Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: exT9i6IwJwVyQyDLEdCiHf3FM2NodS8IUggDZcKBGYo=
Subject key identifier: C4:0A:9C:07:DA:5B:3A:B4:6C:F6:50:78:68:0C:C2:56:B6:AC:C0:2A
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019D382E06538FFFDABBA7735D4A4458BB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 029F
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: dfj5Be26Vvt9XPrI2z+oUuDymkY0kgPibViMYHhNAtY=)
2: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (hash: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:06:53:8f:ff:da:bb:a7:73:5d:4a:44:58:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=c40a9c07da5b3ab46cf65078680cc256b6acc02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:f4:9d:78:41:c7:d4:c9:bb:83:65:4d:c4:
7f:b8:db:0c:f2:10:40:e6:81:a7:93:1c:f4:c2:48:
0d:b1:72:77:0c:d8:fc:9a:9f:23:d1:4f:4c:fa:96:
90:c4:8c:a7:8a:07:17:33:7f:98:f8:61:62:8e:27:
d1:7d:3b:42:eb:53:45:01:bb:98:e6:3c:af:59:d3:
e1:8e:d8:98:77:70:08:e6:49:94:a9:6a:a0:15:50:
02:84:17:8d:10:2e:96:7d:7b:12:9a:26:e6:b2:a9:
02:14:81:43:d0:b1:c7:3f:16:0c:62:74:8f:db:ba:
51:67:03:27:a9:83:2b:91:6e:d3:d6:a2:86:45:6f:
97:54:36:2f:e2:d5:6d:2d:ec:9d:ee:d4:6b:84:10:
52:12:a1:88:fa:c9:07:7f:ea:ce:20:65:04:50:8e:
ca:da:03:2f:20:ec:63:5c:7e:d3:76:20:75:f6:02:
fb:c8:5d:76:46:b4:da:57:5e:5c:79:40:9c:0d:8a:
2b:5d:7b:f4:bd:c0:72:78:1a:3c:51:dc:44:23:d9:
57:2d:0a:c7:cc:6c:35:9b:e3:9a:0d:54:7a:c1:e1:
d0:17:f8:e8:8e:65:3e:64:71:54:06:8b:6e:a4:cc:
b7:ca:0c:c9:ac:02:b7:eb:52:08:fd:91:a1:94:fc:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:9C:07:DA:5B:3A:B4:6C:F6:50:78:68:0C:C2:56:B6:AC:C0:2A
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:4a:c4:69:0a:10:2c:7a:b4:39:74:ca:27:e1:95:fb:05:
fc:72:ec:b5:35:a0:a3:93:09:3f:43:5c:b5:60:93:16:3c:ea:
45:d5:c6:ab:f2:a5:50:49:32:90:e7:68:81:8e:d8:d1:46:8f:
bc:4f:2d:09:c3:bf:e0:b2:62:03:36:7a:cd:d6:03:27:b0:aa:
f8:63:b8:10:07:7f:b6:98:73:50:14:32:07:f2:02:bd:a3:4d:
5d:45:21:db:a8:88:bf:46:c6:c8:44:e3:4d:1b:89:fe:c1:38:
0a:e8:7f:27:33:86:fb:46:11:95:04:04:82:f2:cf:63:ba:86:
c2:d8:f6:ac:80:a9:a8:91:db:2d:67:84:33:cb:25:43:3e:9e:
be:a5:25:c6:cd:e0:0a:cf:a9:2e:c8:b4:21:51:67:24:8f:b1:
1a:e9:e5:f1:fe:f6:b0:29:9f:43:6a:32:cc:4d:34:03:2c:9d:
1d:47:b3:bf:96:2c:3c:e5:63:99:27:d4:da:bf:ad:d0:f7:59:
dd:05:cc:4a:31:51:30:d8:b6:8e:68:02:34:d6:9d:a6:3b:ea:
de:43:f7:d9:d0:78:62:dd:19:f2:f1:01:0e:c6:36:f5:65:9b:
7b:b3:02:29:b3:0a:ca:47:d9:08:b5:15:85:d2:6c:09:f3:ba:
67:3f:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:38 2026 by rpki-client