Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: 8rgPqEA1tpRCUVmdfvEI67vOuxTyF+nPNCT+ZMOwmaM=
Subject key identifier: 87:F7:71:A8:09:38:69:FC:9C:73:69:30:98:05:F2:FB:69:78:D7:4F
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 019D37F75DCD49728CEE818C472891D203BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: F+T/QvNMIQYDZKpRyokYsltvaLsxO9o4dMmM/5AOpo4=)
2: lomzg8TRXkBkQAJV3SYj7kC0l0k.roa (hash: gnOZFo1e3nzIFcl3On+9oUhEAr2nhDp2g8Ki0TCHhqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5d:cd:49:72:8c:ee:81:8c:47:28:91:d2:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=87f771a8093869fc9c7369309805f2fb6978d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:bd:c6:14:36:58:45:01:aa:99:73:d4:b7:
82:91:9d:05:2c:be:26:04:09:3d:cf:cd:c8:ee:87:
6f:06:f2:46:bc:dd:4a:09:b2:b8:1a:cd:d6:f4:5a:
46:d1:01:fd:81:0e:36:02:45:7a:d9:a8:a2:45:24:
f6:d0:ac:18:2c:b9:0b:92:d6:01:21:dc:8b:9a:e4:
f4:db:bc:3b:a2:0f:19:68:80:20:ff:74:3c:b3:2b:
87:14:b0:7e:8d:d6:28:80:25:1f:4c:cb:ec:53:5d:
58:f0:cd:ed:04:ef:18:e6:a4:8c:7a:78:b3:c3:7c:
eb:49:7a:96:4a:c7:b1:b7:b4:66:5a:98:f2:a8:df:
84:dd:15:d7:f9:a6:a4:89:1d:c1:41:f1:1d:72:1a:
52:42:5d:ba:ad:ab:f9:0c:c3:3e:3f:af:f7:5a:eb:
ed:9b:5e:36:c5:05:d7:1d:08:7e:44:88:e9:a0:9c:
c1:1f:de:76:fe:ba:c8:4f:94:1f:47:d0:8e:1d:d1:
4a:02:7a:58:59:f1:94:84:8c:e9:15:dd:9a:d6:99:
29:19:50:de:b2:47:2f:d5:c8:e3:0b:7f:ce:af:bc:
cb:d7:aa:d3:83:23:7f:83:12:da:9b:e9:63:8a:6f:
d9:c8:a5:cd:10:47:36:b3:d4:99:ca:a5:80:e2:1e:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:71:A8:09:38:69:FC:9C:73:69:30:98:05:F2:FB:69:78:D7:4F
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b7:4f:72:b0:1f:f4:1c:40:c4:6d:0d:ce:44:3d:c4:bc:84:
4d:2b:2c:a2:19:f4:5a:f8:42:cb:50:75:81:01:4a:f7:b8:7c:
75:7b:3e:d3:7b:83:52:ba:8f:87:c6:52:0d:94:a2:b5:52:ea:
56:fb:2d:ba:1d:fa:43:12:3d:55:d3:f8:dc:b5:e6:4d:be:75:
f1:91:9e:04:0e:89:f5:2f:c2:91:2b:e7:06:c5:37:66:6f:3b:
46:1b:99:9d:b3:14:39:f0:de:b3:42:d3:d5:96:f0:85:99:6e:
bf:73:19:1d:ed:4a:50:ab:98:49:e0:a9:62:aa:17:68:3c:06:
24:32:cf:94:19:38:1e:a8:e9:27:d4:b2:99:f4:e5:b1:b4:99:
4c:8f:ce:c2:18:92:b9:0f:6b:e1:33:4f:b4:49:3d:74:81:73:
b2:20:95:ad:36:34:af:73:54:62:f4:98:92:94:61:43:76:fc:
c6:05:45:61:aa:8d:e1:1a:51:c2:4c:34:d4:5a:ee:53:05:7a:
79:d9:0d:8f:7e:6c:2b:08:85:aa:c4:93:70:9e:4c:5f:a1:7f:
aa:32:c0:b9:b8:fb:b8:fb:c2:42:1e:e4:6d:10:a8:76:87:45:
4f:66:1d:5e:eb:5b:a8:3c:3c:1d:1c:69:ef:7a:6c:f0:53:1b:
c1:d5:02:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03913NSXKM7oGMRyiR0gO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Nzk5Yjc3MmI1NTFkYjc4NGVlYmE4YjBlMTE1YTBjNDMz
Y2QzYmEwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
Eyg4N2Y3NzFhODA5Mzg2OWZjOWM3MzY5MzA5ODA1ZjJmYjY5NzhkNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy69xhQ2WEUBqplz1LeCkZ0FLL4m
BAk9z83I7odvBvJGvN1KCbK4Gs3W9FpG0QH9gQ42AkV62aiiRST20KwYLLkLktYB
IdyLmuT027w7og8ZaIAg/3Q8syuHFLB+jdYogCUfTMvsU11Y8M3tBO8Y5qSMeniz
w3zrSXqWSsext7RmWpjyqN+E3RXX+aakiR3BQfEdchpSQl26rav5DMM+P6/3Wuvt
m142xQXXHQh+RIjpoJzBH952/rrIT5QfR9COHdFKAnpYWfGUhIzpFd2a1pkpGVDe
skcv1cjjC3/Or7zL16rTgyN/gxLam+ljim/ZyKXNEEc2s9SZyqWA4h6EZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf3cagJOGn8nHNpMJgF8vtpeNdPMB8GA1UdIwQY
MBaAFGh5m3crVR23hO66iw4RWgxDPNO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEt
MGM3NmEzMTZiNTJlLzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEtMGM3NmEzMTZiNTJl
LzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bdPcrAf
9BxAxG0NzkQ9xLyETSssohn0WvhCy1B1gQFK97h8dXs+03uDUrqPh8ZSDZSitVLq
Vvstuh36QxI9VdP43LXmTb518ZGeBA6J9S/CkSvnBsU3Zm87RhuZnbMUOfDes0LT
1ZbwhZluv3MZHe1KUKuYSeCpYqoXaDwGJDLPlBk4HqjpJ9SymfTlsbSZTI/OwhiS
uQ9r4TNPtEk9dIFzsiCVrTY0r3NUYvSYkpRhQ3b8xgVFYaqN4RpRwkw01FruUwV6
edkNj35sKwiFqsSTcJ5MX6F/qjLAubj7uPvCQh7kbRCododFT2YdXutbqDw8HRxp
73ps8FMbwdUC7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:48 2026 by rpki-client