Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: iIi6kfL62xHzxPTAgVMlfutlcFpJX3U/BaXKxDbOMzA=
Subject key identifier: 91:09:63:A9:11:2D:CB:16:C8:10:2E:0D:D8:2B:4D:C9:2E:05:20:45
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019D38D30741308F444F7425DAAF3CCDEA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 08F1
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: 7xsMIiVMy6lo8Sv2_KFkf6UUkd0.roa (hash: l9A1rvzhgMLewerazX4IIZZJCUhzRMMlFNIhGKIl2u8=)
2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: HRnIX7rbPYjrpAjqQMuZeUpxXZYxmPr2bPl5s6Fm8p4=)
3: sYc6H234_lhFJLVnD1s8r-M0x7Q.roa (hash: mwfgYtpAqD/0PLlomhnZdEd3pDLweTePVgRAfbIpDGg=)
4: wFb-sQ4RN7qQpWbL4eb3ysou4H8.roa (hash: cM0/WidCdHghkLHOhKrAG/w/jjB80DOAe9FkWCIQQq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:07:41:30:8f:44:4f:74:25:da:af:3c:cd:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=910963a9112dcb16c8102e0dd82b4dc92e052045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:96:8f:6e:b3:e4:f0:8a:b0:86:ae:53:73:
98:d3:5c:b8:84:3b:93:f5:92:22:84:23:bd:10:c1:
1e:2a:61:5c:29:9f:b2:a9:53:3b:b5:bd:80:66:69:
ec:0b:08:0b:c9:d8:fc:5e:7b:20:d5:c7:ff:95:d8:
46:cd:32:5b:ae:ba:a8:37:8d:b9:b9:12:af:d6:fc:
03:81:fb:89:09:38:37:a7:87:cf:2e:17:e1:d1:c9:
57:28:c1:3f:67:51:ab:98:7b:e2:e1:69:5d:14:8c:
4e:a0:31:22:89:55:b5:c6:46:b4:cd:42:8f:3a:1e:
eb:9a:3d:1c:b6:20:d7:a4:ab:10:45:23:af:ac:fc:
b6:d2:23:fb:c7:5d:5b:7b:e3:97:61:6c:ba:f5:b5:
97:d9:85:2b:55:50:88:38:22:7e:96:74:9a:ab:e5:
5c:2e:f2:61:33:22:6c:59:fc:01:ac:80:b2:9b:50:
ae:c6:61:a7:6e:fe:4a:9a:a2:a6:f1:12:c8:98:e7:
a6:7e:da:b9:44:b7:e2:59:c9:8a:99:b8:ff:50:ce:
6b:09:dc:27:57:5a:b9:78:79:e2:47:98:ca:86:ef:
33:ac:30:1d:2c:2d:a1:94:8d:5c:35:80:6a:8d:77:
4b:e7:f2:cf:32:05:e1:8f:49:c8:ea:ea:0f:83:32:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:63:A9:11:2D:CB:16:C8:10:2E:0D:D8:2B:4D:C9:2E:05:20:45
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:7a:9a:00:87:5e:19:2a:38:a3:91:69:2c:58:28:76:90:
cd:b8:8e:b8:94:1e:d8:9d:aa:a7:a9:02:13:53:70:d8:a2:f7:
86:0c:19:35:cf:a2:14:c2:f7:22:3b:a5:c1:d3:12:6b:82:a1:
e1:01:91:86:20:ad:b5:cd:7f:a1:f0:8a:d7:93:f1:ab:3b:33:
e2:23:e1:cd:69:96:10:59:4d:0a:c4:fb:9a:45:a2:7a:13:b2:
fe:a3:29:03:5a:1f:37:04:24:1c:89:56:bf:1d:22:b7:69:6d:
2f:f6:14:34:96:46:96:4a:84:8a:dc:8a:a2:ae:d7:11:e0:60:
79:c6:7b:05:a8:95:6a:1a:84:10:e7:bb:91:fc:1d:35:18:29:
85:df:6b:82:81:70:91:68:20:4c:53:2e:c5:d8:89:27:9e:12:
f9:e1:8e:18:aa:2d:a7:ae:4d:46:c9:44:fd:d2:a3:9e:08:0a:
76:3e:49:77:54:96:4a:4f:29:e1:c7:51:ac:9a:d4:3a:12:3e:
72:a1:df:55:d0:1b:4d:3b:83:5c:42:66:c7:c9:c8:e9:0e:5c:
fe:49:16:d9:9e:ed:b1:68:b7:41:e3:74:6e:ba:a0:30:f5:48:
4f:e6:9a:0c:39:30:b2:12:09:4e:2d:71:b1:5c:f7:47:f4:bd:
54:3c:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:05 2026 by rpki-client