Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: 8+x2+/ui4vlxIyTV4jLuAv3KAOJTn8eXOmCZRMr1IWg=
Subject key identifier: 3E:8B:49:E7:98:01:6B:C6:25:8B:DF:7B:96:34:6B:E1:6D:2A:8C:51
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019CE4EC7C0F3264165653F352D1A840BA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0F4A
Signing time: Fri 13 Mar 2026 02:00:29 +0000
Manifest this update: Fri 13 Mar 2026 02:00:29 +0000
Manifest next update: Sat 14 Mar 2026 02:00:29 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: zIteXu4f6MzCZ85hnIAAZSc9xAl2+DtINHa7VN196qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:7c:0f:32:64:16:56:53:f3:52:d1:a8:40:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Mar 13 02:00:29 2026 GMT
Not After : Mar 14 02:00:29 2026 GMT
Subject: CN=3e8b49e798016bc6258bdf7b96346be16d2a8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:29:db:40:d9:83:f6:fb:44:06:62:b2:95:
be:bd:d2:f4:01:cb:d4:b6:f1:8d:ed:82:3f:5c:ab:
c5:0b:6c:34:bb:af:72:43:b9:56:64:c5:54:62:ee:
f1:5d:fe:0c:1c:79:4a:6a:eb:fe:a9:09:90:f8:92:
72:e7:fc:85:58:aa:39:89:a8:0d:40:42:e0:31:74:
41:a0:ec:ab:3e:89:13:47:5b:c3:20:bd:be:16:26:
16:ed:d4:b4:82:5e:df:f0:64:aa:34:26:02:50:5d:
a8:4e:50:85:2a:02:e7:78:9a:77:36:c3:3e:1e:5b:
81:51:3b:26:b0:62:5c:0d:ae:9b:11:04:13:23:fe:
79:e4:0e:c8:0b:1b:94:f6:76:f5:0c:a3:96:6e:ad:
21:0b:17:f4:89:f9:a7:56:5f:6a:20:b7:5d:df:30:
41:da:7e:3b:0f:1b:e5:d7:33:01:af:05:8e:3e:28:
5b:85:d8:99:78:91:61:30:6f:b1:bf:b6:3a:6b:85:
c8:98:92:99:f2:29:e9:98:1d:e7:ba:d0:5e:fd:86:
50:28:04:a7:72:6f:19:c3:0a:78:c8:a7:e6:c3:1e:
73:3a:06:4b:2b:9e:8a:1e:02:6e:c0:ae:8f:d4:8b:
34:ad:72:c2:5f:c7:3f:49:d4:e6:11:a0:e2:80:2e:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8B:49:E7:98:01:6B:C6:25:8B:DF:7B:96:34:6B:E1:6D:2A:8C:51
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:af:9c:a6:60:27:4b:14:f1:3b:01:b6:2f:6c:96:bb:54:a5:
ac:ee:61:9a:b4:a1:25:fc:73:f4:88:bc:de:77:a7:37:20:6c:
5e:5f:ba:3f:9e:26:44:78:0d:54:13:2e:40:5c:88:82:a2:3e:
ae:78:92:d9:9f:25:79:a5:89:15:40:20:37:0f:62:c1:91:5c:
c3:3a:c5:d8:46:ba:05:07:93:dd:f0:0b:80:86:78:e2:60:6e:
de:d7:fa:eb:1b:56:6c:46:50:22:35:18:b2:bf:cc:27:21:88:
e1:df:23:54:f4:52:5f:55:62:9a:3c:7e:26:9b:6d:22:2e:74:
f7:36:18:72:a5:aa:21:9c:63:2e:ed:2c:98:29:d7:75:54:5d:
37:1b:8c:19:53:a3:79:0d:de:1c:64:06:1d:6f:ef:c6:41:c2:
b9:4d:9a:e4:09:b8:b7:a3:b0:88:41:38:54:c3:a8:ea:59:18:
13:f6:64:f0:07:86:03:9e:e8:b2:fe:62:77:b1:75:a5:6b:85:
2d:dd:5f:c8:a0:45:ee:ae:f9:97:a6:0c:21:cc:b4:5c:20:96:
4d:eb:fa:c9:a9:53:14:98:5c:32:1d:bf:10:bd:1f:95:0d:2a:
f3:d4:ec:0d:ac:c9:e9:a1:a3:fe:b6:c5:b7:62:0a:10:f5:c3:
8c:a2:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:36 2026 by rpki-client