Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: ZdFzahs+sxFGPBkiVlesF+ImKh6rzq+lN32Ikmux/Vg=
Subject key identifier: 34:7A:A8:3E:4B:30:B9:67:7D:03:15:F7:8A:FA:7D:E8:A9:43:B4:75
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 019D273ADE8B4D8ABBCD07E95810E1427D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: BKzDOLSRjsdL979aIhmX7jsHv2Zy1R+sos5eixUVJmA=)
2: h5uKn8g9EKDrOSCjX6eMFupZ64Y.roa (hash: qSSIAnAv4EJAYyJT2DsdReTrWjgda1IMNFZ6WGYfBOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:de:8b:4d:8a:bb:cd:07:e9:58:10:e1:42:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=347aa83e4b30b9677d0315f78afa7de8a943b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:3b:69:8c:00:6f:9c:0c:fb:01:b0:be:b6:
e1:35:bd:0b:f4:91:3f:9f:86:55:5c:54:cf:23:03:
47:98:33:3c:5f:cf:1e:ca:48:e0:e8:95:0a:6a:91:
c0:dc:0b:bf:91:c9:4a:74:30:4d:b8:17:69:42:3a:
c4:0c:25:43:d7:9b:48:5f:26:df:55:4f:65:c4:36:
8f:4f:ac:ad:9b:74:4b:6e:46:24:6f:9e:a6:40:ee:
6c:1d:61:6d:05:ab:77:a4:2f:9c:bc:9c:43:af:e4:
49:60:9b:29:08:ba:e2:4a:01:62:59:2f:2b:03:c7:
0e:65:57:45:53:6c:5d:52:c4:db:9c:8f:d2:4c:dd:
9f:7b:6b:57:24:5c:7c:dc:50:09:0d:9d:32:48:dd:
ef:76:7c:77:d5:01:d8:cf:6d:12:86:36:87:61:c4:
57:13:37:82:c6:fe:0f:b4:e6:15:1f:31:2a:0a:41:
5a:88:27:f5:0a:bb:f8:de:5e:c5:5f:18:36:0b:34:
41:b5:72:9b:e0:b2:ce:be:9a:5d:60:b6:8f:98:00:
a6:53:37:ea:38:5e:bf:c1:fa:49:54:94:cd:a1:57:
4d:8a:23:96:7c:73:ef:88:33:f7:02:16:e3:3d:00:
b3:cb:d5:c5:59:3f:35:f3:c0:bf:84:78:39:4c:01:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:A8:3E:4B:30:B9:67:7D:03:15:F7:8A:FA:7D:E8:A9:43:B4:75
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1d:0b:02:b5:b8:82:7c:a3:0b:e4:26:6d:11:15:69:27:1b:
76:d4:c1:e4:28:f2:10:42:ff:36:8e:bd:b2:0e:3a:a9:e1:87:
c9:ab:be:b9:f2:2d:c8:10:13:a2:84:56:98:91:62:f1:81:6a:
43:2c:03:01:f3:a7:b0:6a:c3:26:62:17:77:5a:fa:40:10:9a:
1d:cc:cd:36:fc:d7:09:a9:05:86:fa:3e:fb:02:cf:5e:03:50:
bd:56:76:62:51:92:30:2f:76:26:91:20:06:e8:49:84:e3:4f:
a8:44:ca:35:49:be:7d:c7:87:bf:81:48:80:a6:d1:ef:1f:d5:
32:06:1f:e2:89:83:e3:7a:94:16:19:9f:ac:fd:37:97:8c:ff:
82:e5:8a:9b:d3:16:07:e9:2c:fc:5c:10:fc:8a:15:64:35:29:
bd:6f:a0:75:20:46:81:af:e8:3c:68:18:b0:2e:05:5c:03:68:
a7:43:de:88:85:70:19:50:5a:5e:0d:41:14:72:1f:88:f9:5d:
5a:38:c1:4e:9d:8e:3b:f0:cb:dc:49:99:a5:e3:a5:90:1c:1e:
f7:a9:f9:ff:de:10:41:f9:17:61:cb:33:fd:9f:94:71:31:82:
9d:e3:1f:44:96:08:b1:d1:62:2a:d8:c9:b7:8b:69:2a:e8:65:
52:a7:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:37 2026 by rpki-client