Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: aK1/iyZWgvy3W3K/PedeF1JO7p9Qcv3Rx6N3nUjdx7U=
Subject key identifier: 2D:30:D7:BB:40:25:A8:C2:79:45:EB:F8:31:A2:4F:4F:AD:98:75:12
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 019D28165516F614C0C2E951C783AE3AB6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 12F6
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: MbLIlykrQYjYoxOxJX_Xi7Q0gqo.roa (hash: JZAWsqEaWoolF2K9I8eqAWU5dEjO9ZBoN8vPUph4Lm8=)
2: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: A5HC+axMKYYlv9L8T92FkVIR+CQuNz0PJcl0ChABrrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:55:16:f6:14:c0:c2:e9:51:c7:83:ae:3a:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=2d30d7bb4025a8c27945ebf831a24f4fad987512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:03:be:f0:9b:a6:c4:e0:e8:2b:7d:f4:8c:
d7:01:c4:75:22:84:25:03:ef:d9:14:0c:88:b3:94:
e6:a0:f6:d0:ee:b3:a1:08:72:ea:46:54:f8:7d:92:
86:d4:6c:fb:6a:ec:c1:a8:7a:fb:c6:81:c2:5e:ce:
3b:50:b9:66:fc:1b:12:f7:e4:fd:3d:5a:11:f4:80:
71:1a:ad:fe:3f:9c:20:c8:03:df:62:3f:b2:2c:fd:
49:5c:83:38:4d:b8:33:cd:a5:24:bf:53:6b:8f:89:
60:a0:f0:83:76:c4:fb:24:2c:7d:68:da:f2:82:e5:
bb:e8:c2:82:a7:73:db:02:e0:fb:dc:ef:d0:f3:ec:
34:e8:ea:3d:50:0f:b0:cf:4c:4f:23:1e:ed:49:fa:
b7:76:f2:bb:b7:5d:6f:10:f1:f9:3c:f4:79:51:78:
2c:99:e9:19:25:38:64:9c:8b:5d:58:6b:be:29:fb:
a7:c6:a7:28:ea:97:59:5f:01:55:57:d9:31:bb:b5:
29:06:6a:bb:34:71:78:5d:a4:8c:33:be:aa:7c:87:
38:fb:57:8c:df:81:99:ca:b8:4d:9d:c0:3f:a3:cd:
49:72:5c:5f:8b:64:00:a5:ad:ab:c4:90:7a:ae:41:
4f:fd:d6:18:cd:9e:21:03:09:2b:75:40:85:e4:66:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:D7:BB:40:25:A8:C2:79:45:EB:F8:31:A2:4F:4F:AD:98:75:12
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:75:d4:20:9e:70:60:44:69:7c:79:e3:fd:22:61:35:ca:
cf:82:9d:ff:31:f6:c7:32:fd:22:27:5f:d8:ae:6e:0b:ac:50:
d1:59:72:94:9a:13:c5:ea:59:5b:5e:1b:85:f8:57:33:be:93:
22:21:76:6a:50:48:6f:02:bb:71:b5:b8:2e:c8:3b:c3:d7:8a:
32:3a:e5:92:14:54:44:57:53:be:01:b6:a6:6b:82:b0:cb:69:
c8:ef:55:12:cf:c0:da:e2:a7:59:68:d7:59:69:8d:9b:e4:f8:
a6:c8:14:87:f4:10:ce:63:84:26:6c:96:33:f6:57:20:19:96:
c4:4f:45:08:3d:43:ee:b4:a0:93:10:f3:95:c4:b4:67:b5:7d:
cd:b0:a8:75:e4:9c:4d:c2:65:f9:0d:28:60:5b:88:8c:0e:b4:
88:97:40:12:93:82:38:47:dd:30:1f:1c:a5:df:fb:67:ea:a6:
82:96:5c:33:d7:3e:4e:e4:f2:cf:16:ad:c4:ab:65:30:2b:fd:
72:a3:03:cd:35:53:69:6a:29:6a:c4:62:06:c9:37:b9:e7:20:
63:c8:c4:7c:4e:d9:44:8b:b6:c6:41:14:19:91:d8:c3:0d:f5:
bb:ff:02:12:8d:0c:0b:e2:0b:6d:35:4d:79:ec:81:9a:5a:13:
85:84:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:49 2026 by rpki-client