Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: bRUAS8lBIT9TOVRRoB5QrHSED8p1VY5kAJUDNiM9uiQ=
Subject key identifier: BA:81:4D:60:97:D6:EB:D2:2B:1C:81:B7:B8:9F:2D:F2:9F:CE:C5:3A
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 019D37894FA331215DE64EB0206AB594A71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa (hash: Wv9na50Hk59IBbuSGPYFZW6tYs7AHRdExWlfEtmgec0=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: l2fq0lp2udp/CMEGBfdYNqyYSmdH8dU0dImuEUNpOFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4f:a3:31:21:5d:e6:4e:b0:20:6a:b5:94:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=ba814d6097d6ebd22b1c81b7b89f2df29fcec53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:02:fe:38:b0:f7:8e:1c:2c:4d:5d:01:a5:
0c:56:7a:44:89:cf:f8:a9:60:9b:13:4b:bf:e9:af:
bb:db:97:dd:59:dc:99:2c:44:45:60:20:fe:84:7b:
4d:67:c7:8d:ec:13:6f:bd:2f:6f:87:bb:fe:51:02:
dd:3e:32:0d:81:be:07:f4:96:0e:4a:6a:2e:ed:31:
ab:03:be:5d:43:3e:10:51:17:f4:6b:a0:6c:65:86:
78:fc:ae:c9:5c:ce:c8:d6:9c:4a:00:44:61:e9:d8:
8c:00:d6:f1:fd:22:e3:93:00:b7:51:0d:b2:c7:ab:
4d:1b:56:58:f1:71:f8:82:8d:08:d8:d7:48:08:5b:
c7:af:d5:ba:2e:c7:59:b8:5e:d5:ca:b9:45:bd:30:
c0:7f:31:bd:2d:08:21:be:91:f6:e7:51:72:9f:f6:
df:ea:8d:28:64:42:2b:64:01:6f:8c:82:09:db:c5:
f5:3c:b4:22:20:32:56:00:21:cc:92:0e:1b:c7:a6:
8a:c3:17:8b:62:b6:b6:28:e0:03:39:3c:84:72:ec:
5b:09:dd:f2:ed:de:93:e3:d9:28:57:20:bc:5b:3a:
c1:c4:2d:0b:24:b7:e7:99:d3:ae:db:60:ba:fe:39:
f3:48:93:d0:f8:8d:e3:e5:a4:03:87:8c:ae:8a:c4:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:4D:60:97:D6:EB:D2:2B:1C:81:B7:B8:9F:2D:F2:9F:CE:C5:3A
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:b7:61:ae:79:9e:5d:26:3f:d4:56:36:40:6b:22:64:29:
ca:4e:91:0a:53:8d:88:0c:62:f9:9b:3b:4f:4f:45:86:c1:fb:
6f:2c:20:87:eb:83:92:51:3f:73:31:d8:ac:40:59:a5:d4:5c:
87:76:5f:e5:ac:e0:c0:c5:c1:a7:fc:b9:1e:c9:60:cc:19:f9:
71:d5:53:77:96:29:7e:e1:0e:e8:6c:47:40:24:7a:94:22:8f:
29:13:05:b4:a0:54:7c:87:19:19:fb:30:19:14:b6:b7:44:c6:
a1:50:21:42:a4:a1:e4:7b:b2:0a:bd:02:3d:07:86:e7:d5:3d:
a9:56:6f:4e:99:d2:eb:80:8a:cf:f2:13:27:ad:60:11:81:86:
6e:c1:b5:07:47:a6:91:f7:e6:5d:6d:16:21:71:76:76:81:cd:
62:23:47:b9:e7:1f:d5:e5:49:59:93:62:b9:24:49:32:0e:9e:
22:5d:3f:aa:97:3c:93:29:8b:fa:8c:c3:f9:66:6e:a3:24:a4:
d9:12:d0:47:f3:95:8d:25:43:31:aa:44:fa:d6:f0:d4:89:0c:
52:15:c6:98:93:3e:60:7f:5e:ac:e9:41:c0:00:ea:c1:63:b0:
e7:53:43:06:f2:35:e9:23:15:3d:84:ee:67:cc:96:65:3f:1e:
ad:d5:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:21 2026 by rpki-client