Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: a+KxsakX6ti7u0EHabyGDa1OuM3faQ9FsS7iUdl7w/I=
Subject key identifier: 94:DF:62:2D:7B:77:EC:CC:88:87:61:FA:1C:80:95:53:3E:7C:2E:C2
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019D28BB372EB5320140BA22B2F03BBB17A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: N/+yoQT8OOvA74aR1wKj5USBndV6VuRjrJ6CGE58c+U=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:37:2e:b5:32:01:40:ba:22:b2:f0:3b:bb:17:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=94df622d7b77eccc888761fa1c8095533e7c2ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:e8:c8:eb:d2:9a:9d:d3:fd:43:36:31:f1:
c6:ec:82:4b:5b:33:3d:7b:fe:fc:c1:6e:7b:e6:a5:
3e:7a:fd:be:cd:bb:ce:d8:e6:25:bf:d5:63:b9:85:
69:85:6a:90:85:bf:14:e7:b9:24:3c:c9:76:18:67:
ef:ce:46:48:cb:7f:ee:74:a6:6c:1e:7b:01:6b:8a:
20:7a:c2:e9:3c:44:52:1e:2b:b1:f4:e2:a6:ce:b9:
8b:50:fa:ec:75:88:bf:48:2b:48:80:e3:4c:4c:0b:
32:a4:2c:a5:1e:5f:c8:42:20:88:5a:e8:04:bb:4e:
07:28:8c:06:bf:82:45:bd:52:7a:8d:46:e6:d6:e7:
d6:28:af:d0:15:fd:18:c1:92:b9:1a:06:04:9f:3c:
9a:cc:3b:d1:70:1e:72:cb:9a:1b:27:82:6b:b9:3a:
34:d7:df:bb:dd:21:c9:70:d6:b5:00:2a:2b:1e:ce:
9f:b9:36:76:b5:da:33:7a:8b:c0:68:a4:d5:b6:14:
d4:37:ea:2f:92:b6:9e:1c:c6:39:35:d6:95:97:fa:
dc:27:f5:b2:40:0c:c9:ad:bd:68:1d:63:4a:8a:f1:
7b:96:18:4c:d6:8a:c6:8c:90:4d:a6:d5:16:11:df:
ff:8e:e7:8a:94:ea:2e:b2:9c:80:35:f9:0f:a5:d5:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:62:2D:7B:77:EC:CC:88:87:61:FA:1C:80:95:53:3E:7C:2E:C2
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:4f:ed:b8:d7:f5:96:8b:f6:a1:cd:25:27:9e:22:7d:ea:
d2:23:cb:50:b6:aa:05:06:45:18:9d:f0:45:a5:89:6e:e3:58:
2b:70:38:8e:3c:0e:f9:b7:d5:56:c3:30:20:8c:ae:b8:e9:fe:
29:9d:bc:56:c4:20:4f:0c:00:ca:6e:8e:8d:8a:9a:bc:f0:04:
14:bc:a9:69:14:6f:8e:47:24:37:89:13:0a:1b:da:df:ea:34:
cb:13:72:0e:2e:bc:34:5e:45:19:06:6f:7a:61:59:79:cf:ac:
2e:e0:6a:eb:72:62:ce:32:ec:be:f9:da:19:96:7c:f3:76:dc:
c8:eb:fb:6e:97:68:24:95:fd:03:ff:1a:59:9e:08:ef:63:f3:
e0:a4:98:dc:d1:d3:95:06:e2:f4:2c:1c:d4:fb:a2:5e:e6:53:
15:4b:bd:aa:0e:ea:62:56:71:6e:32:76:62:28:1c:89:69:86:
05:9c:00:1e:3a:e7:77:81:22:dc:21:97:51:f0:4c:ed:26:8f:
5b:23:2c:71:22:ba:d4:9f:a1:80:74:db:ad:7a:c1:bf:58:81:
03:7e:7d:e4:68:d0:64:5a:05:7c:4b:f8:bf:05:69:27:e7:20:
00:6e:42:16:2d:4f:71:9c:2b:3f:3e:58:99:1e:d5:30:d3:fe:
10:00:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:45 2026 by rpki-client