Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: XykGyAR+A2F4NVvtTBMs3HHdWbo6UnBQzJ+NIRntkr4=
Subject key identifier: D2:23:FA:82:C6:14:74:95:43:9C:87:45:3D:0D:87:67:E9:E0:13:FF
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019D284DEFB0FF2EDCB403B0C89E331A0DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
2: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: +x6YJGhaEvC82NApeVa/swrxl2il2+b1UElf0hvv/b8=)
3: rXih05-yjhK1RRUZMN39mSUsOFU.roa (hash: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ef:b0:ff:2e:dc:b4:03:b0:c8:9e:33:1a:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=d223fa82c6147495439c87453d0d8767e9e013ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:78:e6:a1:75:5e:97:04:58:1b:13:38:3d:
a3:50:f8:8c:6f:ca:bc:7a:0b:3b:a3:5d:98:45:08:
53:3a:1f:3a:ef:4e:2b:9d:4f:39:a1:fb:40:8b:4c:
1a:02:6e:90:11:ed:93:2e:35:68:60:5e:ce:9a:4f:
5f:d3:53:9e:a5:b7:7e:3b:13:42:35:96:0b:4a:ee:
67:b3:af:c5:ff:8d:5e:35:98:98:8c:c5:84:b0:ca:
cc:65:dd:c6:3d:7d:8b:30:1b:00:0d:6e:70:0f:1d:
ea:90:87:70:61:64:d3:92:96:64:d7:c0:9f:1e:88:
10:bc:71:39:77:77:f2:44:51:9c:02:da:34:f8:d1:
b4:ce:3e:5a:06:8a:07:dc:52:e8:9a:3d:f0:5b:88:
29:f4:83:ab:29:96:b8:4b:95:a3:2d:b1:aa:c2:ca:
e7:07:dd:cd:87:e8:63:35:48:e5:58:03:13:e9:2c:
b8:d1:62:7a:e9:a9:11:25:74:e7:c1:6c:81:89:09:
2a:59:d9:76:3b:48:82:c0:be:c6:9e:ed:9f:a1:0b:
e4:8b:77:57:47:66:10:1d:71:09:af:92:43:72:96:
89:a1:dc:db:de:a3:b7:85:29:4c:6b:f3:2d:3b:83:
71:3e:d2:5e:97:2a:21:ce:92:1c:4a:b8:9e:74:96:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:FA:82:C6:14:74:95:43:9C:87:45:3D:0D:87:67:E9:E0:13:FF
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a9:91:78:ca:c6:aa:da:61:7e:fb:c9:d0:1e:b8:08:fb:05:
e5:a1:bd:bf:8a:ff:4d:e8:3d:ce:e1:e2:f4:6a:38:2d:ca:78:
7e:0f:6a:cb:65:44:b1:4b:d4:ed:d0:91:8e:99:db:1c:ef:65:
f7:61:b2:d6:c2:28:cc:b7:1c:31:61:67:9c:03:44:b8:a7:8c:
6b:4e:56:3f:cf:0a:c5:0f:d7:52:49:95:ec:9b:3f:fc:94:a7:
4b:5b:28:d8:3c:42:14:1f:88:19:6c:10:d1:14:8f:37:3b:53:
ea:38:a8:02:ed:66:38:6b:ed:7d:51:a2:38:5a:0d:2a:42:10:
ca:bb:17:e0:d9:80:db:40:56:c8:a2:4d:a9:32:55:af:ff:b7:
73:f2:0d:d3:01:a3:0a:a4:fe:43:b3:32:f3:99:96:18:73:af:
1f:98:74:ec:ff:12:91:af:82:53:cb:b0:c1:63:2e:57:bf:28:
a7:f4:48:96:e1:76:62:7a:2f:8b:b9:10:24:7d:f4:dc:02:23:
f5:bd:dc:d0:fa:ec:bc:0d:a6:c0:29:0b:e1:cb:2a:ca:87:ac:
85:6a:a5:8d:b3:03:f5:58:a0:ab:82:54:20:4c:7f:a5:49:fb:
f5:61:7e:80:ca:3b:18:0e:9f:01:0f:d8:fe:12:45:1c:07:3b:
44:3f:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:10 2026 by rpki-client