Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: e3HosChV4Zl1Qu61DgzO4DwUAgyrKtQE2SE4FhXMz2Q=
Subject key identifier: 7F:3B:40:36:87:36:6B:84:9A:77:0D:9B:CE:5C:3C:56:63:13:BE:80
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019DCCAADD23E080CDEE93C62F41415DC517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 15D4
Signing time: Mon 27 Apr 2026 02:00:42 +0000
Manifest this update: Mon 27 Apr 2026 02:00:42 +0000
Manifest next update: Tue 28 Apr 2026 02:00:42 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: 5LCZTu7Gp7dO15smXwMl0oC/nBHIj++5/kwWUJjsACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:dd:23:e0:80:cd:ee:93:c6:2f:41:41:5d:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Apr 27 02:00:42 2026 GMT
Not After : Apr 28 02:00:42 2026 GMT
Subject: CN=7f3b403687366b849a770d9bce5c3c566313be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:bc:b0:2f:eb:97:98:18:aa:6a:7d:d1:1d:
21:58:10:51:6d:5c:00:77:0d:d8:c5:9c:c7:e6:d8:
b7:a9:5b:d2:96:7c:a9:65:fd:74:ab:35:67:b1:ad:
db:ba:16:02:04:a6:95:2d:5f:13:27:98:9c:95:37:
70:6b:72:38:45:84:ac:3e:89:c4:fc:b9:af:65:ac:
65:52:f1:63:05:26:24:b4:15:97:d5:39:2e:8b:67:
ac:6b:c0:cf:2b:9b:49:77:82:07:1b:af:82:74:a7:
05:21:6c:5f:a2:51:6d:8e:a9:04:28:42:3a:db:02:
42:83:5e:6d:71:47:00:b1:06:7f:8e:c2:64:5c:ca:
f3:6f:1f:85:01:03:dd:32:29:f2:0f:5d:62:6d:b4:
ba:6f:13:c1:40:89:97:9f:c5:c5:da:c1:45:aa:81:
80:4f:46:08:76:f7:04:8a:09:56:98:d0:23:de:74:
f5:c9:0f:50:fb:14:5b:3f:bf:46:e6:ff:67:6f:f8:
db:ff:31:fe:a4:93:e6:65:b0:55:27:21:2f:39:43:
0d:c2:9f:28:60:d7:af:bd:a5:06:8f:56:dc:2f:27:
49:9b:06:b1:c4:3c:da:48:2e:3d:5d:69:95:78:77:
6d:de:a2:6c:12:13:ea:e5:a1:a3:8d:c4:09:3a:ab:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:40:36:87:36:6B:84:9A:77:0D:9B:CE:5C:3C:56:63:13:BE:80
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:d5:51:fd:15:b1:f8:25:a0:7d:99:49:ae:eb:69:6c:36:
87:2d:16:15:35:29:dd:28:de:46:cf:a0:11:55:cc:4a:f9:37:
65:33:79:35:2d:4a:8f:65:10:13:bd:2b:32:66:01:7f:4d:86:
80:02:60:2a:38:00:5a:14:9e:0f:27:cf:57:6a:ca:2e:2a:0d:
ba:7d:27:ab:eb:1d:9a:1a:4f:36:22:03:c8:01:4f:69:48:13:
af:90:3b:61:30:c1:b9:59:c9:f5:15:49:89:48:a8:be:59:9c:
b4:91:95:d0:95:92:34:3d:2e:da:de:cd:d2:55:79:0d:13:04:
28:d6:20:e1:9f:8b:88:ae:1f:95:ca:8a:bc:5e:d4:b4:07:a8:
7c:df:b9:74:d1:f5:e7:77:7d:f3:23:4f:91:70:7d:28:88:42:
21:bb:a3:64:d5:f1:28:f7:d7:fe:06:1e:59:4e:d2:39:55:78:
ff:e9:3d:48:1e:71:f2:c0:e8:50:ad:c4:13:3e:ad:7e:ca:54:
83:e6:62:f9:8a:2f:99:f0:c4:cc:68:de:61:d0:34:eb:bb:76:
c3:a6:55:61:92:a7:0d:b2:3e:7e:5b:f0:cb:e5:7d:ee:54:62:
3e:26:5f:a3:f1:b4:4b:05:b2:61:c0:b3:79:84:09:e2:9e:69:
c9:15:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:30 2026 by rpki-client