Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: xQryjuB493Yp9CAQ6cEXDryUovhAVufJjnd9w+NHZfc=
Subject key identifier: 6B:41:CF:6D:93:13:D4:0E:5F:8C:F5:70:64:6F:EA:7E:C8:BB:34:FE
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 019D390A371E0A81705A47BC824F8B9A2F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: 03D8
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: Yw7NMxdJYOxSPv5-0Sfz5ahXRag.roa (hash: ZnICYKONJJxjDwVZ62F3+nflf0A7dKQxRmtplOM55/A=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: ZGHGRhyibu/U8bXQV6guNtMPFGt0As0VG1EYgBf8O48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:37:1e:0a:81:70:5a:47:bc:82:4f:8b:9a:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=6b41cf6d9313d40e5f8cf570646fea7ec8bb34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:e4:26:30:28:3e:9e:e2:93:c8:45:63:ac:
23:e4:94:1c:ca:f7:73:af:43:6e:39:4c:67:d6:30:
aa:1c:58:f1:fa:25:d9:46:d5:bf:0d:f0:48:b4:fb:
5a:2c:b0:b9:b5:c7:c3:2b:ed:f3:b0:4e:6c:4f:3f:
b3:ab:a5:d8:b6:ae:b9:c3:af:d0:ed:26:85:01:50:
d1:52:84:6f:df:5c:5d:27:b1:38:22:29:9f:f9:d2:
75:97:a0:41:1d:43:f9:1e:07:af:3b:f6:6d:b8:36:
03:ca:95:8c:4e:e8:e1:64:3c:66:4d:7b:02:78:a9:
97:5f:a8:1a:f8:91:5c:ad:c3:80:37:18:a7:10:4d:
19:10:97:b8:e1:80:44:62:64:3e:a2:ce:22:18:f6:
18:83:d3:13:73:39:ca:87:df:31:70:2c:32:6b:04:
dc:a6:ac:74:7a:8f:0c:ab:52:35:32:3b:bb:26:fa:
d1:a6:51:7f:ef:09:a0:da:80:90:46:57:2b:2d:61:
68:88:a5:ee:ce:40:43:d5:e8:0e:1c:dd:bb:fd:fe:
07:b2:ba:b9:a8:54:22:5c:60:07:c3:9a:6d:60:e2:
1f:5a:57:d1:5f:b0:df:c2:c8:8e:fe:a9:95:31:b8:
07:0d:6a:88:cd:55:b3:ad:18:d5:05:66:19:dc:e9:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:CF:6D:93:13:D4:0E:5F:8C:F5:70:64:6F:EA:7E:C8:BB:34:FE
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:46:66:a3:a7:17:fe:eb:32:d4:1e:e9:0e:a9:39:22:8d:47:
18:07:d7:d1:9c:b3:ff:7a:fb:d1:99:e5:84:6f:48:26:7b:ba:
09:94:17:a6:ec:bc:d6:24:ee:4c:00:91:43:42:73:73:01:f4:
54:3c:8c:ea:0d:58:19:fb:cb:63:56:21:92:6e:57:e5:1e:43:
b2:52:32:2a:4c:53:e3:7e:ee:9b:7f:33:b8:2d:a5:23:a4:ab:
5c:82:21:ac:43:8e:d7:db:0a:7f:ed:e1:3a:b3:ac:a2:df:45:
84:17:9e:8f:6d:06:78:12:98:d1:96:0c:33:f9:9d:e2:2b:5e:
6a:5b:7e:51:12:0e:a3:36:f4:b9:99:2e:af:86:61:14:b6:b1:
39:a9:76:f9:27:40:3c:d2:67:72:7e:dd:a0:b3:cd:0a:08:cb:
79:27:25:c3:cb:ea:9f:74:85:05:63:1b:89:23:41:83:6e:3d:
1a:b6:08:2b:53:c0:c4:eb:51:9e:63:0d:6b:44:53:4c:95:76:
da:03:fb:51:02:b3:dc:ad:9c:6c:5c:48:7c:63:65:39:83:b3:
52:38:d6:41:55:d6:a0:63:49:40:a9:ca:3c:da:ee:a2:b8:ba:
5c:29:99:70:4e:d4:bd:0b:c5:63:0d:e3:cd:b4:9d:0d:94:f5:
25:39:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:51 2026 by rpki-client