Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: 8DS/yUiE3u8gOCnUc7r5CeCrNQk7bPaLZ+OyqtHjs40=
Subject key identifier: BA:19:FE:ED:8B:9A:B9:CA:CD:EF:5A:A4:91:6A:9B:68:D3:C4:7A:4A
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019D2AE01689D196CBA0763C72E722ACA946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:00:21 +0000
Manifest this update: Thu 26 Mar 2026 16:00:21 +0000
Manifest next update: Fri 27 Mar 2026 16:00:21 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: QphwuaUV2XB6Ub/AMmKgd2Iag9epL+YJvRg4CxyDcPc=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:16:89:d1:96:cb:a0:76:3c:72:e7:22:ac:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Mar 26 16:00:21 2026 GMT
Not After : Mar 27 16:00:21 2026 GMT
Subject: CN=ba19feed8b9ab9cacdef5aa4916a9b68d3c47a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:d5:3f:d2:0b:31:13:32:cb:7f:54:c0:d8:
2c:b8:6a:c0:69:d4:a1:f0:64:5c:38:8d:5e:88:46:
a8:2e:d3:fc:e2:b3:7e:2d:b4:80:6a:60:a0:b3:44:
2f:ee:06:5f:4f:d5:db:17:b9:4f:4f:a4:2e:6c:16:
ac:e4:cb:a9:30:34:da:db:d3:54:d2:a2:76:64:e2:
0d:60:68:ff:cf:11:27:fb:3c:5a:ad:a6:5c:f3:00:
13:71:92:8d:ed:59:51:ab:a0:69:97:1e:f6:ca:a8:
d1:44:d5:ce:2f:ba:3e:18:f1:a2:e5:f2:6d:f5:d8:
1c:6e:5f:aa:1f:85:38:62:ee:04:0a:d7:bf:ab:78:
27:29:76:c4:10:ba:08:99:6a:bb:50:ad:9f:f3:dc:
6a:4e:65:4a:c9:00:26:b1:ac:e1:97:01:35:a3:72:
af:24:4d:fa:e1:5c:96:1f:eb:5f:3e:89:c5:65:ff:
6a:2f:99:95:7e:05:d1:75:03:30:9e:d3:29:1e:de:
5c:6d:22:eb:21:2d:45:76:19:60:48:01:e6:08:e4:
a9:74:4d:95:c7:d0:7d:aa:94:a3:f8:25:65:77:b5:
b0:bd:d4:76:87:f6:59:b0:d8:8f:b6:64:0f:7d:2f:
71:72:4f:62:51:a3:0f:c9:59:4f:02:bf:e8:98:7e:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:FE:ED:8B:9A:B9:CA:CD:EF:5A:A4:91:6A:9B:68:D3:C4:7A:4A
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:da:8a:6c:a3:98:46:d3:d5:ec:62:57:5a:08:49:b8:8e:7c:
61:ba:66:70:68:bc:1b:5c:d3:3c:78:86:70:04:18:cb:1d:44:
a4:25:09:f0:33:05:59:51:e7:7d:c6:db:5e:df:4d:b1:d9:a7:
10:82:89:c0:58:bc:57:ad:4a:75:22:cd:f9:36:f4:f6:07:2b:
4f:e0:36:9e:f7:34:2e:68:53:5d:70:3c:f6:5a:ed:7b:c1:07:
d8:3c:19:4b:28:6f:10:53:61:65:db:cb:57:db:70:70:5d:b2:
5f:5a:43:e0:e1:72:ef:5c:d7:ee:58:77:86:7c:df:e8:30:00:
15:34:8e:02:99:33:4c:0c:f9:db:aa:7d:1c:db:f3:6f:b7:65:
d3:45:f6:16:75:65:cb:47:23:f5:bc:0a:52:34:ad:d2:6b:fe:
42:00:9a:66:62:f9:cd:cf:d9:14:e6:d6:5a:28:91:60:6f:8f:
d5:1a:d1:01:cf:7f:37:e5:45:f1:42:54:e9:14:42:0b:b7:04:
a5:86:d2:79:88:dc:13:5f:5e:df:3f:2f:83:71:90:8d:0e:00:
3c:c4:e0:7c:dd:d2:d1:d5:7b:ee:f1:3f:29:01:f4:03:05:ca:
40:29:1b:57:47:88:4c:8a:c6:86:63:29:82:32:8d:5e:e8:b1:
32:3a:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:54 2026 by rpki-client