Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: ukAfS4W9ax8DM8sOzuWyemvUXGkE+TvN1eepKoqnjUQ=
Subject key identifier: 54:0A:60:38:2C:C3:33:2A:2E:14:0A:6C:8A:0F:87:EB:2A:71:2C:34
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019D26CCDD00F8F328861FADB6354DE92EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: EqvKSR9iXegXy1dMoZ2bleJg3E0.roa (hash: vK0XksnitfnobMuyE2LGuN8IoAOExUJuqPdiZ3yM2Co=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: CPQ90kWGgKTcflgMa0WABPdvKETRpZ/Z6SNCADE01qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dd:00:f8:f3:28:86:1f:ad:b6:35:4d:e9:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=540a60382cc3332a2e140a6c8a0f87eb2a712c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:4c:d7:be:f2:d6:49:16:5a:43:dd:1a:37:
bd:3d:65:66:57:3d:52:19:aa:da:11:a3:7a:18:60:
8a:ed:2b:5d:15:f4:0d:44:4c:93:cf:00:5f:10:2f:
fa:5e:3d:d4:bc:65:bd:c8:a3:ad:ee:dc:01:44:2f:
e4:e2:20:f4:ca:0e:ca:95:cd:ef:4f:ef:a0:a6:90:
ab:ca:95:59:0c:f2:6b:41:89:ca:8a:e6:93:2f:54:
6d:e6:74:ce:4a:94:a6:ab:3b:76:bd:d9:2f:6e:c0:
b3:08:9f:3c:b1:af:f0:0b:0e:53:bf:87:29:57:f2:
5d:fb:69:7f:fb:ec:bc:53:a6:93:72:e2:92:fa:25:
34:65:fe:0f:79:f5:9a:76:ae:0b:25:ca:ae:37:8b:
a8:69:9b:8a:b7:73:b9:e7:20:1d:82:6a:d2:dc:a1:
82:03:9c:8a:6d:45:41:0e:2c:62:c4:3d:81:8d:59:
f8:5d:7f:af:0c:95:70:1c:64:5c:a6:a6:bc:6e:db:
68:bc:c0:04:6b:85:71:0e:77:2c:64:90:7c:dd:16:
3e:f1:22:09:3f:24:df:b0:c8:59:03:c5:55:49:12:
6d:ea:94:c8:8c:55:77:5b:2a:c0:a5:9e:e9:6c:dc:
28:65:78:11:ad:78:3b:46:38:f2:02:56:26:83:2c:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:60:38:2C:C3:33:2A:2E:14:0A:6C:8A:0F:87:EB:2A:71:2C:34
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:c4:ea:58:65:0e:49:be:ef:78:d8:38:69:60:d7:c1:4c:d3:
0d:b5:7d:b9:34:97:5d:c6:93:5a:45:f3:33:0d:d9:7f:76:65:
0c:a9:c0:76:0c:d8:81:63:61:52:62:00:f3:d2:0e:8a:93:f9:
5c:9a:c9:c7:80:12:20:72:fe:f8:a8:60:5c:0a:be:80:d4:8f:
6e:05:5f:97:87:ac:0c:82:f1:6a:31:30:b0:c4:96:e3:9b:8a:
ef:3f:d4:60:ab:f0:fd:59:da:6b:f9:81:8f:6e:95:4a:8a:a0:
be:2f:c7:ac:2d:24:e1:e9:a0:ef:66:d5:fb:9d:12:cc:1c:91:
39:2a:6d:87:88:4a:03:31:3d:87:54:e2:ad:9d:14:e5:87:24:
b1:9a:32:1f:67:7e:f3:e9:bd:d1:f8:7a:cb:a2:f8:03:45:74:
e1:e8:b5:bd:92:f3:6a:7c:b6:d9:39:c8:ee:5a:b0:3f:90:fe:
c5:28:1d:05:8b:09:be:c8:b0:93:23:b3:52:a4:22:71:cf:c5:
da:59:2e:ce:02:78:49:3e:b9:f3:c2:75:be:23:a4:86:47:6e:
cd:26:07:59:51:0f:8b:d0:1a:c9:f5:c7:47:2c:b5:7c:c9:27:
c6:67:6c:cc:9d:2e:a0:50:66:da:0f:69:e0:83:95:2f:68:e9:
33:ad:f1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzN0A+PMohh+ttjVN6S75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5N2VhNjBhY2EwZGRhZTVlZGRmYmMyNjBjYjdkYTI2MTYy
NGU5MWQwHhcNMjYwMzI1MjEwMDUzWhcNMjYwMzI2MjEwMDUzWjAzMTEwLwYDVQQD
Eyg1NDBhNjAzODJjYzMzMzJhMmUxNDBhNmM4YTBmODdlYjJhNzEyYzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBM177y1kkWWkPdGje9PWVmVz1S
GaraEaN6GGCK7StdFfQNREyTzwBfEC/6Xj3UvGW9yKOt7twBRC/k4iD0yg7Klc3v
T++gppCrypVZDPJrQYnKiuaTL1Rt5nTOSpSmqzt2vdkvbsCzCJ88sa/wCw5Tv4cp
V/Jd+2l/++y8U6aTcuKS+iU0Zf4PefWadq4LJcquN4uoaZuKt3O55yAdgmrS3KGC
A5yKbUVBDixixD2BjVn4XX+vDJVwHGRcpqa8bttovMAEa4VxDncsZJB83RY+8SIJ
PyTfsMhZA8VVSRJt6pTIjFV3WyrApZ7pbNwoZXgRrXg7RjjyAlYmgywMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQKYDgswzMqLhQKbIoPh+sqcSw0MB8GA1UdIwQY
MBaAFGl+pgrKDdrl7d+8Jgy32iYWJOkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTct
ZWVhZDNiOGJjY2I5LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYjQ5MzQtYTkzNy00MzI0LTlmMTctZWVhZDNiOGJjY2I5
LzEvYVg2bUNzb04ydVh0Mzd3bURMZmFKaFlrNlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6MTqWGUO
Sb7veNg4aWDXwUzTDbV9uTSXXcaTWkXzMw3Zf3ZlDKnAdgzYgWNhUmIA89IOipP5
XJrJx4ASIHL++KhgXAq+gNSPbgVfl4esDILxajEwsMSW45uK7z/UYKvw/Vnaa/mB
j26VSoqgvi/HrC0k4emg72bV+50SzByROSpth4hKAzE9h1TirZ0U5YcksZoyH2d+
8+m90fh6y6L4A0V04ei1vZLzany22TnI7lqwP5D+xSgdBYsJvsiwkyOzUqQicc/F
2lkuzgJ4ST6588J1viOkhkduzSYHWVEPi9AayfXHRyy1fMknxmdszJ0uoFBm2g9p
4IOVL2jpM63xew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:03 2026 by rpki-client