:A7:1E:30:DA:BC:23:C7:F9:13:94:53:ED
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019D382EAD7EB552534813F3799DD1FAF2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: EqvKSR9iXegXy1dMoZ2bleJg3E0.roa (hash: vK0XksnitfnobMuyE2LGuN8IoAOExUJuqPdiZ3yM2Co=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: auRRlzYVqyENYXJLYLs8T8JR/ocziRTTet1LCrdgAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ad:7e:b5:52:53:48:13:f3:79:9d:d1:fa:f2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=2b8100eac69353bfa71e30dabc23c7f9139453ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:47:1f:95:85:0b:d6:00:24:76:f1:5b:b4:
ee:a4:ca:a5:19:ac:6c:74:56:eb:32:29:69:0b:50:
a6:8b:24:19:36:c8:ed:2a:0a:48:3b:ec:b8:c4:68:
9a:98:04:e6:a0:a6:a7:cf:a7:66:59:e6:4e:83:b0:
0f:f2:e6:dd:2b:11:da:37:79:3b:d3:50:b4:2c:60:
9f:25:ca:ea:b7:d5:56:d3:82:e0:f5:b9:ae:75:fe:
ec:b1:64:50:cc:af:ff:8e:00:29:48:18:71:6c:62:
a5:e8:36:75:d2:a4:df:3f:50:56:84:4d:d0:cb:54:
38:0b:83:bd:f6:28:c4:18:ae:43:20:4d:b8:02:d3:
f5:be:b1:f3:0e:b9:f4:4e:3a:c4:7d:2b:89:95:6f:
b8:05:22:b2:22:1f:67:10:53:fe:2d:da:10:31:9e:
b9:54:fc:ac:c5:80:09:66:9e:cf:9c:c6:e8:46:9c:
c7:97:cc:d5:5b:4c:53:c0:96:e9:a5:e6:a3:3c:6d:
28:d3:f8:ab:77:94:67:53:1b:9f:d4:6a:f9:b6:b5:
32:f1:2b:2c:ba:7b:c6:6b:e7:2e:5a:b8:46:d6:85:
5a:94:f8:9b:8f:72:cc:bc:fd:c1:c9:32:81:0d:8d:
8b:67:9f:fe:dd:d7:db:52:d1:51:d5:8c:b3:e9:8b:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:00:EA:C6:93:53:BF:A7:1E:30:DA:BC:23:C7:F9:13:94:53:ED
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:08:bc:12:20:ea:5e:15:56:5b:2e:0b:80:7e:1a:9a:74:
38:7b:df:54:05:34:47:ba:9a:f9:97:e2:ee:ee:41:bd:85:46:
38:a6:f0:f2:82:8f:d1:89:9f:64:75:80:a8:0c:a5:85:d5:d9:
e0:e0:eb:35:10:13:79:d6:e9:15:75:36:4b:f9:6f:36:e3:6f:
ae:c0:8d:0a:ed:7c:0a:34:39:ff:85:34:8a:2f:3a:5c:81:0b:
1a:0d:fb:fe:2d:c6:2b:34:e8:7d:ff:a5:76:99:ab:d0:cd:fd:
3e:79:38:fb:44:0d:2c:4e:1a:22:fd:a7:2c:a2:87:57:e0:19:
6d:6b:ee:44:d4:85:a9:54:d0:47:09:80:73:82:b3:2d:b7:13:
93:23:88:41:08:c4:f0:5c:c2:2d:ea:19:16:45:e0:5a:44:42:
64:67:6e:0c:1e:7b:28:cf:dc:8d:d2:8c:fa:0b:e3:bb:0d:07:
91:20:2e:09:c6:e9:04:1f:63:8f:63:c6:4f:b7:e7:a2:66:f6:
81:d6:55:4e:2b:f9:ba:a2:d6:a8:8d:f6:92:f2:cc:8a:ba:24:
ba:33:aa:85:83:f2:73:28:47:ed:cf:9d:d2:c6:65:c1:41:fe:
b5:6a:ac:92:b2:76:5f:2f:11:91:cf:be:f4:84:f3:14:d5:d4:
04:d9:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:05 2026 by rpki-client