
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
File: Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft (raw, json)
Hash identifier: Ypbt8nSpqN2Amnx+c977piKy2Bf71BnEOhrFxvEBiD0=
Subject key identifier: C8:51:FE:04:08:95:E9:63:86:B7:19:9A:04:87:46:E2:5F:2E:06:05
Authority key identifier: 31:AE:80:7A:8F:CE:40:A3:2B:E8:76:ED:77:9D:14:F1:DE:6F:AD:9A
Certificate issuer: /CN=31ae807a8fce40a32be876ed779d14f1de6fad9a
Certificate serial: 019D3A5449F85E9C56288EAD8178B7468B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
Manifest number: 2D
Signing time: Sun 29 Mar 2026 16:01:35 +0000
Manifest this update: Sun 29 Mar 2026 16:01:35 +0000
Manifest next update: Mon 30 Mar 2026 16:01:35 +0000
Files and hashes: 1: IHECthmlpDpJGsSkgns0x3n0yLw.roa (hash: X2aYRmqqSOfsP22FqmMtKLm3/ujZWCql9BMXfBL/SYE=)
2: Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl (hash: rY0I3QocbCIo7Qa8d55gqU4uTDr76GULaT1QgSXs1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:49:f8:5e:9c:56:28:8e:ad:81:78:b7:46:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ae807a8fce40a32be876ed779d14f1de6fad9a
Validity
Not Before: Mar 29 16:01:35 2026 GMT
Not After : Mar 30 16:01:35 2026 GMT
Subject: CN=c851fe040895e96386b7199a048746e25f2e0605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:72:1f:ce:30:49:93:36:0f:2b:77:8a:7b:
9b:3b:bb:8a:06:6c:ca:ef:a0:28:74:1d:0d:0a:51:
79:88:37:5f:e0:c4:78:2f:cb:a6:33:8e:fc:30:d7:
d1:5f:65:91:71:1c:d7:fb:f3:b0:13:45:d7:2e:a3:
c4:75:13:4f:ad:cd:a4:13:fb:ca:56:3b:10:bd:08:
ce:aa:7e:40:94:0f:6e:31:a6:c8:d1:a6:bd:da:a6:
0d:36:1f:15:0a:3e:5a:23:d6:98:f7:8d:6e:35:ec:
d8:c0:e6:7c:43:74:d3:a6:88:e3:46:c8:77:a1:91:
d2:8a:4b:a3:55:60:37:fc:b6:bd:c7:99:13:c6:e7:
60:40:9b:72:f2:1c:ca:3a:b8:1e:02:37:84:3b:9d:
10:43:ad:f1:ae:00:c4:89:2f:98:04:33:0e:e3:3f:
09:51:72:9b:43:76:81:94:f9:c0:df:46:fd:eb:5b:
cf:c7:7a:d6:d1:34:44:9b:65:c3:a6:ca:1a:6b:41:
59:b9:3a:21:c6:b4:ff:25:f3:28:44:0f:75:80:ba:
e9:68:f4:62:21:35:3d:f5:37:16:f4:e7:1f:c3:76:
26:26:89:7e:e8:f7:1e:9b:91:df:46:d5:fa:19:a6:
88:ff:97:20:12:2e:32:68:21:6b:38:5f:45:3e:50:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:FE:04:08:95:E9:63:86:B7:19:9A:04:87:46:E2:5F:2E:06:05
X509v3 Authority Key Identifier:
keyid:31:AE:80:7A:8F:CE:40:A3:2B:E8:76:ED:77:9D:14:F1:DE:6F:AD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14e4bb-2aee-453f-a0f7-a486dca8168b/1/Ma6Aeo_OQKMr6Hbtd50U8d5vrZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:48:12:66:3e:02:2c:54:5b:89:f3:b3:0e:5a:76:d1:1c:
27:d3:bf:04:ee:59:ef:c1:ca:e4:11:78:e3:99:99:8e:6f:42:
ac:6b:58:f1:42:c1:71:27:ce:f3:8f:af:b1:2a:47:fb:75:63:
f8:d4:87:80:c5:cf:07:3a:5c:ec:a4:a4:d6:81:0f:e7:ba:29:
6b:91:3e:96:41:01:60:ff:54:7b:70:a4:de:e7:9b:d6:ae:44:
70:73:03:1a:67:f9:e9:f7:6c:d4:e9:ec:dd:fe:59:23:b4:b1:
e5:79:f7:5e:3e:f8:c5:4f:2a:c5:10:39:5c:13:b1:f4:65:ab:
f6:4c:ec:ed:bd:e8:38:97:22:b2:af:ee:88:c3:c4:8d:87:65:
ce:8b:cd:a4:4e:5f:17:36:c5:95:26:e1:42:f6:40:87:36:8a:
f2:4e:03:d6:9f:0c:1c:c9:6c:8e:b5:58:93:46:b2:2d:87:a3:
bd:00:07:52:33:f8:33:a6:2c:cc:3e:c2:b4:24:41:74:4c:66:
a6:93:6d:45:26:d0:45:24:8e:8f:ab:88:2a:a5:c6:4d:d2:dc:
dd:6b:46:bd:d9:a1:5a:d1:cf:36:81:04:77:67:e8:af:98:71:
39:37:8a:23:8c:0a:ee:31:a5:d2:de:09:37:8f:31:c9:bd:f6:
45:9d:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client