Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: YCytjVdFHC3C0o2g/LJ2MX7fzM2uZHq5oTxCapRoMns=
Subject key identifier: CA:98:79:80:5F:05:BD:9D:24:7C:E6:C3:E0:AF:35:8F:12:26:BF:32
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019D389BCD0DFAF9037D4A36E8EF18D4510E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 016D
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: KC2iwwF9xLSGYK5duk+pHAudlrV9I/xIFuSxp6asWeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cd:0d:fa:f9:03:7d:4a:36:e8:ef:18:d4:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=ca9879805f05bd9d247ce6c3e0af358f1226bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:46:61:a6:d0:ee:08:07:7c:cd:d9:de:eb:
c2:71:d4:e9:0d:c0:1b:fa:95:e8:13:53:d2:46:a2:
ee:fb:7f:af:d2:e4:de:57:93:4a:43:ac:49:bc:c0:
37:88:e0:c5:8b:5b:71:62:45:42:5e:73:9d:0d:1c:
14:65:b1:41:5a:25:13:c2:4d:9d:6d:66:1d:25:c7:
51:93:22:7d:6d:00:a2:a9:4c:63:60:94:7a:e3:fd:
22:ab:1e:4a:9a:49:5a:ca:0c:b5:80:10:a9:d6:8a:
7e:13:01:7e:ea:c0:82:0a:91:57:0f:05:d3:c7:51:
0d:d5:93:4e:90:9b:af:da:66:e4:ad:86:81:79:a7:
91:77:54:b0:58:ef:87:cd:ab:b1:dd:2f:38:ed:bf:
e3:1e:b4:e9:65:2a:1c:f3:fc:86:dc:70:02:98:3d:
fe:31:ce:95:b9:83:d5:1f:1f:9e:da:bf:3c:6f:d4:
7a:b2:ff:9d:2b:92:77:e8:e2:7b:af:a4:85:13:b4:
5e:7d:cf:11:29:3d:30:03:56:dc:0f:23:b4:26:d0:
2d:47:04:75:a7:0f:9d:0b:ed:81:f3:4e:64:41:c4:
34:c7:6e:89:4b:85:68:cb:d6:64:30:fc:fc:d3:96:
79:e0:57:c4:eb:d1:92:c6:fb:c3:0a:a4:7d:f6:a5:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:79:80:5F:05:BD:9D:24:7C:E6:C3:E0:AF:35:8F:12:26:BF:32
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:f6:27:e6:c9:91:6d:ee:b0:3a:0b:0a:0f:fb:fd:64:de:
3f:65:20:9b:92:fb:fc:55:3c:e6:20:b3:02:aa:b9:ca:6c:41:
88:a4:78:90:40:67:c9:29:ee:90:c6:43:66:45:29:31:9e:a5:
d5:aa:03:30:8d:04:78:1a:13:61:22:af:8e:bf:fb:b7:a5:80:
5c:64:da:df:9b:45:d5:ce:5b:ae:6e:5b:33:25:6c:75:73:8b:
c7:2e:5d:d2:44:02:fc:89:ec:6c:11:c6:95:c6:48:60:46:fa:
82:80:7a:50:d1:a7:4c:bd:52:43:04:48:8a:83:4a:c3:b1:5f:
f6:01:16:46:39:34:12:b9:1b:69:41:3e:9e:e9:b3:8c:0f:bc:
98:8f:87:df:f0:d4:d1:74:42:6e:ae:82:d9:60:7d:14:18:4a:
5a:b5:d3:55:e6:18:c1:74:01:6b:83:f7:90:cd:a2:d0:84:1d:
f3:3e:d8:17:58:e2:1c:7e:57:8d:30:4f:88:d5:10:91:0f:70:
26:de:dd:43:a9:bb:ab:03:e6:dc:45:89:80:d5:48:e8:60:7f:
1f:5f:e4:0b:6c:71:d1:25:37:81:21:d1:52:91:8b:cf:80:61:
e7:65:d1:be:85:02:6a:4e:4c:dc:87:ab:0c:b5:75:a1:3f:48:
c9:66:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:17 2026 by rpki-client