Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: IpA5HbKu+T6s7A86L9pkZFo++lL4G+GcTYYpSN9QSVk=
Subject key identifier: 86:22:25:0E:7B:64:D9:B7:E7:17:D1:74:49:41:56:A2:36:75:4C:AF
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019D3789786207627B2952BCC3D6EF4157DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 1526
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: Sn2KyoKjFfROku-b9ZDgfYm_GtE.roa (hash: gXKBGj1pUODxBLRTrQNK3Rbmt+qgOzJRUgGGxVVoxKU=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: uVItEeXeH9K1XA1HbicGuddyOEbysrqPRPQpnnmYG9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:78:62:07:62:7b:29:52:bc:c3:d6:ef:41:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=8622250e7b64d9b7e717d174494156a236754caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:41:b3:77:1f:43:04:18:c6:51:d0:34:f8:
b3:98:29:46:9c:de:2a:04:c7:82:76:18:27:2c:b3:
be:62:79:31:ea:e4:1a:b2:ab:e6:06:9f:fa:97:66:
69:9f:7c:ac:e5:b7:f9:08:52:9a:e4:6a:91:f9:3d:
a5:6f:4c:ba:07:74:52:d3:e3:7b:b2:44:01:d4:10:
4b:4f:94:5a:3b:6f:9f:b1:b4:90:25:fb:a5:7c:f6:
94:4e:89:90:3d:99:fc:ea:57:a6:db:79:aa:ca:b9:
c0:73:fa:95:1d:9a:c8:86:45:c9:18:c2:85:d5:a5:
85:c2:a5:77:df:3c:bb:85:cd:b6:52:f1:49:b9:58:
3d:a5:bc:30:fc:c7:60:40:db:c3:9d:d7:09:32:5b:
c4:7e:c4:86:af:7e:3e:ef:6c:7a:e6:23:6d:82:0b:
4d:de:99:d4:20:c3:3b:2a:64:d1:e8:93:45:06:77:
9c:0b:eb:89:91:aa:6e:19:be:86:50:77:1c:b8:73:
56:22:1f:fd:b0:95:b6:d2:7e:95:e5:4d:5b:08:b1:
9a:cd:5a:e2:01:9b:36:75:0e:bf:ed:f0:4a:1e:4f:
f5:e2:cf:72:07:d3:ad:b9:23:58:06:fe:7c:b9:36:
c6:10:8f:32:e8:00:c9:45:33:70:53:64:3e:88:e1:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:25:0E:7B:64:D9:B7:E7:17:D1:74:49:41:56:A2:36:75:4C:AF
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:8c:ac:77:ee:7e:4a:d0:4f:14:c8:48:4e:39:c5:0f:d1:
24:68:bf:f7:9f:4e:6d:86:4b:00:f6:dc:d6:33:fd:81:34:ab:
6d:33:70:99:53:b7:b7:68:fc:39:f7:40:e4:4c:18:ff:35:8c:
42:25:28:e3:e4:0f:a5:eb:66:6f:da:aa:8c:42:a6:aa:41:c8:
9e:40:b7:81:02:dc:e0:de:cf:15:02:32:e1:08:e2:85:49:93:
3e:6d:7b:0d:ad:ed:5f:88:bc:45:92:cf:3e:ee:6b:4f:7b:64:
f5:bb:b0:b4:0b:14:d6:a6:44:f0:31:a1:79:c0:25:c5:4d:d4:
0b:18:49:66:3e:df:fb:6b:27:57:dd:7c:2c:f3:40:e9:af:da:
fe:32:b2:e9:c4:05:37:69:b9:91:d9:f0:4f:00:74:a8:ca:65:
25:e3:3a:73:5b:63:60:89:dd:73:5d:3b:67:e6:72:ea:4a:07:
96:c1:7a:eb:ba:3a:3e:1c:0e:14:61:f6:30:c0:ea:2c:f2:a7:
e3:d8:26:d0:2e:79:23:46:c1:22:fa:94:91:9e:f8:45:13:3d:
1d:72:ab:3c:e6:f8:77:b0:d5:8b:01:ce:4b:94:57:25:d2:ca:
79:96:05:85:fe:37:ca:74:af:2b:03:f0:18:a8:02:d3:21:51:
0c:21:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client