Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: f0auN5a5gkZyputlOIdeP5nKQCnzvgANFujgPxFINfY=
Subject key identifier: 13:A1:9D:49:05:A5:65:90:9E:D3:76:6A:22:B4:57:7D:9D:53:7E:8C
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019D3A545E4F7E2714C509F4D25358E94822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 02F8
Signing time: Sun 29 Mar 2026 16:01:40 +0000
Manifest this update: Sun 29 Mar 2026 16:01:40 +0000
Manifest next update: Mon 30 Mar 2026 16:01:40 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: 87YkRxmj+hU21kqGtQp/r36yOmGw6cL0RPBeB8wV2ls=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:5e:4f:7e:27:14:c5:09:f4:d2:53:58:e9:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Mar 29 16:01:40 2026 GMT
Not After : Mar 30 16:01:40 2026 GMT
Subject: CN=13a19d4905a565909ed3766a22b4577d9d537e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:87:99:6c:b4:70:4c:b0:4d:0b:87:03:2a:
55:6b:0c:7f:2d:34:c6:fa:3f:26:40:a7:62:73:01:
dc:62:4f:76:46:34:d4:3d:4a:b5:cb:94:8d:fb:af:
b5:ab:01:09:1a:46:d0:17:d4:3f:12:26:97:b0:59:
62:64:c4:89:0a:de:74:86:1e:f2:63:ca:c4:73:2b:
75:c1:b8:b4:fa:3f:7f:57:0f:56:ee:36:03:8c:e5:
11:fb:01:f2:89:2a:e1:e5:48:b8:11:52:a8:b6:2a:
c3:98:7a:d3:93:ab:18:7a:72:68:72:f9:c8:03:9a:
6d:2a:f8:bf:f5:af:cb:fb:d3:6d:77:c0:c4:08:62:
6d:5e:2c:83:41:cb:97:85:93:22:9b:9c:2b:46:95:
b4:c9:4f:c2:7e:92:10:91:74:e5:3b:9a:94:ca:7b:
a5:2e:31:84:ee:c1:7d:43:bb:f3:30:05:85:e8:cb:
ce:2e:54:5a:d3:b9:ed:d3:49:b3:a8:7e:f5:bb:14:
f9:05:c5:57:19:6b:c8:86:b5:3c:d3:4b:59:ea:40:
f7:e8:df:c3:3c:4e:40:6b:18:0b:10:b7:c6:4e:dc:
86:99:3b:1c:2e:84:d3:ee:4f:39:75:72:05:a7:06:
a4:ac:b2:24:7d:05:ef:69:eb:97:2c:bf:88:3f:29:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:9D:49:05:A5:65:90:9E:D3:76:6A:22:B4:57:7D:9D:53:7E:8C
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:2c:bd:ef:ef:02:9b:2e:9c:f4:ec:55:9d:e6:85:7e:15:
a0:71:dc:91:77:73:84:1f:67:f1:4b:be:58:3e:15:ae:32:34:
0a:0c:b0:5c:88:03:2d:46:85:41:35:44:49:21:98:b9:f3:53:
62:00:fd:e1:84:16:96:fc:e7:63:bd:aa:85:34:57:9d:c9:9d:
d5:1e:ee:ae:ce:90:7e:07:44:8d:11:f6:93:38:26:5d:32:e8:
7a:86:90:d5:48:10:36:e4:00:1e:65:b6:90:81:32:ef:52:62:
e8:7d:f2:bb:b4:ad:da:9d:16:b7:3b:09:9c:ea:2f:c4:32:1f:
31:20:a3:69:98:98:34:13:fb:51:02:e5:75:c3:f8:14:9a:e9:
f6:39:bd:a5:44:fc:4b:54:d9:b7:7d:a1:20:68:37:9d:9b:ca:
1a:8d:e9:f4:ca:22:06:c5:80:50:2f:fb:2a:19:05:92:51:f1:
81:9a:55:bb:22:35:26:96:63:32:ea:f5:2e:74:8f:42:b2:81:
11:58:46:4e:ae:f7:05:e4:fe:cf:98:cc:dd:c5:20:62:79:51:
74:82:c6:78:5d:a2:21:24:89:b2:87:cf:1c:1a:1d:8f:e7:1b:
d7:7d:43:07:57:50:f7:b5:c5:82:95:a6:f0:35:9c:e2:38:ff:
4f:32:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:48 2026 by rpki-client