Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: w7PIjdNdUurVqFmlhwxvKYI6lC0fLJtEFa/kdoM4F18=
Subject key identifier: 73:34:02:34:12:F3:65:EC:5A:66:62:0F:B7:85:6D:E5:3B:03:09:40
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 019D2AE0B6CFFA4CE8A77E2A4E5240A37236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 0576
Signing time: Thu 26 Mar 2026 16:01:03 +0000
Manifest this update: Thu 26 Mar 2026 16:01:03 +0000
Manifest next update: Fri 27 Mar 2026 16:01:03 +0000
Files and hashes: 1: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (hash: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: +lanpnVu90yjipGmKwKOV82E/FfssFsREd0fGfElmA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b6:cf:fa:4c:e8:a7:7e:2a:4e:52:40:a3:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Mar 26 16:01:03 2026 GMT
Not After : Mar 27 16:01:03 2026 GMT
Subject: CN=7334023412f365ec5a66620fb7856de53b030940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:5d:ea:ab:75:b6:9c:b8:0e:46:e7:6c:f9:
38:b2:12:34:09:9c:4d:19:45:ea:e7:e3:2a:7a:98:
7d:88:78:47:2c:ee:b8:fe:bc:47:6a:bf:69:92:0d:
df:bf:ad:19:27:ab:10:6f:3b:b4:3f:8c:3f:31:f3:
9f:6e:5e:76:fd:c8:64:0e:ca:ac:f4:76:32:72:18:
66:78:b1:06:3d:e8:2a:a7:9f:38:4a:b6:1f:64:c3:
ca:40:f4:e7:63:6a:a2:6f:64:86:2e:0f:c2:2f:c9:
2f:6c:c8:5c:26:8a:46:17:8e:19:fd:97:88:d9:dc:
57:de:5a:20:98:cb:e3:34:1c:67:ce:28:c3:7e:f8:
c3:5b:36:ba:12:66:f1:9a:44:e9:30:61:30:b8:24:
ed:c9:a2:8e:b0:e8:0a:0d:04:25:18:c7:c5:44:4c:
98:fc:f9:cd:0d:78:97:da:17:8b:23:75:c4:50:2b:
71:14:b1:d8:64:da:ca:42:57:86:44:f9:a2:2b:55:
2d:0a:ae:11:79:b1:92:86:61:9d:12:ac:1b:9d:9a:
7e:9f:0c:cd:5b:bb:ef:16:d8:f8:60:5a:34:ec:46:
76:30:79:71:79:3b:22:c3:d4:13:ec:e3:81:ca:33:
72:1a:22:1b:dc:c1:7e:fb:dd:71:dd:0d:05:10:cf:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:02:34:12:F3:65:EC:5A:66:62:0F:B7:85:6D:E5:3B:03:09:40
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:b8:4e:de:77:b5:d1:56:71:34:d1:b8:66:18:80:36:2a:
b0:27:c7:59:48:24:b0:08:d9:e8:45:6a:af:0e:e5:96:d4:66:
c0:46:74:1d:7a:5a:be:eb:fa:71:ce:f6:6d:9b:09:5c:18:01:
df:b7:1f:e1:2e:ac:80:0a:72:7f:1b:06:51:ee:4e:a4:d6:db:
67:36:cc:1a:e6:1a:74:de:b8:76:3b:cd:90:58:b0:1e:37:ba:
bb:91:b2:50:3a:17:7a:29:7f:c6:34:29:07:a9:7b:14:37:54:
ea:17:b9:87:8e:08:06:a7:09:3c:72:8c:e0:17:f1:7d:06:1f:
97:56:42:6f:de:6a:6c:53:26:76:21:e0:55:72:db:56:4c:7b:
0f:12:fd:57:71:57:e8:88:32:89:0b:27:9b:d2:92:2c:ae:06:
cc:d4:68:32:8f:2f:ef:11:06:81:7f:1b:da:ed:dd:45:2c:64:
c0:43:37:1d:1e:d7:6a:9c:31:73:c5:c9:e7:72:0d:a2:35:87:
a8:3b:e5:e5:36:28:b7:bc:bc:3f:78:86:d7:1d:74:70:03:1a:
bd:ba:54:93:54:28:ad:07:92:29:72:85:c8:3e:a7:20:51:21:
92:af:63:6d:ec:97:c5:ba:0a:58:4b:ef:ee:d3:98:22:26:8b:
5e:9a:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:06 2026 by rpki-client