Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: udnkFwASYvVe1gFMy5kZHfx4q5huakF6j0EZWiBcE9w=
Subject key identifier: 23:87:96:E6:A3:1C:E5:35:F1:71:E1:4C:53:87:F6:04:7F:67:9A:03
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019D3A1CDCB9EE157F969641F1635998163B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:01:03 +0000
Manifest this update: Sun 29 Mar 2026 15:01:03 +0000
Manifest next update: Mon 30 Mar 2026 15:01:03 +0000
Files and hashes: 1: 6nS7ChSMwS0NiVMZWHlnkhrttP8.asa (hash: iXhlJdpfjIUYJ5YZ/S4lqTUks7mtZzgak62hVEHY6bM=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: CnSXMJcyK6yIKYrR6o0higYcQP+iUIGgFyPvs/n4tfc=)
3: kh97mCRCb1gM-n6T2L16tRWt1No.roa (hash: Uv7w0anQc7bmfRwWtut6B/CD6qt0gTfBsNdk/bWiZ00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:dc:b9:ee:15:7f:96:96:41:f1:63:59:98:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Mar 29 15:01:03 2026 GMT
Not After : Mar 30 15:01:03 2026 GMT
Subject: CN=238796e6a31ce535f171e14c5387f6047f679a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:ba:c7:98:e6:eb:87:4f:b8:07:29:e6:1a:
15:07:57:93:b6:b7:ea:2c:36:b6:3f:f7:07:94:57:
76:8b:c0:09:10:1e:7a:de:3e:63:6b:e5:5e:21:56:
9f:d2:1c:32:3e:96:6e:5f:da:f6:6e:9c:89:66:8f:
da:e6:b3:a6:e1:9c:07:9e:86:ae:c2:c7:2a:a6:de:
38:39:d9:19:11:74:79:5d:d2:03:e7:be:bf:f8:dc:
01:2c:8d:5b:cc:7e:1a:0c:c9:40:a1:a8:bd:1b:f6:
98:4a:62:ae:69:6a:bc:65:12:8b:1c:90:b0:d3:07:
41:9c:f5:41:16:4a:43:9c:52:d1:e8:7d:87:a1:36:
eb:31:76:95:eb:c9:12:06:46:0d:20:b2:ca:1b:13:
52:8c:a3:fa:6a:95:24:b9:53:e7:5f:c5:8d:88:d1:
7a:db:1a:65:cc:d2:e2:21:2a:af:a4:ac:34:4b:89:
02:ac:64:89:7d:f9:5e:29:28:f0:80:7d:cf:0d:d8:
8b:07:cf:0b:fa:2e:bd:88:40:1e:5a:d8:93:67:a3:
02:5b:bd:e4:40:95:79:f5:99:3c:96:42:d1:c9:99:
b8:ad:20:e1:34:22:cc:8e:69:97:92:ce:03:71:24:
3a:2b:95:b0:4f:8c:b5:f1:ef:6b:9b:98:69:81:30:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:96:E6:A3:1C:E5:35:F1:71:E1:4C:53:87:F6:04:7F:67:9A:03
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:96:c7:a8:be:67:61:91:43:9e:99:a7:e2:dc:51:7d:66:
3c:d0:21:e2:ef:6a:b7:cc:b2:f1:0d:38:68:1d:8a:f1:85:79:
d4:02:97:c4:bd:0d:7d:3e:25:67:37:3e:d3:b5:0e:90:47:a6:
68:14:f7:79:92:ff:13:c1:2c:cc:45:d1:57:87:da:d8:6d:c9:
2c:fd:02:37:42:9f:13:d4:69:c7:a7:7b:c8:c0:7c:ce:36:df:
3d:2d:f5:25:43:be:4d:a9:da:83:4e:72:91:59:d7:cc:42:9b:
cb:8f:0d:3a:49:9b:75:3b:6c:7b:01:d9:ef:79:5a:4d:f9:af:
51:29:1c:14:cc:94:6a:b1:cd:3f:9a:a9:8f:33:cb:af:12:57:
e5:d5:b6:81:4c:24:a1:3a:02:5b:8a:c4:09:10:e3:19:66:01:
61:fc:1c:e2:d4:3d:42:d7:e0:3d:57:ac:ed:ac:ff:47:57:78:
70:6c:59:3b:3b:96:45:eb:fb:ab:ec:bf:ef:37:74:4f:c5:75:
2f:8d:76:e4:a8:18:da:c0:18:11:3e:58:35:9f:90:e3:54:1e:
51:17:a5:fa:db:9c:df:c5:67:13:27:f6:c1:7e:06:f5:95:42:
84:37:4a:7f:af:2e:35:2f:dc:21:b9:82:19:d6:1e:97:34:7c:
83:23:8a:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNy57hV/lpZB8WNZmBY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTA3OGI1MTgxYmU1ZmJlOTE0YjQxMmE0MTIwOTZiYzhk
NzE1NDkwHhcNMjYwMzI5MTUwMTAzWhcNMjYwMzMwMTUwMTAzWjAzMTEwLwYDVQQD
EygyMzg3OTZlNmEzMWNlNTM1ZjE3MWUxNGM1Mzg3ZjYwNDdmNjc5YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDK6x5jm64dPuAcp5hoVB1eTtrfq
LDa2P/cHlFd2i8AJEB563j5ja+VeIVaf0hwyPpZuX9r2bpyJZo/a5rOm4ZwHnoau
wscqpt44OdkZEXR5XdID576/+NwBLI1bzH4aDMlAoai9G/aYSmKuaWq8ZRKLHJCw
0wdBnPVBFkpDnFLR6H2HoTbrMXaV68kSBkYNILLKGxNSjKP6apUkuVPnX8WNiNF6
2xplzNLiISqvpKw0S4kCrGSJffleKSjwgH3PDdiLB88L+i69iEAeWtiTZ6MCW73k
QJV59Zk8lkLRyZm4rSDhNCLMjmmXks4DcSQ6K5WwT4y18e9rm5hpgTB2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOHluajHOU18XHhTFOH9gR/Z5oDMB8GA1UdIwQY
MBaAFGjgeLUYG+X76RS0EqQSCWvI1xVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQt
ZTY3MWQ5NGIwYTIwLzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQtZTY3MWQ5NGIwYTIw
LzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEeWx6i+
Z2GRQ56Zp+LcUX1mPNAh4u9qt8yy8Q04aB2K8YV51AKXxL0NfT4lZzc+07UOkEem
aBT3eZL/E8EszEXRV4fa2G3JLP0CN0KfE9Rpx6d7yMB8zjbfPS31JUO+Tanag05y
kVnXzEKby48NOkmbdTtsewHZ73laTfmvUSkcFMyUarHNP5qpjzPLrxJX5dW2gUwk
oToCW4rECRDjGWYBYfwc4tQ9QtfgPVes7az/R1d4cGxZOzuWRev7q+y/7zd0T8V1
L4125KgY2sAYET5YNZ+Q41QeURel+tuc38VnEyf2wX4G9ZVChDdKf68uNS/cIbmC
GdYelzR8gyOKJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:51 2026 by rpki-client