Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: aAoGHid0IDtKPE7/dTR5E9ojCkhIYx/wXHwYMQW+27M=
Subject key identifier: 79:15:C2:2F:19:FB:9D:1C:1C:06:36:10:EB:8E:13:76:7D:CE:3B:3B
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019D27DF6BC675035CA26D04E7C37054E5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0C7F
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: LNhQ39unKzXc0cuQ44h7jPJU0LucxQANbio0beRz/yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6b:c6:75:03:5c:a2:6d:04:e7:c3:70:54:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=7915c22f19fb9d1c1c063610eb8e13767dce3b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:47:b6:20:a0:27:d1:5b:6e:26:a0:d3:eb:
7e:c4:6c:63:48:09:cd:da:cf:60:79:f9:80:25:42:
b3:4c:ba:bc:72:15:7e:43:10:6f:09:b4:fe:8f:7e:
4d:e1:1f:17:e6:f7:d4:1f:49:c6:08:2d:ef:b2:b4:
5b:83:aa:9b:30:66:ec:06:c4:3e:03:26:27:a8:16:
da:a5:99:46:83:2c:14:d9:da:bf:58:67:e5:3d:b6:
1c:43:da:4e:68:6f:91:18:eb:d1:7c:a2:0c:c9:aa:
b2:c0:64:74:49:50:1a:fd:35:a8:93:3d:48:3d:9b:
e6:9c:98:41:0b:9b:ef:40:89:5b:11:9c:a5:70:9a:
a1:82:17:b1:83:41:34:dc:73:53:ab:28:ad:99:ac:
0c:68:ba:cc:39:c7:43:44:2f:e6:40:8f:49:70:d6:
9e:4d:28:f6:12:b5:f1:3a:d0:ea:4f:3f:72:f7:7f:
a1:d7:f5:df:69:55:0e:5a:77:11:41:2e:31:2a:43:
d2:05:da:ad:fc:c0:16:ba:42:d4:20:74:0a:9d:21:
21:7e:e7:a3:7d:92:b5:5e:29:80:a7:1f:d1:bf:b9:
3e:a5:c1:0e:5f:48:e0:82:81:62:cc:a9:e8:21:c8:
04:ac:c8:27:ea:9e:7e:bf:43:b9:ba:0e:c0:ba:40:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:C2:2F:19:FB:9D:1C:1C:06:36:10:EB:8E:13:76:7D:CE:3B:3B
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:86:bd:cd:33:a0:b4:84:22:30:f6:3c:0d:bb:ed:e2:5d:05:
21:77:ab:65:9a:0f:af:ea:c1:89:29:1f:28:8d:44:a3:7a:20:
f3:15:18:5c:44:54:50:27:53:ce:61:11:de:2b:da:1b:1f:8a:
22:5f:28:4f:c1:f6:67:c8:88:f5:84:c7:b9:5e:c5:61:63:fd:
7a:4e:13:61:d4:34:ec:cb:2a:a1:f9:0a:16:b7:d0:72:f6:32:
3c:f7:3c:5b:f0:32:07:c6:66:a2:eb:ee:e8:3a:3d:3a:4d:4a:
1d:1a:ac:29:d3:2a:62:94:33:4f:1a:f0:64:ca:ce:3e:be:43:
d0:69:a0:6e:d4:44:85:f2:2f:75:09:49:3a:97:51:4c:bc:f6:
41:f9:32:49:3f:a6:71:3e:ab:c3:fb:5c:4e:f2:20:d7:53:94:
34:72:47:dd:ee:19:64:a4:9e:7d:bb:0f:53:04:46:24:24:37:
ff:a6:49:cc:77:7f:0e:e4:8a:b9:c7:d6:63:09:de:81:ef:99:
ad:1c:28:69:e4:82:5c:ad:ff:ca:4e:36:dc:d3:ac:33:e1:3e:
04:b9:b8:77:de:2e:0e:02:ef:95:78:bc:69:bd:cb:7f:f1:78:
61:e9:53:61:1d:9a:87:f0:7f:8b:f0:96:63:53:bf:bc:85:9c:
ab:26:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:53 2026 by rpki-client