Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier: KR3SiHYwLU1Z13z7JXr3PirhiZJ1v/P+QSO0GnKhQuQ=
Subject key identifier: 48:A3:05:BB:69:7E:7F:4E:C2:12:61:F7:1A:62:97:65:73:5B:8F:60
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial: 019D277246272783861E36BDDBF06FECE8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: RxByI3rH_YsmBp9MFWCFAA3GDzM.roa (hash: kPBLDDqbqmranSBPQ+O5l9xhMyzuVrqfoP6GlvpDNU8=)
2: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: fbaLDIAAZciibTAb3rcQsbZQgqfyVXM9Cr9plFqWIIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:46:27:27:83:86:1e:36:bd:db:f0:6f:ec:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=48a305bb697e7f4ec21261f71a629765735b8f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:ab:cd:4a:58:7a:44:dd:ae:3f:fc:0f:ad:
99:e1:22:f7:e6:35:4f:86:b3:11:5e:37:62:01:1c:
37:c6:91:f1:75:4c:c7:a4:10:0d:d2:ae:0b:d7:6e:
4c:2c:24:ab:cb:2b:7b:ab:df:37:31:8c:44:80:53:
7d:42:92:c6:7d:af:2d:fc:86:9a:7c:d0:19:63:79:
b3:6f:be:ef:a9:30:a8:7d:99:25:3c:d3:c9:6d:46:
e2:b1:45:4d:e5:97:ba:e5:a1:0b:6a:97:38:4c:70:
8c:2f:93:7f:04:3e:f0:65:d3:f1:df:07:4c:91:01:
4d:c6:2e:9d:50:df:08:a0:39:86:fc:ff:51:90:ae:
2e:ba:e6:18:73:30:59:f2:06:62:3c:d6:fd:6d:8c:
51:6b:56:4f:5a:f3:00:b0:b2:7c:b1:32:be:e0:5f:
dc:37:ec:5f:54:81:51:91:d6:b8:ea:e9:69:68:85:
9f:f0:f9:14:60:17:c1:6c:a8:31:16:9d:50:29:8a:
8f:db:38:02:7e:99:10:a4:18:ce:04:df:b0:7f:e7:
3e:50:bb:9c:f0:40:a4:91:df:fc:d1:5c:04:c9:dc:
2f:c8:a7:2f:43:2c:72:8f:69:b9:a2:7e:e9:28:69:
66:cc:36:e5:8b:00:75:52:27:f5:90:22:56:8e:55:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:05:BB:69:7E:7F:4E:C2:12:61:F7:1A:62:97:65:73:5B:8F:60
X509v3 Authority Key Identifier:
keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:79:53:4a:95:29:d3:80:c1:c0:5c:4c:ee:82:0e:1f:fa:
7f:d4:0b:0a:15:07:60:c3:7a:62:9e:44:a4:df:c7:3f:7e:b9:
19:ca:3d:b5:d6:8a:dc:dd:95:62:9f:74:0d:a7:d0:c8:50:d6:
c3:95:4f:c7:90:4d:0e:10:44:f5:99:ef:9b:57:11:50:c4:73:
ce:fe:28:aa:06:88:92:88:44:15:ae:7f:de:c0:43:27:58:fd:
da:41:f9:3a:15:35:24:43:4e:99:c7:48:d1:d0:f3:d5:19:93:
c7:6a:14:e8:22:0f:4d:cd:52:84:98:d7:da:c1:9b:fa:5f:41:
de:c8:1d:2b:2e:2c:03:d3:e9:56:d5:24:ed:4b:f3:2f:45:53:
c5:b4:69:da:22:70:f3:b0:45:07:19:ac:c1:62:10:6c:aa:63:
8b:79:61:17:59:49:47:a0:8b:46:de:b0:01:06:05:17:3e:48:
c8:6f:b3:69:fd:90:91:ff:aa:75:33:5d:70:39:4e:b5:e6:52:
61:1d:17:73:64:f7:8f:96:94:27:22:a5:b9:d0:c2:1a:72:b8:
d0:f1:53:fa:3e:d5:d3:d8:00:3b:cc:d7:f7:a3:e8:00:6d:c6:
9b:9d:b1:b6:3c:20:b9:70:9e:98:75:4b:ba:56:0c:f6:32:dc:
04:68:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:43 2026 by rpki-client