Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: AhcSIOuKxTKr/iow3wti+kCL7tXRodNH7u5ueSz3kHY=
Subject key identifier: 31:39:E0:83:D1:87:D6:4B:FB:21:56:6A:07:5F:B9:FC:0D:13:04:0B
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019D29297D8430A2DB9A9577416A1A3A98C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0165
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: dFh4urnlgjondlMZMnlJYm4Z6TWmY2oGeraVHvcqHDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7d:84:30:a2:db:9a:95:77:41:6a:1a:3a:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=3139e083d187d64bfb21566a075fb9fc0d13040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:a6:0d:82:19:8b:58:c0:4b:7d:27:0a:35:
1f:c7:df:89:7f:2c:58:5c:f7:75:e3:9a:0a:7c:9f:
cb:99:c0:dc:43:5e:22:40:aa:af:c0:72:4d:70:14:
8a:9e:0f:ac:c2:c1:0c:74:3b:54:b4:0d:8c:25:1d:
97:72:c4:2d:fc:a1:ad:f8:7d:ed:7d:8e:c7:ae:ff:
73:04:f6:2d:68:9c:56:da:64:e6:a8:b3:00:26:63:
8d:bd:76:53:71:e0:b5:1c:8e:1e:58:53:a4:c6:68:
4a:4c:e3:53:5f:40:ca:7e:c3:5d:52:3b:e4:b8:8f:
ca:b3:cd:5f:db:65:f6:b3:61:fa:dd:79:fe:22:eb:
a1:ac:9b:f2:6f:ce:d3:ee:7b:75:37:23:4e:4e:91:
7a:dc:73:97:58:fb:0c:7b:2b:d2:ad:9c:6d:c0:98:
94:81:8f:43:35:18:fa:b0:08:96:01:34:07:5a:3b:
c4:7b:e9:91:0f:0d:11:39:c3:48:0a:09:0f:cd:1b:
20:1e:01:ee:49:73:46:41:53:4f:aa:e4:47:47:89:
6c:0e:60:63:22:d6:51:3c:14:fe:a5:87:a1:f3:f9:
b9:bf:b1:05:22:94:20:78:1c:87:79:6a:b1:76:5d:
66:94:ef:9e:cf:e7:e7:f1:ed:3d:b5:46:c8:32:8d:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:E0:83:D1:87:D6:4B:FB:21:56:6A:07:5F:B9:FC:0D:13:04:0B
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:ed:72:3e:17:81:29:73:74:21:3a:53:b9:24:66:07:be:
dc:e1:f1:9c:91:5f:f6:2c:51:61:65:a4:56:0a:bb:cd:8c:35:
05:38:19:0d:47:b3:ba:5e:14:79:48:57:f2:05:a3:f8:94:c8:
57:b4:1a:48:7c:18:1e:5e:f9:78:62:17:fe:8b:f5:a4:65:cb:
70:c6:ee:ef:16:b9:c2:e6:93:c0:ac:a9:5a:79:bc:e0:db:e7:
60:34:de:33:0d:86:9d:bf:9f:1d:27:c6:8e:74:9e:dd:6d:c8:
2e:6c:c4:20:23:e4:91:50:11:38:0f:f7:5a:71:f6:06:f9:87:
ff:e0:1b:88:37:1e:a4:8d:22:21:78:c0:c7:2e:10:cb:ea:88:
5c:ed:7a:73:1c:07:cf:82:ae:3d:f9:b5:32:56:12:75:2c:5c:
63:b2:f2:db:7a:c3:a9:b0:6d:0c:60:de:64:83:67:77:90:28:
7b:0c:44:2f:0d:55:d8:83:ac:0e:0f:2a:27:ee:44:f8:a7:85:
01:a2:50:ff:f0:e1:c0:20:d9:a2:a0:7d:a3:45:b6:4a:fd:31:
12:29:b7:e1:d6:4e:5a:65:5e:cd:10:db:b0:de:9a:1f:15:08:
78:75:c6:7f:a7:74:a7:fe:d3:e2:fc:e6:57:b5:8e:f5:75:4c:
a9:6f:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:08 2026 by rpki-client