Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: 3spYD1L16EUYp6j3ibsNoWdtYrXzK6RjwrCMYpb/++Q=
Subject key identifier: F0:00:6A:53:EE:A4:DD:A3:1F:A4:E4:E7:1E:AC:C1:6F:09:05:1C:78
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019CE447756DB2A2B1C66E7379F9ADC94AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0C5C
Signing time: Thu 12 Mar 2026 23:00:13 +0000
Manifest this update: Thu 12 Mar 2026 23:00:13 +0000
Manifest next update: Fri 13 Mar 2026 23:00:13 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: I6cPaFbE5jmrZGgiumbbgs5qpwVUcC5P3ONdmOxkE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:75:6d:b2:a2:b1:c6:6e:73:79:f9:ad:c9:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Mar 12 23:00:13 2026 GMT
Not After : Mar 13 23:00:13 2026 GMT
Subject: CN=f0006a53eea4dda31fa4e4e71eacc16f09051c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:07:bc:5b:83:a5:ec:39:4f:00:85:15:5b:
40:84:5b:89:c3:87:20:23:f4:42:87:82:96:9b:01:
01:dc:34:62:48:d9:3a:b0:e5:46:2b:cf:6b:e9:9f:
e4:36:d6:f7:d1:c3:82:00:f1:05:ce:a6:c4:a0:ef:
4d:39:e8:b4:97:81:c6:fa:a5:08:a1:bb:fd:0a:4c:
77:14:f0:8a:ac:db:52:9a:cc:59:b0:23:86:1c:ae:
fc:7e:44:e8:d4:c3:9b:10:6a:4e:69:a1:f4:87:59:
50:42:5c:e1:1f:77:40:45:e0:62:7a:66:3a:b6:49:
73:9f:3c:0b:10:54:67:b2:1b:70:2c:ac:45:de:be:
94:e3:f2:36:1f:2a:ac:56:12:0e:0c:95:61:05:ff:
8a:60:c4:07:7b:5a:27:13:f2:6b:ad:8b:2d:83:bf:
89:b9:11:c9:c5:1d:57:f2:d1:3d:5b:a5:15:fb:3f:
b8:d2:bc:63:c1:15:74:da:bf:60:44:fb:b8:31:c5:
bc:22:91:38:4a:eb:82:16:1a:cb:7c:b4:b4:41:8c:
c6:6d:52:ac:2d:dc:f4:94:15:dc:10:eb:0c:52:14:
15:27:b3:1d:05:56:24:32:68:e0:f4:85:92:ba:4b:
25:8a:9e:42:50:95:bd:0c:a0:1a:45:ed:e3:4e:61:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:6A:53:EE:A4:DD:A3:1F:A4:E4:E7:1E:AC:C1:6F:09:05:1C:78
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2c:c8:80:e6:d6:1a:1e:58:24:51:99:02:5b:16:d3:19:a3:
17:c0:ab:de:4b:45:1b:10:75:98:89:d8:77:75:64:07:72:02:
a7:b1:45:c8:ad:a9:a6:d6:e9:85:10:ba:ba:cf:99:da:0d:63:
36:68:21:04:f1:0b:01:ce:67:ca:20:ad:98:d5:29:fa:17:0f:
65:82:d9:51:3a:94:ce:c6:03:82:d2:ef:00:90:73:55:c7:a7:
39:2f:c6:f2:5e:97:b3:e6:97:73:f4:a8:47:2c:b1:07:5b:7e:
39:79:50:3b:ea:d9:e6:14:c5:a0:35:d4:11:11:b5:27:51:ee:
98:da:68:96:79:4b:03:39:5b:5a:5b:8a:b4:05:77:89:64:1d:
16:55:b0:12:f1:f8:1d:87:ae:51:03:b0:c9:28:05:b7:1f:1b:
c5:6a:41:14:8f:99:ef:d0:d4:ac:f0:ce:3e:32:88:02:0c:aa:
43:0c:12:c6:37:36:45:f0:c4:93:8f:72:83:b9:b3:e2:92:8a:
7b:67:8a:26:67:58:46:f0:ed:2b:e5:75:ed:7c:5e:60:1c:51:
3d:62:50:b2:24:f9:47:21:a3:1b:1f:9f:df:f4:b1:35:21:c9:
18:4f:6f:90:0d:ca:9b:00:ae:64:66:a7:52:8f:f7:62:4b:a5:
9a:4f:72:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:13:02 2026 by rpki-client