Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: dQe6u3iEHszoptc1txFe19q13Mvn+MtVO7A6zdLU+yQ=
Subject key identifier: 50:D8:1E:5E:6B:55:64:1F:24:46:38:CF:55:06:E4:DD:27:49:C1:3B
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019D299787CC8ADF31B5C3CCF45113C045A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 04DB
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
2: UuJYJB8qqQVCGi-vt_wHrI42MfU.roa (hash: jzA4jxCzEMlyx7GLDIuObiY90eTPpxuRqUa3CtlcCok=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: HsNO/XOo7heY+mP1FY18iP1syzcuybkbQBRRtDsul9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:87:cc:8a:df:31:b5:c3:cc:f4:51:13:c0:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=50d81e5e6b55641f244638cf5506e4dd2749c13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:70:59:4b:3e:48:5e:4e:f7:d2:26:cf:b1:
b6:34:95:8d:07:b2:7c:68:4b:9f:c0:6e:ad:a5:71:
e0:39:3d:79:9c:6c:42:ce:e2:e5:e5:4d:b1:88:ec:
1a:9f:15:15:2b:bb:dd:4f:e5:7c:62:b0:ed:30:a2:
c8:20:01:17:9e:a9:55:19:ef:d7:8c:73:b1:41:8f:
96:c3:8e:71:80:bb:5f:54:d8:71:e4:8f:ae:b0:01:
95:87:b7:92:1e:db:f2:62:db:aa:59:65:df:39:5f:
67:2c:03:c8:11:c7:f8:19:fe:23:1e:50:33:a8:ce:
cd:32:96:51:f7:63:c3:a8:fd:2b:9c:bd:6a:9e:bf:
09:88:4e:bf:be:55:ce:fe:dd:70:fb:63:d1:1c:5c:
6c:86:fd:77:8f:89:df:e9:62:7e:ee:87:78:68:7e:
ee:43:3c:26:ad:66:45:75:4f:70:fa:9c:db:ce:39:
57:fa:c3:d2:0e:2c:46:2f:ea:3a:16:71:6d:a3:a8:
16:d8:e0:20:ec:8a:e3:8b:1b:d9:6e:59:df:4f:2d:
7d:b9:2b:e6:68:41:94:79:05:6e:15:48:50:1c:c1:
ff:07:2b:dd:ce:e7:e9:0a:8f:ec:79:25:fa:60:65:
44:de:7c:c6:95:7d:6e:77:d0:12:9d:97:20:27:95:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:1E:5E:6B:55:64:1F:24:46:38:CF:55:06:E4:DD:27:49:C1:3B
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:48:24:f6:47:e9:ad:04:77:30:10:10:8c:75:82:9a:96:
73:2c:de:cd:6a:db:21:12:35:31:88:84:77:1b:7b:17:22:e1:
29:cd:5f:90:4d:cb:22:49:33:10:10:d6:8b:95:96:1d:85:06:
4d:0a:04:10:bf:86:d3:a3:77:b1:b2:f1:d1:b6:1d:c4:61:80:
c5:32:07:3d:d2:ee:8c:8d:a1:c0:c3:dc:ab:14:b6:08:43:20:
dd:2a:e6:bf:66:56:c8:4b:63:a5:bb:c3:b9:4c:f4:52:44:bc:
c7:73:92:69:68:6b:cb:df:73:7b:7f:25:97:3a:2e:cb:b1:e2:
b7:01:9a:f4:4a:30:af:ee:9b:fb:f2:10:04:cf:5e:30:0b:a7:
00:56:38:8b:ff:ba:16:e6:15:bf:fd:60:f8:5b:7d:19:ee:1d:
05:dc:0f:49:18:91:f4:74:20:58:b9:6f:24:89:69:0c:21:47:
59:ca:d2:8e:15:54:94:1d:b0:ca:dd:66:7c:6a:0a:fc:d2:41:
43:fb:40:f3:04:8f:19:1e:40:c3:14:11:1b:e8:2e:f5:65:64:
86:8b:38:2e:51:4f:52:d9:fa:f9:de:7f:b4:ba:4d:f7:dc:56:
96:1c:4a:7f:2b:bb:7c:e9:f6:d4:c5:91:fa:1a:8a:31:04:1c:
98:3c:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:15 2026 by rpki-client