Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: bdhf95cd15mDTB5MyNnU9mpNoQu9/OZtsTnGedfduqE=
Subject key identifier: B4:F3:2F:DC:3E:17:6E:8A:48:C7:AB:DE:8D:C0:54:82:58:C6:1A:42
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019D3977D41D00D6699BAEABBAA14934BB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 177C
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
3: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
4: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
5: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: w184OXUalunXsa5QD2sLgeWgA4lFkQCLeDwQ3UIXEY4=)
6: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
9: qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa (hash: rhOXifa+7nHd3nhrZbKRQ04m/9DDGuJ4vIHbxjYC8DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d4:1d:00:d6:69:9b:ae:ab:ba:a1:49:34:bb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=b4f32fdc3e176e8a48c7abde8dc0548258c61a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:ba:36:43:a5:e9:83:d5:ab:8d:d9:10:c4:
80:74:4f:43:9a:4e:92:af:48:7e:9e:33:5d:27:c1:
11:a8:f1:70:98:0c:1d:ba:17:9e:6d:e2:33:29:ed:
2b:35:0b:7e:81:33:b2:fd:ab:6e:7d:df:e7:02:30:
24:ae:90:59:86:75:83:dc:6c:cf:98:68:60:8e:4e:
71:bb:42:86:33:77:72:8e:88:0a:9c:42:64:f0:1d:
cc:a0:8a:9d:48:b6:71:59:81:67:e9:8c:1d:7b:98:
9b:5d:7c:b4:ba:dc:fc:e1:70:3b:5d:f3:5e:91:21:
c8:85:46:29:1c:c6:2f:82:1d:16:fc:09:8b:2d:d5:
bd:db:65:75:34:70:c1:00:71:ef:82:c7:97:35:b7:
2c:b6:9b:fa:b0:97:5e:c2:d1:99:36:72:58:6e:44:
90:29:a0:82:39:b1:d2:ce:ad:63:b4:f4:4d:9d:e7:
7c:f9:69:bf:16:9c:b0:fd:2a:22:27:4e:d3:4e:97:
ab:e8:e9:34:d0:fc:95:00:23:40:66:f9:83:22:53:
12:99:30:db:80:90:0e:4e:de:40:3f:f8:46:68:1e:
9c:82:9d:f2:df:70:6e:0a:e9:b4:28:ea:cc:a2:17:
d6:4a:ed:5b:cd:99:a2:6b:d1:1b:32:98:17:f8:4d:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:2F:DC:3E:17:6E:8A:48:C7:AB:DE:8D:C0:54:82:58:C6:1A:42
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6a:bd:04:d3:02:2b:40:73:80:e1:c3:e3:2f:87:7d:ea:5c:
d4:21:5d:f9:68:cc:07:6f:c6:08:96:b4:56:f3:84:37:38:ed:
4f:88:54:bc:30:2d:1b:89:a0:16:fc:31:28:b9:72:0f:62:35:
ef:4c:6b:2a:18:0a:46:f4:9e:b5:4b:d7:05:80:ba:1c:fa:ee:
c5:89:27:c3:07:76:01:7b:76:e0:4a:d2:88:43:38:92:f4:43:
9c:b2:48:4e:f2:23:b0:bc:9e:90:26:a5:67:3c:33:75:45:55:
80:0a:c5:c7:8d:5c:ba:32:a4:04:65:ad:4e:6d:3e:2f:f8:d1:
74:4e:59:a7:de:29:0d:7b:5c:84:6c:5e:b1:1f:00:7d:5f:f9:
25:e6:1d:7f:8d:8e:3e:e0:15:ac:32:0a:66:e7:7c:4a:3f:84:
3b:7c:34:9d:ce:6d:8f:e1:3c:ed:72:15:6d:34:4c:9a:08:07:
dc:ca:37:8b:72:16:2d:f3:6d:dd:d0:4f:8b:f7:2c:79:8d:fe:
bd:99:7f:a9:1f:29:92:e9:df:33:a5:9a:2e:26:57:e0:47:bc:
45:90:17:96:ed:65:62:b3:79:6d:79:cd:e9:cd:f7:e6:e6:47:
30:94:24:ce:5b:87:df:59:5c:a6:7e:7a:ac:de:9e:84:8d:fb:
45:fa:1f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d9QdANZpm66ruqFJNLtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjYwMzI5MTIwMDQ3WhcNMjYwMzMwMTIwMDQ3WjAzMTEwLwYDVQQD
EyhiNGYzMmZkYzNlMTc2ZThhNDhjN2FiZGU4ZGMwNTQ4MjU4YzYxYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vK6NkOl6YPVq43ZEMSAdE9Dmk6S
r0h+njNdJ8ERqPFwmAwduheebeIzKe0rNQt+gTOy/atufd/nAjAkrpBZhnWD3GzP
mGhgjk5xu0KGM3dyjogKnEJk8B3MoIqdSLZxWYFn6Ywde5ibXXy0utz84XA7XfNe
kSHIhUYpHMYvgh0W/AmLLdW922V1NHDBAHHvgseXNbcstpv6sJdewtGZNnJYbkSQ
KaCCObHSzq1jtPRNned8+Wm/Fpyw/SoiJ07TTper6Ok00PyVACNAZvmDIlMSmTDb
gJAOTt5AP/hGaB6cgp3y33BuCum0KOrMohfWSu1bzZmia9EbMpgX+E1ngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTzL9w+F26KSMer3o3AVIJYxhpCMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2q9BNMC
K0BzgOHD4y+Hfepc1CFd+WjMB2/GCJa0VvOENzjtT4hUvDAtG4mgFvwxKLlyD2I1
70xrKhgKRvSetUvXBYC6HPruxYknwwd2AXt24ErSiEM4kvRDnLJITvIjsLyekCal
ZzwzdUVVgArFx41cujKkBGWtTm0+L/jRdE5Zp94pDXtchGxesR8AfV/5JeYdf42O
PuAVrDIKZud8Sj+EO3w0nc5tj+E87XIVbTRMmggH3Mo3i3IWLfNt3dBPi/cseY3+
vZl/qR8pkunfM6WaLiZX4Ee8RZAXlu1lYrN5bXnN6c335uZHMJQkzluH31lcpn56
rN6ehI37RfofmA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:49:14 2026 by rpki-client