Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: zux2oYWYIn19Q4cE69TqpHRO9hpmvUCcDezO34pM4r8=
Subject key identifier: 65:81:2A:FC:32:44:6C:B9:AD:47:32:06:E5:28:B3:0C:02:8A:F8:6F
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019D2A3BE9C48D2A64BE2B8016ACDC7F8F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
2: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: M2bs9xU+HIXJCChOVrt62Qj2bXc/jcUEmu3BfYkBcHE=)
3: rXih05-yjhK1RRUZMN39mSUsOFU.roa (hash: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e9:c4:8d:2a:64:be:2b:80:16:ac:dc:7f:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=65812afc32446cb9ad473206e528b30c028af86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:34:8f:a9:75:16:a1:b5:63:5d:86:c3:f3:
da:f7:17:51:10:65:98:03:5b:c1:98:06:56:8b:0c:
3b:42:c9:77:b7:05:f0:b3:04:fb:d2:2f:45:69:33:
3a:fc:af:cb:ec:86:8c:11:c9:49:c7:2f:fb:7d:b6:
8e:83:d3:03:55:05:fe:94:fd:d6:0b:50:26:06:85:
a7:1e:06:42:9b:31:87:88:f7:14:a5:5b:ac:cc:1d:
48:dc:48:89:55:52:0d:0b:05:63:5d:22:26:c7:f1:
a2:7b:a0:49:a2:dc:6a:1b:4b:b4:c2:ca:6b:06:c1:
70:10:d3:a0:e2:73:6d:f6:47:67:84:95:51:46:71:
4c:2e:2a:86:65:71:4c:5e:82:f1:82:18:43:f5:3e:
80:bb:38:a8:92:d0:31:a0:9d:b7:59:7d:9c:8e:f0:
cc:a9:84:45:6e:60:ec:74:98:5d:c7:66:06:41:14:
44:07:a3:0a:5a:63:32:a8:2f:47:e4:1f:2a:f2:e0:
ff:1b:af:46:d0:f6:de:74:c5:9f:65:12:4d:d8:b2:
31:5a:0f:c1:36:17:cb:39:11:0a:67:da:2f:0b:ee:
c4:64:fc:ff:6a:83:24:22:f4:e6:c9:30:ec:9c:45:
90:c4:29:ee:9b:c8:89:04:06:00:5c:77:45:92:cb:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:2A:FC:32:44:6C:B9:AD:47:32:06:E5:28:B3:0C:02:8A:F8:6F
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c7:48:8d:1d:34:f9:36:f8:90:ea:c9:8a:b2:91:a5:8b:23:
f0:3e:39:bc:cb:8a:4f:79:c2:54:b3:c7:36:90:1c:96:64:07:
63:af:58:30:d1:32:6a:ca:5d:34:d3:dd:ac:94:45:92:b8:79:
09:2b:4f:86:63:e9:0e:29:ee:11:1c:3a:33:02:e3:9d:ac:14:
7b:b0:ff:09:53:45:9d:5c:f3:ae:19:21:af:91:32:3d:90:f5:
fe:60:fd:ae:85:9d:79:97:94:f6:75:52:21:01:40:78:af:9f:
47:bc:03:77:e5:90:5a:b5:96:da:56:3f:c3:22:f2:14:c4:88:
83:20:32:1b:22:fc:b4:d7:61:46:88:fb:df:dd:e4:8f:65:0a:
47:c8:82:05:5b:97:2e:bb:ba:05:2f:cf:77:80:93:09:95:7e:
9a:f1:d5:ba:82:73:ab:29:a9:34:a7:57:c8:5a:ea:be:6b:25:
ec:8c:24:b3:a4:cb:1d:d8:4d:7d:13:31:37:2c:ff:3b:dc:12:
fd:99:a2:0f:e1:10:d5:6c:38:53:79:15:24:88:70:cc:10:76:
12:44:3f:ba:5a:04:b7:d6:43:c7:10:72:7a:86:d1:fa:b1:78:
a8:bc:ea:3b:e6:3d:d1:85:ae:0a:38:a2:2b:ed:e5:9a:bd:47:
b2:e7:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:01 2026 by rpki-client