Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: Yo3+x932yCRUg4eKX64ZsJ7I7l+0sL+3/DAO9Ih24hM=
Subject key identifier: 78:E8:30:76:8A:99:59:0A:7B:A5:00:B8:C6:CC:C8:A9:A9:25:3B:E7
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019D269607C641288891465010C8877EA404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 157E
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: OSy1C4bOWSLi5woq5jUxV+s2kUOG8BSn1OZxgLoYDUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:07:c6:41:28:88:91:46:50:10:c8:87:7e:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=78e830768a99590a7ba500b8c6ccc8a9a9253be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:e8:d5:76:a5:42:0d:5d:8a:4a:47:b8:f1:
e7:3b:07:f2:8c:44:ea:1a:77:d3:b7:3c:0c:67:ba:
97:e9:e5:01:5a:ca:a9:35:ca:b5:78:d2:43:e9:cb:
98:1e:2d:4a:7f:18:ad:42:95:4a:29:9f:5b:4e:73:
9b:aa:aa:d6:1b:b1:b2:39:d3:68:a2:a6:40:32:a7:
2f:f6:55:bf:f6:32:7d:af:bc:c7:d6:3c:ad:08:20:
c0:e4:9c:3c:de:4e:7c:75:b4:54:a4:7b:c5:15:55:
59:aa:a9:6a:aa:70:0e:83:77:2a:f3:e7:9f:f2:6f:
aa:83:3c:af:bf:26:7a:e3:7c:95:46:4a:27:6e:98:
4b:65:82:d9:12:ed:aa:ff:3a:4c:dd:fa:fb:4f:24:
b7:a2:64:c4:b3:35:9c:06:d4:26:bf:b4:59:55:e8:
35:00:9f:28:c1:be:61:7f:58:f3:73:06:83:c3:ce:
01:00:64:a5:25:cb:60:a7:a0:d4:b5:91:c5:0b:94:
16:f4:b3:4c:54:07:0d:8f:30:28:ab:a8:3d:65:d3:
c0:fe:8e:cd:1e:36:33:18:cb:30:67:b5:fd:45:eb:
5b:ce:d9:0c:6d:5c:c8:2f:be:c2:52:f1:4c:56:f1:
b8:d3:e2:1f:6b:a9:73:1a:c7:4b:61:4d:50:0c:50:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:30:76:8A:99:59:0A:7B:A5:00:B8:C6:CC:C8:A9:A9:25:3B:E7
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:a8:b2:32:72:1f:d6:ee:7a:bf:de:da:ae:29:ae:66:bb:
5b:84:d8:5c:ea:16:0a:a3:05:74:06:8f:cd:95:45:1a:36:8d:
1d:11:9e:1d:22:f7:14:33:bc:60:f0:2b:b1:55:17:62:a9:f6:
34:d7:c6:d5:9f:66:9a:22:2a:c5:39:67:cc:9b:47:4e:53:6d:
32:87:be:be:9b:cd:ac:16:ef:3c:67:59:35:26:74:f3:62:4a:
6c:4e:30:52:3d:3c:aa:92:66:1e:ce:e5:fa:a5:45:bf:e9:46:
22:fb:10:ad:b9:49:a3:ac:2e:92:fb:10:4a:01:31:78:10:e0:
56:15:7c:b5:f6:68:e8:10:67:92:47:a2:0f:f6:24:19:1b:28:
cf:ba:1b:e7:2f:c9:4d:db:77:ac:ef:cd:f8:36:38:d3:0d:eb:
76:10:d1:9f:89:d3:73:14:8d:89:7a:be:70:40:df:f4:ef:48:
50:aa:28:21:76:e3:83:24:59:09:cf:22:13:e7:63:ef:20:44:
99:4c:e2:ae:2b:b0:f7:21:05:2c:43:0b:a5:6b:a1:a6:68:d4:
a2:d3:bf:e0:13:e3:3d:4c:68:6a:dd:eb:ae:6d:a0:3c:7f:83:
54:78:88:70:e1:79:6d:5c:b5:52:57:08:09:d3:40:25:38:39:
99:fd:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:54 2026 by rpki-client