Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: bMQrV02rVgtKkjLAcc0H+nVYcFwlTtqz22pa01IXQX0=
Subject key identifier: 4C:1E:77:3C:B7:25:7D:81:0E:76:9D:B6:3B:B7:F0:F1:FD:B3:8F:2B
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019D2703CD1CF633BD93ECED463FF3B99862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: Of/cuDKtU+H83n6U4PaRhz4NM4t2XacCWXV/ftUu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cd:1c:f6:33:bd:93:ec:ed:46:3f:f3:b9:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=4c1e773cb7257d810e769db63bb7f0f1fdb38f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:f6:fd:f0:3a:1d:b0:f4:7e:a8:50:5e:a0:
45:1b:98:cd:35:41:92:26:0b:14:a1:1d:37:7b:43:
c3:1c:d2:72:2a:e5:38:9e:e9:36:9a:ba:1a:f5:df:
ec:1f:8c:97:c7:c3:1a:5f:40:e8:bf:fd:0e:2e:fc:
c0:0c:bd:bb:e5:5d:f5:12:ba:2a:72:03:7e:2a:b2:
2f:f2:97:4c:f5:f6:3d:53:4c:64:5f:c5:66:7f:19:
ac:d2:70:65:da:78:fb:f9:3c:1e:12:a9:b2:53:f6:
e2:9a:4e:3e:4e:2f:cf:f8:9c:87:d0:ca:a2:c4:6d:
ec:df:36:d1:e8:16:c4:01:6c:52:2a:8f:8b:a4:ae:
d7:cd:7b:58:1d:70:d8:c9:81:5e:f9:dd:7b:63:c8:
fe:2f:d4:df:e1:19:c7:a3:38:55:9f:33:5e:7f:3d:
18:18:07:d6:ea:5f:2a:3d:49:a5:3a:5c:32:a1:62:
f4:58:5d:c1:50:3e:29:36:60:61:4d:4d:4f:c4:3a:
a1:ea:33:c8:96:64:9f:8b:c4:19:80:59:e1:4a:4c:
e8:50:eb:5e:d9:10:90:a8:55:00:67:5f:57:b8:08:
d6:8e:87:f6:d1:f7:46:82:f2:0d:b3:af:ca:84:c5:
10:00:c4:85:c9:d1:00:db:7d:17:56:a5:67:ea:0f:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:77:3C:B7:25:7D:81:0E:76:9D:B6:3B:B7:F0:F1:FD:B3:8F:2B
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:26:49:e0:4f:cf:06:3f:a5:9b:9f:a1:39:bf:8a:e6:2e:
e6:2c:2e:b3:02:6f:f5:b6:84:4f:aa:19:0f:d2:b2:86:a3:f5:
32:ac:1d:ee:bd:ae:05:80:5a:87:00:50:e0:2e:2c:00:66:c5:
a1:91:6c:a9:9e:94:8d:cc:1e:f5:44:a9:fc:05:28:14:57:fa:
99:8e:be:64:94:fe:9c:85:43:8b:b7:58:bf:12:4a:b9:65:c5:
05:e8:5b:b3:de:1a:09:74:9c:5c:eb:84:76:c2:2c:38:c2:19:
2a:4c:a4:c9:ac:ee:73:ac:5e:22:cf:cf:74:d8:d8:3a:55:f3:
7f:c1:8f:01:a6:e8:67:4b:9f:84:5e:50:81:b9:9e:b2:c8:16:
87:44:fa:26:2d:85:d5:65:17:cc:0b:68:7f:96:8c:24:c2:d1:
39:4a:fe:da:52:91:eb:03:60:e7:59:af:93:27:19:7d:ca:e0:
a8:bd:46:ce:69:68:96:41:ba:22:fc:3d:67:eb:9e:ef:59:6b:
ad:3f:db:41:e4:40:78:c7:7f:04:a5:2d:f8:f0:1b:22:66:4a:
dd:ea:62:6a:4a:70:20:86:27:82:66:e1:cc:80:38:f3:81:ee:
f8:a4:06:6b:15:6d:2d:85:da:4a:a8:fd:5c:81:f0:42:67:1d:
78:f5:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:16 2026 by rpki-client