Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: Hutr8R+pcKyI+q9PPhehKqp3AFe2C/3o8uaWZkiyoa4=
Subject key identifier: 72:25:30:B9:FF:CC:68:57:27:C4:DE:23:3C:A0:A0:16:D4:5F:16:F0
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019D371BA63E2EF925D2DDDD4520B5A3FB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1158
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (hash: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: eZC4iIeOa7y5NGEztD1Wli24mRTOKgS/46G44e+dw04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a6:3e:2e:f9:25:d2:dd:dd:45:20:b5:a3:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=722530b9ffcc685727c4de233ca0a016d45f16f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:58:11:84:1d:5b:c1:6c:96:b4:ae:ee:57:
62:17:22:7a:3d:a9:63:47:3f:5c:61:3e:d7:d9:15:
0d:75:0b:cc:8b:b2:6a:67:d1:f5:7a:df:d9:6a:52:
eb:68:09:ce:fe:b4:68:d7:e4:38:51:ae:40:13:67:
fe:6b:54:dd:cd:60:56:bf:dd:d8:61:fb:62:05:a5:
f9:75:10:c6:e3:53:0f:10:38:a0:de:92:40:6c:f9:
b8:88:26:6b:76:d2:f8:37:fd:97:09:d9:bd:92:90:
6c:0b:38:76:56:a0:39:16:4d:66:cf:30:5b:77:4b:
1f:0c:86:02:92:e0:e7:c9:86:a7:89:91:fd:d5:cd:
7e:8d:94:58:35:07:5b:9e:82:ba:be:df:ef:a9:02:
9e:79:9b:3d:42:b6:2e:7a:05:b9:ef:c3:c6:ae:35:
da:b7:3a:b2:e2:53:a4:da:37:94:53:64:0d:61:31:
1b:15:4e:5e:40:1f:74:4c:42:71:d1:72:a7:fc:12:
d2:ca:af:e6:96:b2:ce:96:f8:d3:dc:19:af:15:48:
3b:54:9a:4b:62:c8:08:48:04:68:4a:01:9b:d2:c7:
58:26:4c:ca:86:2a:b6:ca:8f:40:aa:23:60:de:3b:
a8:3d:25:30:f1:37:a6:36:b6:f4:fd:d0:86:57:d2:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:30:B9:FF:CC:68:57:27:C4:DE:23:3C:A0:A0:16:D4:5F:16:F0
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:f7:31:38:4d:5e:3f:9e:df:c1:89:69:a7:a5:cc:43:28:
46:4c:50:d8:8a:ba:37:68:e9:79:1a:56:47:ac:d8:fe:a0:e8:
df:99:f4:d4:03:75:9e:60:6f:0a:ef:4b:93:f0:23:40:6f:85:
0a:7d:f4:d6:20:75:70:78:55:0f:60:bb:7e:9e:37:5d:d5:c1:
3e:c8:65:d8:cf:1f:91:69:86:bd:70:1f:26:ff:70:cd:38:54:
f3:63:a0:42:4b:c4:91:f2:06:52:1c:b2:82:de:e4:f4:83:02:
b3:d0:b4:66:df:fa:8b:cf:34:38:55:19:bd:ae:0d:b7:a8:f1:
d8:de:33:15:fe:2f:7e:e2:34:f9:ce:b4:3c:f2:8a:b4:7c:b3:
bf:6a:c6:eb:e1:25:b0:70:b3:ad:9f:81:df:5a:74:eb:71:b5:
e7:76:45:8a:96:98:26:f0:06:f6:54:15:ef:fa:d2:d7:9c:58:
fa:2c:5c:ad:0b:f8:cb:53:5b:77:85:3a:4a:0f:57:99:d8:cc:
a9:5d:60:e7:a7:a9:dc:27:a9:4d:a1:73:24:45:b9:a6:48:b5:
63:8d:66:b9:d5:17:81:cc:02:9b:0a:d4:1d:e0:6b:4c:0f:ad:
8a:06:32:bd:a1:ba:e0:c8:16:ca:60:3f:95:91:bf:6e:d4:78:
81:b6:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client