Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: 9+wZ14FgnrmfBP/8tkqpW6g6ZCv1iiIxSCm+bNkSRJo=
Subject key identifier: DE:0C:D2:31:5E:D0:75:C0:53:11:2E:5D:43:75:C4:07:01:AB:B6:72
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 019D27A946CE830473361DAB2686AF8B6EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 15A1
Signing time: Thu 26 Mar 2026 01:01:38 +0000
Manifest this update: Thu 26 Mar 2026 01:01:38 +0000
Manifest next update: Fri 27 Mar 2026 01:01:38 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: hjxTa78kx3NTedjG+/q1a1ZL9FH29z5uzymfZKGgbVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:46:ce:83:04:73:36:1d:ab:26:86:af:8b:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Mar 26 01:01:38 2026 GMT
Not After : Mar 27 01:01:38 2026 GMT
Subject: CN=de0cd2315ed075c053112e5d4375c40701abb672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:97:53:3b:c1:57:b8:26:be:c2:2e:3b:c8:
33:45:99:7b:8f:0d:a4:8d:75:1f:92:73:2b:19:dd:
2a:54:99:82:04:40:a3:e9:1a:69:7d:cc:5f:3c:d8:
22:91:7e:27:dd:8d:7e:18:54:64:84:28:3b:4f:4a:
26:62:bf:36:6f:68:68:d9:09:30:18:c9:f2:1b:6e:
1f:f5:59:87:10:8e:38:34:60:a0:75:a8:20:87:e0:
5e:50:df:b1:27:c1:a1:83:35:fa:20:5a:fe:40:86:
c9:8b:60:b0:10:71:b4:56:e8:0a:fb:58:1b:bf:e1:
8e:53:1d:58:07:2a:2a:a8:f7:30:e8:c1:37:ae:cb:
81:67:a5:9d:2d:aa:ca:bb:45:c5:d5:8f:50:7c:6f:
43:e9:3a:f9:4c:44:71:88:24:d8:b8:b3:66:01:e0:
25:33:5d:42:1f:66:ff:95:93:2d:d3:e8:a3:61:00:
55:25:bc:91:40:4e:db:06:36:88:71:ec:78:1c:92:
34:f0:c3:10:c3:e8:fb:fd:3b:77:46:fa:f5:1b:3d:
5e:20:69:7a:9c:f0:c7:15:58:94:98:40:e3:52:70:
37:6c:32:ba:a8:88:24:e0:a2:54:ca:eb:f5:04:27:
7b:20:05:ec:c8:3a:24:eb:25:b3:dd:2d:23:26:28:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0C:D2:31:5E:D0:75:C0:53:11:2E:5D:43:75:C4:07:01:AB:B6:72
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:54:97:31:60:55:07:8c:f9:13:20:c7:3c:bb:65:c0:d6:
43:d2:40:20:68:77:d3:64:5e:6a:e1:a9:50:cb:4e:83:09:f3:
9f:b1:03:d4:eb:59:42:45:89:89:0e:26:5c:99:87:5a:90:8d:
60:e8:db:51:ba:cd:4b:fa:9b:47:41:a9:f9:6e:ef:cc:63:74:
c4:43:4a:0a:19:32:ca:06:82:9b:ce:2b:1e:a5:21:21:ef:1b:
dc:ce:50:39:7c:e0:36:6a:65:98:2c:4a:fa:96:7e:09:17:98:
b7:b7:eb:98:93:37:85:f9:bf:70:5b:dc:34:d0:d9:bc:fb:20:
02:5b:80:8e:a1:15:cd:2f:2c:77:85:6b:2b:1f:4f:62:77:64:
c6:ce:f2:19:7b:15:76:6e:35:24:e7:1e:72:37:10:a0:96:86:
6e:d1:74:55:3f:1f:87:3b:f8:90:dd:59:dd:e2:17:6d:ac:e5:
4d:26:0b:19:3f:dd:c9:4c:8e:bd:41:be:1d:c5:35:0f:08:88:
85:41:7f:7a:a5:21:46:a8:18:5e:c1:94:96:43:3f:8a:4d:a4:
d2:ee:5a:09:40:7e:35:83:6f:b8:8a:fd:4e:cc:6a:06:d9:6b:
c3:e7:01:4c:2e:2c:27:46:06:4e:ce:9c:e6:1d:42:8a:5a:48:
28:01:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:45 2026 by rpki-client