Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: aF5p/weY/Y9SBMnUmtEz+0dREj0tAtwdTNDlTOY+Vhk=
Subject key identifier: 59:67:FD:F1:A0:A3:C2:F6:DD:F4:41:72:23:7C:AE:73:9A:12:31:AA
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019CE4B563ACFE62F19CEEDF7ED2864C0167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1871
Signing time: Fri 13 Mar 2026 01:00:18 +0000
Manifest this update: Fri 13 Mar 2026 01:00:18 +0000
Manifest next update: Sat 14 Mar 2026 01:00:18 +0000
Files and hashes: 1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
3: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
4: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: CRJRvYjQIz5XWCBNTIOwN6sichzUu4zawReuFckGlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:63:ac:fe:62:f1:9c:ee:df:7e:d2:86:4c:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Mar 13 01:00:18 2026 GMT
Not After : Mar 14 01:00:18 2026 GMT
Subject: CN=5967fdf1a0a3c2f6ddf44172237cae739a1231aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:94:48:15:5d:1c:1b:39:16:1f:b9:68:a0:
4a:9c:41:ec:7c:8f:d0:be:c7:69:c9:9f:2e:fd:1c:
7f:92:ab:92:fb:5c:52:d2:b3:e3:ac:94:b5:8c:9b:
4b:45:f6:46:26:4d:b5:08:a4:38:dd:58:68:84:5b:
9b:7d:5b:5b:34:ca:e2:fc:fe:5e:bb:44:e6:bc:23:
f7:7a:7d:1d:d7:07:de:c6:75:21:62:11:da:3a:92:
2f:d2:aa:0a:f5:3b:60:4d:bb:3e:8b:f0:79:e4:9f:
92:67:92:34:09:1e:54:d6:46:13:34:9e:4b:57:10:
94:f1:4f:9c:6d:5a:99:a2:00:7e:7e:fa:d4:68:05:
a4:47:a5:47:7d:ce:b3:c6:ee:03:4c:38:01:ec:47:
07:c9:77:83:00:17:22:89:35:6d:2e:7d:bd:14:8d:
f4:28:a5:e6:d8:5d:3e:86:9b:fa:9a:e9:95:a9:92:
43:72:3f:ab:ad:25:df:78:80:2f:1d:ab:bb:fd:2a:
98:5a:20:e5:3a:28:ab:0d:29:55:38:24:e2:ea:78:
a0:65:8b:92:5c:05:12:4f:f3:f5:8e:0f:5e:89:08:
0b:40:cf:94:a0:4b:f1:22:5a:cc:2d:07:02:5d:6d:
72:0a:7f:52:af:54:1e:0b:fa:47:d3:f5:6e:71:0c:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:FD:F1:A0:A3:C2:F6:DD:F4:41:72:23:7C:AE:73:9A:12:31:AA
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:82:e7:5a:19:9c:98:e8:f3:23:03:84:cb:fc:99:2a:2c:
48:a9:5f:93:6e:cf:45:2f:c2:0f:c6:50:39:7b:c5:d3:2c:84:
ae:4f:3d:d1:74:09:60:28:44:0b:84:9d:95:fa:cb:ff:ce:ad:
99:54:49:cd:0a:19:3f:8e:45:42:5c:51:ac:3d:f6:41:61:21:
f0:54:a7:be:f9:ed:cb:f7:3d:0e:12:2a:6d:4a:d8:f9:51:ca:
26:39:8a:3a:3a:d9:b2:59:c8:c2:7e:ae:99:1a:78:10:24:c1:
fe:1a:ae:42:b0:1e:87:67:72:7b:b2:29:43:8b:3f:18:99:ba:
22:dc:42:40:d0:ea:e2:86:41:23:84:3f:1a:98:26:0d:e7:e1:
cd:67:35:10:1c:33:27:86:8d:1e:24:5d:2b:49:aa:27:c5:cc:
2e:9d:43:fd:e0:e0:36:42:9f:5f:06:2e:3d:3b:7c:03:bb:ca:
86:3c:a4:46:f4:d3:c0:fe:cb:d1:1a:ed:9c:12:a8:c8:82:5f:
47:b9:a1:65:b9:e5:1e:79:29:59:b0:ad:28:e8:be:7b:3a:0b:
6f:82:84:4e:b7:3e:49:44:79:6f:5a:9a:91:0c:fb:96:a6:fd:
d6:51:ba:8e:e2:29:c9:aa:2d:06:79:20:ae:3f:d5:46:51:35:
b9:80:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:09:07 2026 by rpki-client