Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: bl863gF4FFIj5xy4V8SxQd/y8L8xDeiPjzZVHe1p6Jg=
Subject key identifier: 18:6E:E3:A7:55:1A:1B:E7:47:0A:0D:04:91:02:8F:19:3D:DE:66:79
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019D382E4242DC1E0EB848AAD44D2E21FE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: XzYex_ieQvekeO6Eu8AhysaHXCM.roa (hash: Uh2DSfJ3JPw4zmLr56LoU47sN4sjUalmk5csq0JOUMk=)
2: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: r1XkhNgYcNnF+iS1tB/Jo0dtYDGX9nVgIpXWPRhIYtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:42:dc:1e:0e:b8:48:aa:d4:4d:2e:21:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=186ee3a7551a1be7470a0d0491028f193dde6679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:a5:60:e4:d5:a9:a3:b1:e0:8e:c1:e9:51:
3f:e6:6a:0e:e8:7c:33:84:22:eb:c0:e0:e5:22:79:
6d:0e:5c:e9:58:42:3d:82:48:f1:a8:a7:b2:e1:e5:
a8:35:01:0b:88:8f:48:28:f8:31:07:60:37:0e:0d:
f0:57:df:7c:79:6a:d8:74:e6:b4:85:28:21:86:01:
b9:e9:fc:d3:48:8f:a0:df:e0:d5:18:73:a2:9c:b1:
e3:6e:1b:75:a4:27:13:fc:85:50:5b:21:4b:e5:73:
c1:8e:f0:e0:31:54:fd:f3:e9:f7:e5:12:91:63:1b:
63:fb:ae:18:a7:00:6c:c0:9f:64:16:1c:2e:e3:85:
e8:98:79:89:f8:90:27:57:8f:a6:5a:18:2e:72:bf:
25:3f:be:34:03:8d:d3:93:c2:98:76:32:f3:1d:e6:
18:0e:6a:e5:aa:6a:62:63:c1:b0:a8:74:67:2b:ea:
67:2f:36:be:4e:72:01:38:3e:49:02:02:53:3d:df:
0c:22:46:1a:f8:4a:db:d7:45:0e:f4:39:f5:29:73:
a5:57:43:97:36:3f:05:9b:66:60:3b:48:a3:91:ae:
b3:ae:16:8a:56:70:06:7b:99:a9:58:8c:9a:a4:34:
cf:16:d6:7d:73:05:3f:0b:05:13:3d:4f:5f:03:ce:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:E3:A7:55:1A:1B:E7:47:0A:0D:04:91:02:8F:19:3D:DE:66:79
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:56:95:01:ba:db:68:cf:5e:9e:d1:df:03:00:df:17:6d:
4b:22:b4:f5:6b:73:a8:2f:de:63:33:b4:25:14:c8:29:63:be:
08:de:e0:30:91:61:11:12:47:59:48:b8:72:2d:78:2e:bb:28:
40:6a:82:05:8f:e9:57:54:e3:33:01:0c:02:e6:7f:fc:c4:6f:
95:a6:1e:a0:d4:a0:cc:0d:14:08:df:df:bd:f2:1b:d1:9d:aa:
85:a8:6e:91:6f:09:b0:4a:7f:21:db:c3:2f:5b:8a:37:9d:ba:
f5:63:56:18:76:24:39:fe:ee:38:38:d7:87:1f:d1:50:91:a7:
af:ce:c5:a3:72:69:fd:71:08:7d:ab:02:f1:ba:10:97:af:8d:
84:d9:de:81:0f:17:11:8d:8d:91:67:0e:36:8c:67:d0:ad:7c:
17:4d:59:ae:16:de:30:99:6e:34:4c:50:68:81:f1:76:99:3b:
e1:a0:d8:ff:77:de:43:bc:f3:a5:78:ed:f0:b6:af:70:df:90:
6d:6f:f0:94:86:7b:d6:8c:af:9c:bc:45:82:53:16:20:a8:54:
fb:e3:f7:b4:2e:f2:8b:22:34:c9:0a:14:ec:2c:75:a7:c4:fe:
e1:7f:d6:53:76:ed:84:25:3b:c3:f1:35:9a:78:31:6c:70:49:
bc:f9:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:31 2026 by rpki-client