Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier: RzfsHpuLc3ixrUURNglvAsvgVmmvYKaLpEQkO+HIlRU=
Subject key identifier: 15:BB:54:A9:69:09:96:DA:1E:A0:20:E9:27:40:21:C5:CD:B5:C4:91
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial: 019D37C001E7745F0EBE7BC7506B2DAB4C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number: C9
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: H89rxB/kXbM6raI+EHOXidJWrNcgspvi3ZEBYIaqkKk=)
2: m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa (hash: 9lMkCyfIyGj1UpJgP+o5HSOV99to1p1lL2KxmkMnf2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:01:e7:74:5f:0e:be:7b:c7:50:6b:2d:ab:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=15bb54a9690996da1ea020e9274021c5cdb5c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:4d:a1:e7:30:c3:6d:52:73:aa:c6:6c:87:
d5:4f:36:c9:8e:f3:ef:d2:ef:8d:da:08:8e:38:35:
de:69:f4:a0:9f:93:a9:1d:81:fd:35:f1:bb:2a:f9:
7d:de:82:99:2e:0f:7d:ab:4c:05:83:6c:72:e5:a8:
ea:fa:b8:19:6c:ca:5d:6b:c9:ec:88:d9:f8:2b:93:
62:5c:60:5b:57:05:c9:6f:91:82:95:22:51:89:12:
c7:45:1e:ef:e1:f1:f9:b5:91:26:a3:03:2f:a8:9b:
59:73:c1:50:37:98:95:ac:4a:d0:b8:30:41:28:73:
2b:c7:e3:b4:08:10:1d:29:9f:f1:ba:e7:a9:1e:09:
8d:fa:bd:fc:5e:d9:34:1e:26:b0:6c:53:16:30:91:
ba:e2:78:6f:43:6c:ca:da:16:8a:c7:81:97:68:3a:
ca:f5:79:46:3e:67:51:d9:e4:61:0e:ff:a0:a8:f4:
10:1e:70:eb:a1:86:7b:c5:de:eb:65:2a:d2:e7:0d:
e5:9b:f0:da:3f:1f:8a:ac:ff:7c:9a:2c:38:34:aa:
76:44:d3:6b:83:23:65:a6:8f:12:83:38:60:b2:a0:
ee:a9:0e:94:fc:b7:54:19:25:14:76:72:df:ba:37:
c0:ba:f2:da:d3:f8:ca:64:e0:db:25:c5:f8:fd:c5:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BB:54:A9:69:09:96:DA:1E:A0:20:E9:27:40:21:C5:CD:B5:C4:91
X509v3 Authority Key Identifier:
keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6e:88:15:17:e7:a4:cc:a8:5d:9e:13:98:06:af:bd:0e:bc:
e2:b6:da:e0:c9:43:54:4f:40:73:dd:2f:5a:f9:19:4d:10:1d:
77:ca:a3:ef:a1:f1:db:1d:65:67:9b:01:91:95:9e:77:3d:39:
b4:9a:4a:0a:1c:c1:f4:f5:88:c4:67:06:da:25:a0:8c:12:7e:
f7:f2:e0:64:3d:7c:ad:67:c1:46:ad:d4:16:15:52:c5:b7:9b:
51:23:f7:02:e1:48:85:50:51:b0:ba:83:d5:52:44:8c:00:00:
10:1f:2c:02:41:f7:71:8d:ce:01:6e:cb:5b:a4:c1:b6:1e:bd:
60:26:13:9d:aa:f1:b3:bb:32:f6:12:bf:09:9c:ca:d1:02:8d:
42:97:f9:c2:f2:b6:e5:22:06:30:db:9d:b8:05:c9:55:de:b8:
b8:96:b8:be:e0:ac:a7:d1:52:9d:1e:f1:c7:4c:d7:c1:04:ac:
1a:5d:f5:b7:3a:74:0c:16:26:16:96:20:72:58:4e:30:21:1f:
5f:e3:d7:8e:cf:06:cc:ee:d8:93:fd:03:a5:5a:da:66:02:1b:
f4:a6:92:12:bd:03:d2:ac:ea:d6:ee:fa:68:08:d8:9b:b8:bf:
c8:2a:e3:b8:92:85:bd:6d:45:0b:08:4c:72:a9:da:83:b5:73:
15:bc:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:08 2026 by rpki-client