Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: X41BHe72WzFxt+v9EKY+NNJgFo0s0Zd7syi4QJGpXxY=
Subject key identifier: B0:C7:86:CB:43:5E:9D:E9:B9:35:F4:F8:50:E2:1F:5D:11:99:DB:EA
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 019D37524CFCBD66BE82A58691A6862CA155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 06AF
Signing time: Sun 29 Mar 2026 02:00:33 +0000
Manifest this update: Sun 29 Mar 2026 02:00:33 +0000
Manifest next update: Mon 30 Mar 2026 02:00:33 +0000
Files and hashes: 1: 21nHooBv9-ktSOOtF_rf9bEr-vE.roa (hash: he2BZP3IQjID9ExBYsw3YnUeSyPctJDJvetlHZilXvY=)
2: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: hPSmqkeTuJP8Aqd8BldY07CW6k25bbah+xvujaNhilM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4c:fc:bd:66:be:82:a5:86:91:a6:86:2c:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Mar 29 02:00:33 2026 GMT
Not After : Mar 30 02:00:33 2026 GMT
Subject: CN=b0c786cb435e9de9b935f4f850e21f5d1199dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:38:0d:fd:f8:20:9c:a9:67:3a:9c:ce:d8:
f1:5a:43:68:56:1e:31:79:5b:86:d3:3c:8e:29:35:
dd:0d:16:39:58:41:28:a0:3d:7c:8a:4f:1f:c6:5c:
49:d2:b5:9d:ef:5c:a8:da:20:1e:27:25:d7:c9:25:
7d:f2:31:b5:82:c7:9c:e3:c3:37:34:41:fa:10:1c:
85:15:80:cd:5f:2a:59:b9:23:ec:0a:eb:27:3c:a3:
44:04:6f:3d:2a:82:54:bb:c7:73:98:a7:0d:1f:39:
e5:e9:ee:f2:87:70:ea:ef:15:ee:cd:90:31:2f:29:
ab:8d:99:83:c9:61:a6:ed:65:cc:ce:e4:c4:63:fa:
24:c8:a1:28:88:7d:af:ac:49:85:57:f8:81:1b:92:
13:f8:7b:2e:80:15:dd:65:36:b5:16:d4:8e:29:87:
a9:a5:25:06:79:a8:b5:59:c8:35:4e:c7:04:7d:a6:
37:fd:82:63:fe:fb:a0:07:35:27:af:87:78:5c:e9:
1f:cc:e0:d3:f7:d3:ff:9c:d9:03:5c:1f:f5:0f:64:
a6:22:fc:4c:c4:8c:02:a7:43:e6:2c:ba:99:78:e6:
ae:f8:25:86:9c:ca:09:9c:15:38:e0:22:1a:94:eb:
01:c3:f5:b5:96:50:f2:10:40:bf:83:c2:ba:01:0d:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:86:CB:43:5E:9D:E9:B9:35:F4:F8:50:E2:1F:5D:11:99:DB:EA
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2f:70:98:9c:73:39:68:7b:e6:13:e5:a7:f1:ad:39:ec:7a:
3d:a6:88:b6:ce:3e:c1:41:46:60:05:79:8e:ff:ed:0d:d1:9e:
f1:91:68:27:57:e1:23:00:ee:c8:ee:5a:4e:cd:01:33:31:8c:
bb:bf:ac:90:77:31:51:09:fd:dc:d9:a6:e5:c1:26:21:c7:90:
cb:cc:7e:56:aa:43:0f:a3:50:30:71:ae:54:ec:b7:e1:cf:6c:
49:46:d1:a6:43:ff:4e:28:8f:0d:b3:c4:de:7c:5c:eb:d4:c5:
73:0c:66:ac:81:69:05:9e:cf:bc:27:e3:00:a7:08:f8:f3:3e:
72:6c:bd:7d:8a:d6:d4:92:52:33:06:ae:b0:73:2e:6d:f7:42:
46:f9:38:48:ba:97:fc:6c:2d:4e:0c:f3:d3:63:52:11:14:0c:
f3:f8:db:a8:27:48:3c:96:cb:51:3e:ec:f5:98:64:69:fe:e8:
f1:70:20:b7:5b:ec:d1:d3:2d:5a:b1:83:d9:5c:58:c8:ec:28:
ed:10:12:38:b6:11:0c:a3:89:8c:da:5a:f7:1f:e4:39:d2:03:
8f:c1:64:db:75:9e:2c:38:33:a4:1b:87:3a:12:88:ed:f7:ba:
21:50:fa:15:93:85:c5:91:15:43:1f:ae:76:68:6f:95:3c:9a:
6e:f3:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:10 2026 by rpki-client