Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: lbR2cmAxL3+KStnabMsxSO9PTMyEY+y6fqy7DD5iJhw=
Subject key identifier: D2:D2:68:FA:7E:E2:C6:F0:41:6C:92:87:1A:A0:16:F2:9E:D6:23:98
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019D37F782FC9EEA71FA3C01A2F96A1720C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 169B
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (hash: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: dwXeFXnLyFMUNxXIhoz+W+42wL/JJUOkvIPdw7b7wUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:82:fc:9e:ea:71:fa:3c:01:a2:f9:6a:17:20:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=d2d268fa7ee2c6f0416c92871aa016f29ed62398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:78:dd:1c:3c:2e:ff:f0:1b:51:32:df:21:
db:62:77:7f:c3:d5:94:2b:57:ae:fd:ef:04:c3:df:
45:04:92:25:d4:57:cb:21:14:4e:2b:3e:51:64:f8:
36:ab:07:8c:fb:1c:ca:3a:f9:ef:a0:90:24:1c:e1:
9c:ac:eb:3d:f6:b6:48:ff:b9:75:d0:d9:85:3f:7e:
0c:6e:69:e9:ee:b5:dc:b4:0d:18:8f:4b:4b:f1:b2:
c4:05:b0:3c:a4:66:3c:99:3c:5d:5e:60:4c:7d:ab:
c0:eb:40:86:d4:87:6c:26:c8:3b:d7:d4:d0:5b:53:
6c:5a:c7:8e:15:f1:d0:2f:fd:fe:5c:e2:7f:d4:9c:
c0:c0:ea:68:85:87:23:f1:84:20:c2:79:d4:4c:0e:
a1:e0:9c:e5:5d:f8:4d:23:8b:f5:82:2d:a3:8c:a2:
21:60:a0:36:bb:07:60:cd:d2:30:b0:cf:53:a1:4c:
fd:2d:df:78:79:c9:21:9f:18:60:ea:1b:f6:9e:21:
a2:38:d4:32:26:a7:94:64:2d:f9:19:be:37:37:70:
20:1a:6c:38:c2:89:2b:42:bf:5d:08:03:f2:2e:ff:
92:59:ec:70:16:3b:19:92:5c:c8:36:ff:27:2b:6e:
46:cd:5d:f3:83:90:c9:3a:23:0b:92:6a:b6:73:36:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:68:FA:7E:E2:C6:F0:41:6C:92:87:1A:A0:16:F2:9E:D6:23:98
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:72:6d:0c:78:2b:bb:b5:a0:34:d9:37:de:f9:ca:24:e0:23:
d8:7f:46:5f:93:8f:a3:e5:16:4e:db:26:d8:ba:65:36:28:80:
4b:a1:94:66:96:2c:34:02:26:c1:36:bc:eb:eb:5e:2f:da:29:
9e:0e:e1:70:ee:9e:03:57:0d:80:7c:e5:dc:a7:a0:2c:2b:ea:
00:0a:be:7d:51:8f:1b:2c:59:a6:0b:c5:67:77:66:d0:93:cd:
1b:52:04:49:af:a7:b9:2f:18:16:c6:23:69:3c:f4:d8:f6:5d:
c7:32:22:75:3d:3a:7f:da:1a:e5:23:a4:c9:ea:3a:2d:61:8a:
7f:51:25:82:39:5f:c4:b3:0f:b0:9d:75:2e:a5:11:c0:b5:24:
bb:87:05:50:3b:81:b9:93:57:1d:06:11:7d:dd:4d:06:f8:6b:
d9:c4:60:af:38:e4:f8:1a:84:0f:ef:ca:bb:c6:3a:c8:46:07:
74:80:81:04:d1:8e:e5:32:fd:c2:75:bf:de:ad:30:1f:26:4a:
24:8f:24:24:9f:6a:ad:4d:c6:f5:ad:b7:cf:52:ac:a7:0d:e7:
71:42:71:d5:fd:e9:ee:67:54:ab:94:9c:29:cd:fb:17:79:34:
c6:e9:3d:bb:53:a2:4f:24:6d:3e:f3:b2:18:02:ab:c4:40:86:
61:6f:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0394L8nupx+jwBovlqFyDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDFlZjE2M2E2NjFjY2U1YmM2MjExN2VjNzYzNzU4YjFi
NWJiODkwHhcNMjYwMzI5MDUwMTAwWhcNMjYwMzMwMDUwMTAwWjAzMTEwLwYDVQQD
EyhkMmQyNjhmYTdlZTJjNmYwNDE2YzkyODcxYWEwMTZmMjllZDYyMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh943Rw8Lv/wG1Ey3yHbYnd/w9WU
K1eu/e8Ew99FBJIl1FfLIRROKz5RZPg2qweM+xzKOvnvoJAkHOGcrOs99rZI/7l1
0NmFP34Mbmnp7rXctA0Yj0tL8bLEBbA8pGY8mTxdXmBMfavA60CG1IdsJsg719TQ
W1NsWseOFfHQL/3+XOJ/1JzAwOpohYcj8YQgwnnUTA6h4JzlXfhNI4v1gi2jjKIh
YKA2uwdgzdIwsM9ToUz9Ld94eckhnxhg6hv2niGiONQyJqeUZC35Gb43N3AgGmw4
wokrQr9dCAPyLv+SWexwFjsZklzINv8nK25GzV3zg5DJOiMLkmq2czb/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLSaPp+4sbwQWyShxqgFvKe1iOYMB8GA1UdIwQY
MBaAFGjR7xY6ZhzOW8YhF+x2N1ixtbuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2Qt
M2E4YTYxMDA2YTRmLzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YWEwMTctMmZlOC00Y2Q4LThhN2QtM2E4YTYxMDA2YTRm
LzEvYU5IdkZqcG1ITTVieGlFWDdIWTNXTEcxdTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXJtDHgr
u7WgNNk33vnKJOAj2H9GX5OPo+UWTtsm2LplNiiAS6GUZpYsNAImwTa86+teL9op
ng7hcO6eA1cNgHzl3KegLCvqAAq+fVGPGyxZpgvFZ3dm0JPNG1IESa+nuS8YFsYj
aTz02PZdxzIidT06f9oa5SOkyeo6LWGKf1ElgjlfxLMPsJ11LqURwLUku4cFUDuB
uZNXHQYRfd1NBvhr2cRgrzjk+BqED+/Ku8Y6yEYHdICBBNGO5TL9wnW/3q0wHyZK
JI8kJJ9qrU3G9a23z1Kspw3ncUJx1f3p7mdUq5ScKc37F3k0xuk9u1OiTyRtPvOy
GAKrxECGYW8Y/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:39 2026 by rpki-client