Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: HQwIyC/BL2Bw+9owE/7gknM3e9/cTM52EncJKiuweUE=
Subject key identifier: A5:11:64:57:08:91:71:99:0C:8E:F6:C0:80:8F:F9:F9:39:E4:6A:0F
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 019D382E0680E1189FED3D095FCFAE58B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: a1IDt2xomxWARvsJeU8MLNXS4IU.roa (hash: 426ydjesv20i56PFyO1tKmNiavKTm2qYefp1CVawqKM=)
2: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: cq+tX49y+HiehxUz2HxYd8W7hGvjr46Rm+KvkLGjEvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:06:80:e1:18:9f:ed:3d:09:5f:cf:ae:58:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=a5116457089171990c8ef6c0808ff9f939e46a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:30:47:72:12:d8:f2:f2:7a:7f:1e:ea:5f:
8d:e3:40:ac:31:e5:ce:3f:e2:ef:c2:8f:8a:2a:71:
3b:08:f1:fc:f8:09:6f:4d:28:42:83:a8:a1:cd:26:
74:a3:17:b4:0f:14:05:2b:fc:1c:46:9c:1d:d6:a3:
3c:a6:1a:1e:ce:bd:10:23:40:bb:88:79:ab:cc:43:
6e:ab:3d:00:1c:fe:2d:54:46:0f:b6:ed:78:56:3b:
1c:b6:dd:45:65:1b:ba:ed:6f:c7:18:48:aa:ad:78:
c2:c5:26:3f:ed:11:b4:83:c9:59:2e:9c:03:8f:3d:
15:21:ad:c7:47:02:23:e5:a4:51:d5:c2:8c:15:4c:
64:b7:b3:f8:b5:47:ed:d5:72:d0:8b:17:3f:e9:1a:
25:1f:ad:1a:e7:66:98:29:31:1a:c6:27:1a:54:56:
40:48:c4:b2:d3:90:80:d8:10:70:e9:40:49:d1:56:
82:2f:8f:7f:4c:ab:06:67:3f:37:6a:db:da:b3:d1:
91:0a:87:54:ea:0d:9b:59:06:06:8b:c4:0d:3b:27:
e5:a6:79:48:d6:2b:f1:1b:e2:3a:e8:f8:57:b1:80:
77:c9:b0:dd:83:25:20:8a:4c:3f:90:0b:ad:a7:49:
d7:82:28:2c:26:af:c7:9c:72:bb:16:c9:38:9c:89:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:64:57:08:91:71:99:0C:8E:F6:C0:80:8F:F9:F9:39:E4:6A:0F
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e2:46:64:8b:c5:7f:16:f3:c5:80:d4:8e:eb:67:2b:43:8b:
4e:86:55:49:6d:8c:51:ad:bf:60:ac:3d:8d:4c:a5:df:9b:8d:
81:98:d7:a7:c3:e3:59:b4:35:43:e8:81:4d:8d:54:d7:c3:b8:
51:0b:d0:0a:2f:87:25:73:7f:e0:de:aa:a8:fb:4f:43:7e:22:
7c:24:ac:b9:70:cf:07:d9:fb:d5:fa:6a:20:ab:01:7e:04:b1:
e5:da:a5:bd:e2:e1:78:ca:23:9b:c6:fb:2b:04:80:de:8d:e7:
f7:42:5e:9b:81:62:2b:85:42:ec:c9:ba:c4:cd:fa:08:dc:d2:
51:21:12:ba:13:4d:89:20:85:5b:4e:66:af:cc:62:95:0b:04:
22:d5:cd:41:12:09:a7:96:83:e5:39:7e:83:f2:fc:b9:a0:dc:
30:1a:11:21:6b:56:56:46:80:0b:88:2a:3f:3a:b8:1a:da:5c:
20:57:37:4f:6b:1f:69:1c:e0:74:6b:87:59:a2:f1:c4:20:37:
6e:53:67:0d:6b:0c:67:c5:20:81:79:74:54:88:8a:7c:27:3d:
05:5a:fc:f0:5d:25:68:8a:d6:97:5b:aa:bf:70:5a:da:78:52:
66:6d:fa:70:87:4e:d2:d0:63:b3:05:18:28:47:d2:fe:fb:bd:
38:df:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client