Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File: aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier: Kjrs2ADN/u+0zqWz/U9kNxmmyjAputPAuLFIDk7FOTE=
Subject key identifier: 68:8D:B5:29:3D:9D:0A:13:86:7F:79:95:27:79:01:19:23:2F:58:58
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer: /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial: 019D0553352CE9D90C5147C08F6A4B3B420C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number: C1
Signing time: Thu 19 Mar 2026 09:00:32 +0000
Manifest this update: Thu 19 Mar 2026 09:00:32 +0000
Manifest next update: Fri 20 Mar 2026 09:00:32 +0000
Files and hashes: 1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: 46UoOj/DuqV67YOCD9ci4PPi/gfxzuyDvkexphfE03Q=)
3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:35:2c:e9:d9:0c:51:47:c0:8f:6a:4b:3b:42:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Validity
Not Before: Mar 19 09:00:32 2026 GMT
Not After : Mar 20 09:00:32 2026 GMT
Subject: CN=688db5293d9d0a13867f799527790119232f5858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:02:e5:f5:06:90:02:6b:78:9f:bd:f1:74:
46:f3:d7:f4:0e:98:c8:b4:cc:50:27:b2:bb:b7:01:
19:dd:f1:b9:01:e4:ed:d1:54:a0:e3:19:c9:9a:ba:
9c:30:b3:11:2e:24:aa:c0:33:62:97:1e:c8:01:a5:
fd:8b:26:18:01:5b:bf:fc:c0:49:ef:76:1f:5a:e5:
6c:d2:29:54:e0:1b:db:4d:be:4b:b3:dd:62:e2:14:
6a:ff:86:b6:fd:a5:07:67:a9:88:36:e5:f0:be:1f:
51:1d:c2:49:7e:91:17:dc:b6:d9:1a:5c:1d:0d:2e:
92:3d:99:25:fa:8d:90:08:22:73:84:c4:5b:8e:42:
b3:05:3e:ea:79:95:f4:75:c9:6a:b1:22:c3:6f:c1:
a3:19:8c:7f:1d:28:d3:a5:6c:80:88:b4:97:19:96:
86:07:88:9a:3f:1c:3d:ff:8d:22:a2:17:c9:8c:41:
11:a4:18:a4:61:7a:a7:c1:85:d5:58:6a:ac:d3:49:
1b:d6:95:3f:32:b6:80:24:62:2d:22:af:fd:fd:b9:
b5:37:ba:5d:e3:cc:de:c4:8c:00:04:52:b3:c3:52:
51:d1:d3:6a:05:25:1f:09:c1:5f:84:a5:c2:fd:01:
fa:ca:39:f9:35:4f:50:3d:ff:80:86:b9:dd:b0:44:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:B5:29:3D:9D:0A:13:86:7F:79:95:27:79:01:19:23:2F:58:58
X509v3 Authority Key Identifier:
keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:55:7e:cc:51:e7:17:fd:7c:ed:28:02:de:88:0f:53:c7:3b:
66:4a:86:2b:55:59:12:98:6f:fa:5f:5d:bd:fb:fd:87:c7:90:
22:1a:d4:38:a7:e2:30:00:49:cc:e2:52:88:2e:89:e2:34:bf:
9c:85:67:d5:48:a3:94:b1:de:06:1d:23:e3:1c:e7:43:6c:de:
fc:c5:f0:27:bc:0c:c4:ab:04:3c:93:7d:80:6f:90:0d:31:e3:
a3:ee:4f:97:8f:32:0d:0e:ce:d4:9a:48:ec:52:29:21:5e:b0:
2d:a6:61:fc:0f:1c:c8:02:e1:3c:e0:c9:65:e1:82:2d:d7:6e:
9d:62:3d:bf:3f:aa:dc:a7:a4:21:7f:b4:50:00:42:14:73:95:
61:8b:37:27:fa:93:1d:92:a6:a9:19:db:80:fb:fd:1f:a5:a9:
82:bc:ed:b6:ba:b4:49:8d:ef:d6:63:c2:83:f6:e8:d6:14:84:
e6:6f:65:61:e6:66:ad:29:13:94:3a:b6:20:0c:ff:ac:65:2a:
b3:5c:b0:6e:04:3f:68:5d:a2:35:f0:0f:68:96:6b:65:d0:91:
13:05:ef:65:67:75:af:84:b8:99:8c:8e:42:8c:e2:38:35:31:
0f:5f:99:6a:ef:f0:0f:ed:7b:a0:ce:b4:b1:79:06:ea:aa:99:
9b:ed:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:32:36 2026 by rpki-client