Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: Wly4G7i56dnwX7N2DQsI7zH+OqZw7BlNYbrR89Tm2/E=
Subject key identifier: 8C:DA:F2:BE:3D:6B:33:D0:29:CF:9D:FA:A4:2C:97:93:B0:ED:DE:6A
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019D382E63B51780051409793A319DE077ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 0277
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: OsZSbBLiankEJIfWHDkt6lrJr+UERZ6dIsHzYKTvaFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:63:b5:17:80:05:14:09:79:3a:31:9d:e0:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=8cdaf2be3d6b33d029cf9dfaa42c9793b0edde6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:70:30:7e:38:03:92:b4:f7:39:6e:02:2c:
82:6f:4d:1b:c8:75:28:c8:5c:63:4c:40:ba:2a:bc:
46:c9:5a:49:ae:71:61:80:a9:97:ab:38:9a:3c:12:
ae:3e:17:67:63:6e:70:82:56:f3:aa:b7:bf:46:1f:
4e:d9:da:89:c0:bc:2c:ef:f3:69:5c:83:ae:7d:bb:
2f:4d:e4:06:21:e2:57:a2:a1:c9:3d:a0:3e:06:a6:
48:78:4d:fe:87:54:43:94:18:82:e4:ce:74:d2:9c:
39:97:d0:d0:20:71:38:ef:ec:1a:83:43:9a:4d:74:
b9:bf:c7:74:4e:bd:80:89:48:05:9c:19:07:4c:31:
03:35:b9:bd:08:82:bd:6e:70:36:36:fe:4b:a8:30:
4e:ed:8c:40:ab:c6:96:16:fe:4b:14:78:ca:a4:ab:
0a:fa:72:f7:66:c4:e3:28:03:92:81:ed:8d:27:34:
c7:dc:c5:d5:ba:4b:e3:e8:26:06:51:2f:a2:a7:38:
ec:5a:c6:f5:73:48:2a:f8:0a:f2:8e:15:04:62:c9:
a1:43:a4:cc:d4:f5:05:ec:c6:e5:db:96:ba:dd:20:
7d:8c:03:5e:c3:ea:e6:37:0a:b5:63:8d:f9:76:ed:
95:2b:da:d2:6a:ad:85:07:1d:c3:9e:8a:65:3d:28:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:F2:BE:3D:6B:33:D0:29:CF:9D:FA:A4:2C:97:93:B0:ED:DE:6A
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4c:b7:00:5c:08:7c:b6:f4:70:f1:01:5c:27:86:29:93:f7:
71:ba:83:50:7b:0b:9d:61:56:c1:0a:65:99:81:51:c4:bb:84:
c8:cf:c2:54:13:4e:cb:c0:b0:6f:2b:71:f5:0d:bb:7d:39:ce:
36:d5:73:64:cf:ad:6f:a7:b3:cb:6c:00:2e:54:0e:49:d8:96:
3e:05:f1:cb:92:0e:4a:72:96:58:d9:29:db:3a:b7:8d:ae:51:
bd:37:cc:c8:a3:99:03:08:e1:0c:95:5e:ac:d3:a0:8e:2c:00:
5e:02:1c:6a:c1:b2:40:c7:bb:f1:f8:4d:4f:09:24:59:38:a1:
3d:67:ce:c0:d1:ac:32:cb:3a:2e:a1:ae:f0:ef:6a:2a:52:c4:
2c:69:0d:3c:42:29:be:fd:eb:92:a6:c3:59:ad:57:c8:34:fb:
15:9f:95:5c:0c:7c:13:9e:9a:93:13:71:49:b1:09:4f:e8:ce:
0d:26:68:f4:05:4e:ff:43:7e:74:2d:9c:58:93:29:e1:bc:90:
e5:d5:50:24:00:9a:51:06:07:a3:e1:a6:99:bc:27:b8:2c:dd:
a8:d8:2b:63:40:3f:65:37:2a:d1:ac:48:6f:83:41:45:30:dc:
eb:55:3c:e2:fd:a0:32:b9:01:21:b8:50:41:a9:ef:c7:d0:ae:
8f:bc:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:43 2026 by rpki-client