Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: K1gSEe5qrP94Ta2bLp+1o59rRMIgBrtRMQ/qyU/25DY=
Subject key identifier: 1D:F9:56:E1:31:E0:40:0E:86:9E:38:80:A2:6C:BD:7F:08:2F:7F:D0
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019D371BF1CB91E8B81F131950DE23AF62C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: CQlx6ysy1VJ/ehpTyb9PiJBH8BCkCYENYePdJZPljOM=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f1:cb:91:e8:b8:1f:13:19:50:de:23:af:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=1df956e131e0400e869e3880a26cbd7f082f7fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:a3:34:5f:74:5d:c6:25:f2:6b:d7:6e:4a:
88:4d:63:bc:56:ac:56:5a:ba:0b:19:cd:8e:57:16:
28:80:93:2f:fe:0d:39:1f:93:aa:06:60:6d:1f:c6:
8b:4f:1c:df:7f:8b:8a:31:27:06:5d:c5:4a:ac:6c:
f7:9d:4a:e3:42:0e:93:a8:2c:bb:d5:dc:4d:57:0b:
3a:be:74:82:d9:1e:f8:1f:39:e7:32:84:81:06:b3:
9d:27:04:1f:9d:0d:03:23:f4:86:98:9b:66:d0:dd:
7d:b3:8f:af:fc:13:68:40:31:03:a0:08:4a:46:10:
29:8b:59:04:f4:cc:f5:9f:d5:9f:32:83:80:29:04:
31:35:b6:85:31:f3:19:41:95:32:a0:7e:10:dc:99:
fc:b9:1c:d3:21:5a:22:dd:e4:02:ad:6d:88:a8:4a:
a2:5c:43:4e:9f:21:89:61:7b:ff:94:26:28:fa:6c:
a1:c3:53:cb:b7:c4:95:ac:51:5c:86:09:d2:8e:74:
11:d8:25:bc:11:27:6a:2c:b0:63:49:38:32:c6:a8:
80:ac:6c:01:03:d6:71:78:c6:49:e2:ae:66:c7:bf:
d8:88:57:61:82:a4:11:5b:67:2a:dc:9a:21:44:53:
5f:fd:23:c7:9b:49:5b:04:32:95:56:4a:50:fd:32:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:56:E1:31:E0:40:0E:86:9E:38:80:A2:6C:BD:7F:08:2F:7F:D0
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:be:24:1b:92:9c:14:dd:6b:68:71:cc:dd:35:84:7b:13:
a1:7d:6d:6d:83:0a:02:be:67:6b:a8:42:bd:02:af:30:90:70:
82:a1:c3:7a:1e:9f:af:42:b2:3c:98:bf:66:87:09:4a:91:1f:
27:93:35:c5:34:1b:08:f1:82:07:57:3a:02:c5:3a:08:9d:51:
d4:31:09:6e:f4:fc:86:59:64:3b:0d:27:f8:4e:fd:0c:18:6a:
7e:4f:29:c6:ac:bd:7e:ea:c7:7f:e5:6b:14:47:bf:3c:4a:94:
31:3d:1c:26:c9:57:bf:67:8c:5b:80:fd:94:04:c5:f1:a7:35:
b9:54:77:6f:b0:08:cb:c6:11:49:6d:a3:5f:fb:f4:fe:9a:93:
fe:1e:cd:18:dd:19:53:05:44:9c:0a:98:94:9a:81:ae:ab:ae:
b1:c1:5c:d3:7c:12:fc:7e:b5:85:fd:0b:92:92:0e:b0:a2:3b:
4a:63:63:24:01:f1:66:49:5f:f2:33:90:eb:26:8a:5e:c5:cb:
6d:06:36:da:e1:96:e6:db:3d:52:d7:e2:02:f2:4c:74:47:cf:
76:de:a0:e0:9b:da:74:d8:30:c4:7f:99:62:58:d4:79:2e:36:
ea:ec:e9:8f:7c:89:9c:f9:e6:bb:e1:a4:15:4c:e4:c1:de:bb:
22:fc:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:39 2026 by rpki-client