Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier: M4Se+88YPkstcrAbZ27ikFIuE9+OZ7hTcbwMBwZD14U=
Subject key identifier: 8C:F4:54:F0:79:46:7F:F7:7A:50:D3:03:50:C1:45:BB:A3:91:CD:6B
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial: 019D24718D590C7D3B48836DB72DFC42FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number: BF
Signing time: Wed 25 Mar 2026 10:01:54 +0000
Manifest this update: Wed 25 Mar 2026 10:01:54 +0000
Manifest next update: Thu 26 Mar 2026 10:01:54 +0000
Files and hashes: 1: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: 9e4Lmr/weuPZ2UKQZS52dtb+WZ9d6p9mIsN00qLmwKg=)
2: m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa (hash: 9lMkCyfIyGj1UpJgP+o5HSOV99to1p1lL2KxmkMnf2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:8d:59:0c:7d:3b:48:83:6d:b7:2d:fc:42:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Validity
Not Before: Mar 25 10:01:54 2026 GMT
Not After : Mar 26 10:01:54 2026 GMT
Subject: CN=8cf454f079467ff77a50d30350c145bba391cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:ec:38:bf:36:8e:d4:25:2d:f9:77:53:01:
35:81:d5:5c:49:21:27:1a:e0:a4:51:98:51:1d:fc:
d2:d3:7c:4a:77:ca:ce:d4:f5:b1:b8:20:08:eb:04:
ae:cf:c2:82:5a:c3:7a:86:04:e5:a6:d9:d2:a9:f9:
d8:89:d3:87:76:e0:f3:f0:df:88:ee:2a:08:a8:28:
8a:f7:91:e5:89:46:74:2a:e8:b1:a3:00:d0:f1:23:
ff:99:f4:e8:82:db:2c:f6:8f:db:7e:6f:d7:9b:57:
97:c4:03:cc:1a:7e:11:1e:5b:7a:39:ae:48:d0:d7:
7b:6b:59:8f:62:46:21:f8:b6:a1:77:0b:e5:3c:4f:
88:61:39:e4:c4:0e:ec:19:ed:cd:86:c9:25:a4:43:
a4:06:32:0f:09:81:ba:66:50:fb:1a:a5:75:0a:15:
cb:aa:d5:b6:9c:f5:53:88:36:e6:15:7b:b4:da:e0:
4b:7f:cf:12:06:96:ed:8d:3a:69:e0:f8:38:0e:52:
58:ed:0e:46:76:94:f7:c4:9f:a1:ec:8e:be:46:dc:
d0:5f:22:89:5b:7a:0b:f2:2b:8a:d5:8c:bc:b1:bc:
87:c9:83:24:37:a5:c8:84:4c:13:f6:4f:ff:45:13:
c3:ef:d2:71:e7:92:cb:b5:5a:e5:4d:4e:6a:8f:f7:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:54:F0:79:46:7F:F7:7A:50:D3:03:50:C1:45:BB:A3:91:CD:6B
X509v3 Authority Key Identifier:
keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:ba:64:50:05:8e:87:db:9e:fd:bf:2a:9e:36:1a:f4:4e:
fc:bd:eb:aa:19:c9:1b:04:59:dd:83:f5:a9:09:08:56:39:23:
e1:51:68:9c:fa:af:02:53:04:65:33:d3:55:90:d7:98:45:af:
79:68:cb:f8:99:5c:89:01:c9:5c:7f:50:71:42:06:b2:55:81:
4c:1a:0f:f1:a1:39:09:e5:55:62:fd:84:e8:f3:71:20:98:f5:
2d:22:03:0e:7f:e8:b7:62:59:22:c3:2a:b3:f9:fd:d8:72:79:
c2:64:8d:b9:f5:1f:84:cd:30:bc:ef:1d:43:0f:41:ae:a2:ca:
3c:95:58:cf:24:4d:60:02:89:25:e7:60:56:b8:e2:af:72:5d:
81:28:6e:94:0f:6b:8a:2f:86:1d:95:6b:20:cf:a0:92:52:bc:
38:71:8f:3b:d3:9c:b1:75:5e:47:81:ef:71:77:59:16:09:7c:
b4:99:f3:31:7b:e7:f5:7e:93:f0:43:27:4e:30:56:1f:9a:a6:
88:d4:9b:50:ff:85:f9:eb:ff:25:28:a9:83:55:9d:04:72:13:
95:f6:91:f6:13:6a:50:bf:59:db:09:0f:05:f2:c6:5e:20:a3:
82:63:78:14:b2:71:03:8c:d9:b0:72:c5:40:a8:1b:03:3e:8b:
a2:a4:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:26 2026 by rpki-client