Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: /QsZYhn9ezhKA0JO6J1L4d4ebVWzJ1Y/4mN9MtZCWQo=
Subject key identifier: DC:96:5B:9E:7E:D5:35:A9:6C:25:68:40:42:CE:47:A1:A9:8A:F5:23
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019D38667D46E205AB0A779638C3D54D2CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 14D6
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: 3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa (hash: RYP+kCE6mn90ehLAvdC/KeyfQc4In+6wu6IVJb4OH5c=)
2: PeACFRzbqNg73GPInX-i49BNtHM.roa (hash: so0IXS+T3rWA07JEuNq7WJWAoqVF14IBJdyXjwBvRmQ=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: olMTLOcQsrOMoY0zYiwTixiyX50zQN1XWlgUELSztcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7d:46:e2:05:ab:0a:77:96:38:c3:d5:4d:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=dc965b9e7ed535a96c25684042ce47a1a98af523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:ef:23:6f:de:1c:46:41:c6:50:1d:af:4c:
b1:7e:db:15:24:71:63:93:9d:ec:cf:9f:8c:07:24:
50:7e:ff:8a:5a:5b:53:23:3d:83:5f:07:cf:d4:47:
b4:a9:47:ca:4f:2f:66:c2:4d:f3:32:4e:b0:bc:07:
a4:3e:d0:38:06:b5:08:bc:29:ba:ad:45:01:16:be:
10:ac:dd:e4:62:57:be:83:4c:4f:b1:4e:fe:59:97:
39:60:b3:d2:03:e3:62:8d:2e:de:51:32:03:a9:a8:
65:e9:b3:3e:ee:01:11:6c:3d:db:6a:77:90:2f:ba:
8e:56:3d:c1:72:40:c4:ab:97:4c:7b:45:f3:98:67:
9c:59:61:8e:0c:e3:98:02:e5:5f:6b:03:87:e2:b5:
c9:69:29:69:12:b6:b1:7a:bb:1c:12:b4:e0:2e:e8:
f4:2d:ac:c3:d2:f6:29:fb:07:f5:91:87:8f:38:cd:
a0:e3:55:e4:a4:02:35:01:f9:25:b9:cd:6a:68:b9:
78:f2:9a:12:53:ec:fa:28:68:75:7a:46:fd:20:0b:
bc:1c:78:75:b7:b1:d1:20:9e:f4:4c:7b:f4:0b:e7:
60:35:87:45:a2:bf:6a:0d:b9:c6:ca:0e:47:bf:16:
3d:0b:23:cc:05:f3:aa:55:5c:73:20:f3:71:91:9d:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:5B:9E:7E:D5:35:A9:6C:25:68:40:42:CE:47:A1:A9:8A:F5:23
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9b:a8:2c:75:d3:4d:f2:11:4d:83:d2:99:6e:87:dc:03:29:
e8:0b:4c:ba:64:97:15:cb:9b:24:4a:97:19:d6:94:e8:4d:a5:
80:c5:87:67:70:52:6f:96:af:89:68:16:fe:e3:01:89:b3:5b:
78:ab:e1:7e:a6:c5:d0:d5:b8:a3:01:c7:9a:36:95:1b:96:7a:
6c:d5:46:87:fe:f8:9d:d8:74:d2:4c:48:8d:5a:a1:15:ae:14:
78:c0:ce:4e:4f:66:52:a2:62:a0:73:54:17:15:ad:07:7b:bc:
27:00:f0:31:f1:38:41:98:fb:35:00:84:45:76:92:0c:c4:a6:
56:35:6f:b2:87:bf:22:57:92:9d:cd:fe:24:c5:ca:ea:d4:04:
0d:3c:4d:85:39:ee:e3:ae:93:98:22:f0:65:82:46:fd:62:da:
8e:1d:41:cf:ca:23:2c:b2:cd:ad:25:05:d5:5e:e8:d6:b2:45:
25:00:0e:4f:67:33:89:b4:f6:50:7e:38:a0:63:13:62:7f:68:
cf:9d:87:a8:ed:75:58:6b:2b:c0:cb:e5:23:12:f2:b9:65:cc:
5d:9b:43:a0:05:c2:ce:c5:bd:b5:04:e6:e8:ac:15:43:60:bb:
5a:93:a3:e3:33:89:08:9e:77:6b:1e:da:88:88:39:7e:17:74:
d1:c4:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client