Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: U51kSsMx56I0DH0ZudXSwbtCcaH8/OEwNRUO2I7ijGM=
Subject key identifier: 33:62:92:28:69:F3:BD:FC:D2:37:24:47:2B:7A:3C:CC:1B:60:AD:13
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 019D28847780D3AB92834022831DFEAC22E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0F9B
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: 8iQ661sO1h4_GAngnW5MQPkJeg4.roa (hash: HGMy7zhWzM1IMnPtvqTIP43NuVw2eCxAO+Ul66i2hJA=)
2: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: 3+3QmN8UkuC9hwZigO8owolcjJKqO5A3aOM+Mbk/K74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:77:80:d3:ab:92:83:40:22:83:1d:fe:ac:22:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=3362922869f3bdfcd23724472b7a3ccc1b60ad13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:df:10:66:9c:3c:a3:cd:db:5f:ba:09:59:
bb:fc:7f:a4:d1:1b:fc:36:3e:b4:a1:6f:b6:c1:72:
a0:ea:e3:4c:0f:07:28:69:de:08:94:6e:a8:07:4c:
27:4f:ef:81:5b:af:84:47:9e:c0:0c:ba:cc:37:af:
15:22:a6:c7:a6:1d:b4:3a:ee:66:a4:3a:c7:a0:6b:
cc:41:f1:5c:de:55:90:80:7b:c8:19:96:b8:81:20:
15:83:cf:66:79:6f:84:09:d1:b8:49:a1:ae:48:53:
2c:45:d3:e9:b2:1a:8d:f0:4a:2c:a1:bb:dc:de:23:
2f:38:fe:f1:f9:28:9e:82:a7:b5:4f:a5:6d:ea:cc:
4f:9d:d5:7a:36:c7:b0:06:24:e3:39:3a:60:61:c9:
7a:3c:3c:c9:89:b7:b1:23:01:32:43:d8:02:e3:96:
68:49:3c:74:5d:33:54:ba:58:95:d5:04:5a:e6:ad:
e9:b6:94:0e:9d:84:e2:25:97:0a:d7:6f:a0:2a:6b:
a4:5f:57:0c:a3:d2:9a:da:04:c3:28:fd:00:e1:ea:
10:08:ef:37:12:cc:92:23:c5:7b:cd:04:17:63:e4:
41:6c:fb:4c:5c:09:7b:13:fc:3f:59:da:1c:98:0e:
fb:72:e0:54:ec:67:5d:6e:92:9e:60:e9:7b:80:e8:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:92:28:69:F3:BD:FC:D2:37:24:47:2B:7A:3C:CC:1B:60:AD:13
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bc:f5:c7:da:d9:fa:81:5d:8e:4f:3e:75:a3:1d:06:0c:6d:
7d:01:79:a1:b8:62:18:4f:cf:9d:15:7c:99:55:b0:6f:ef:d6:
c1:22:af:2f:2d:eb:9a:0a:47:bd:4e:36:ce:72:9f:92:8d:1a:
3d:3d:17:39:21:c9:d7:85:0f:8e:80:38:8e:9f:3f:e2:55:17:
dd:8b:4d:e5:1a:b3:04:a3:74:46:a1:a6:64:e3:66:6d:80:d0:
af:b9:a4:54:d9:b5:2b:71:6e:62:12:db:cf:11:77:ee:37:4b:
e9:ad:b7:ea:ea:d0:1a:d9:49:45:c3:fe:00:73:a2:9f:50:68:
2b:52:91:e1:c2:ff:bf:d4:3b:d6:ef:f1:89:d9:8e:dc:f8:f8:
7a:dd:73:78:73:d5:8c:e7:27:83:53:23:eb:93:96:e2:fa:bc:
a1:b1:bc:aa:01:ec:5a:54:eb:0a:74:e5:31:4f:ba:bc:87:3b:
79:75:b9:21:1b:93:20:9e:e4:d8:93:2f:f2:a0:f9:c8:95:bc:
d4:94:f4:fa:19:a1:07:3f:0c:f8:4a:21:d9:0c:03:57:76:a8:
76:fc:3c:6e:27:55:54:a0:50:f6:1a:39:92:f2:15:7c:b1:ca:
82:8d:53:7c:c1:f5:2d:ec:c0:42:13:ac:e1:ad:44:ee:c5:fb:
20:e9:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:13 2026 by rpki-client