Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
File: aJQuPste6nkqdvray-wBqFaOl_Q.mft (raw, json)
Hash identifier: srizzxn0jyUtoNLfSSwz1DdaPke2fLVph8WIFQQdvyE=
Subject key identifier: 06:C9:09:A9:A8:17:40:B7:BC:51:86:23:B4:6A:C5:66:4A:7F:65:69
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 019D37F6FF42F264C4B9C717F6CB7E27A5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: aJQuPste6nkqdvray-wBqFaOl_Q.crl (hash: TCQQhzAz5bQ5njcZnu/WddUFOXvpTmFr+VjWM6+JzCI=)
2: sn9U2RuOQ1wrwQLlWSSxVdSW5_4.roa (hash: 8JLFpcnBG6xPlIQ4AyWjjJuV8xetbTR/ok+0e12gEvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ff:42:f2:64:c4:b9:c7:17:f6:cb:7e:27:a5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=06c909a9a81740b7bc518623b46ac5664a7f6569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:91:90:af:eb:21:76:67:2a:2e:d5:1b:6d:
87:9e:ca:2d:a5:8f:3b:34:fe:1c:11:40:48:03:10:
32:35:d7:8e:7a:19:85:e2:52:50:f2:af:24:b4:db:
8b:7d:72:b9:41:c9:3c:59:bd:e5:00:15:d8:83:27:
df:e5:b1:4c:ee:49:39:ef:55:10:89:f0:10:20:da:
a1:82:1f:e8:eb:dd:e7:2c:ff:33:0b:1e:93:88:f7:
f0:72:eb:6b:f4:71:86:29:97:83:cd:bd:74:83:6d:
ee:d6:a0:21:41:6c:3c:66:00:34:a3:41:04:67:88:
ec:74:3b:46:28:40:bf:17:2a:0a:08:94:99:5b:ec:
89:71:61:6b:71:e6:c8:39:3b:ff:61:09:5d:7a:1f:
8f:10:90:94:f3:8b:61:17:aa:8b:19:7a:49:d9:65:
d8:4f:34:88:b0:dd:ae:49:c7:68:72:2f:c9:16:6c:
73:bb:d4:2b:60:fb:b2:63:5b:19:ac:cb:cf:ad:06:
f5:f1:d2:11:7d:11:ad:29:ea:04:88:19:c4:7b:f2:
cd:f4:41:75:ac:bf:4a:86:5f:12:9d:17:16:46:a8:
8c:e2:5f:85:a2:5d:f6:3b:14:9f:67:75:5f:61:90:
b2:1c:d2:1d:21:87:e9:a5:b6:20:ff:e7:f1:cf:ff:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:09:A9:A8:17:40:B7:BC:51:86:23:B4:6A:C5:66:4A:7F:65:69
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:84:ca:c2:a1:fc:61:0b:a8:d9:9a:49:4e:0b:9e:c7:55:
93:b0:73:fd:48:de:d7:29:cb:f4:fe:9a:0f:a7:e2:45:bb:17:
01:b4:06:e7:e4:76:af:aa:5b:08:f9:53:7c:9d:0c:8c:58:0d:
0d:cd:18:0f:2b:29:c9:af:45:88:d0:0e:b5:0a:f4:82:f9:32:
8d:c3:32:13:8d:7b:70:a9:3b:fd:12:fe:ad:cc:f4:82:a6:fd:
38:87:a2:eb:48:92:d7:53:2f:bc:5d:17:e9:a8:ed:79:46:e9:
81:fa:66:6a:0d:f4:b4:19:70:24:7e:dd:40:f9:c9:1f:43:06:
20:6f:22:29:04:64:a5:f9:51:08:41:46:2a:f2:75:46:99:61:
02:4f:25:71:d1:3a:6e:f9:cf:1d:47:ca:cd:2e:0d:07:b9:ba:
fc:91:e9:b6:ee:8d:88:19:7a:e7:dc:43:91:92:9d:cd:3e:aa:
6d:c2:42:89:dd:72:e7:b9:ef:a5:64:90:e6:43:ea:1c:98:82:
89:b9:20:bb:a4:f5:88:c2:34:ff:08:26:5b:ae:c1:ed:af:0b:
4b:89:99:2e:aa:5b:2a:42:ea:c5:d2:7a:a4:61:9b:dc:80:e9:
75:45:2a:7f:da:a6:e4:6b:56:fa:bf:55:8a:70:d7:aa:20:a9:
64:6d:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:20 2026 by rpki-client