Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: uwSdXlbLMq8kKK6lHSh2WuukhZNyqAiNZI0agQnBh+c=
Subject key identifier: AF:46:50:C9:90:0F:E2:45:50:A0:75:10:AC:D4:67:A9:1A:90:5D:AC
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019D26CCF3B5A5F597BC252F1C3740AEF2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 0296
Signing time: Wed 25 Mar 2026 21:00:58 +0000
Manifest this update: Wed 25 Mar 2026 21:00:58 +0000
Manifest next update: Thu 26 Mar 2026 21:00:58 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: nx7/w0f3semFGqRJ8YuQiX62LSRrqnF6YlzIsO9s7LQ=)
2: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (hash: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f3:b5:a5:f5:97:bc:25:2f:1c:37:40:ae:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Mar 25 21:00:58 2026 GMT
Not After : Mar 26 21:00:58 2026 GMT
Subject: CN=af4650c9900fe24550a07510acd467a91a905dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:88:33:7d:19:80:f1:61:5a:f4:92:b5:b2:
bb:a0:ed:16:4a:25:65:06:1b:69:e8:60:1d:de:e4:
2e:66:be:98:aa:da:87:79:97:c8:ff:01:9f:7d:59:
d9:68:62:30:5a:81:80:dc:12:26:f9:62:85:a5:05:
c0:e9:a9:3c:a4:5d:fe:3a:4e:95:54:d9:e8:66:f8:
52:a2:a4:c8:34:24:fa:64:e4:b2:70:1b:c3:35:10:
76:05:e7:57:f4:d9:c7:98:7f:59:33:67:cd:e2:8e:
9e:30:27:72:b8:5c:4c:e6:e4:42:c0:b6:9d:9e:a3:
1c:bc:e2:0e:8f:da:01:97:f1:8d:ba:1d:9d:90:09:
ad:1f:09:d7:24:27:34:98:2a:97:43:83:fb:f8:21:
c3:ac:fe:1f:59:cf:b5:84:c3:03:1d:bc:82:12:6b:
f4:d9:de:60:92:42:c0:7f:87:0b:7c:43:d1:17:a6:
fe:04:a7:ee:d1:77:7c:3d:a1:cd:20:8c:c9:83:e0:
8a:2a:95:49:4b:00:33:25:45:ec:0d:7c:8d:c6:bc:
21:03:0b:0f:cc:fc:bb:19:8d:55:cb:d5:af:82:48:
67:f0:9f:c1:e2:e1:17:00:b7:6d:7a:fc:f1:47:dd:
97:01:08:e8:6d:dd:dd:79:66:98:41:1a:a0:02:b8:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:50:C9:90:0F:E2:45:50:A0:75:10:AC:D4:67:A9:1A:90:5D:AC
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:44:d2:5b:25:b3:7e:d7:60:e3:1f:c5:30:14:5f:21:45:
03:3a:14:80:8c:0f:b7:d3:bd:02:84:7d:15:6e:7e:8e:ca:40:
cf:89:ae:fc:0c:af:bb:39:a9:fd:c3:28:bf:4d:74:1f:76:12:
d0:f4:53:d5:0a:6c:a4:5f:ff:74:48:d8:91:a7:94:a4:4d:6f:
d6:5a:3a:71:6f:af:73:86:6a:c2:65:5f:ac:3b:c6:5d:4d:6b:
f8:fb:1b:8c:78:2f:70:8c:ce:c3:2e:77:b5:c3:8c:62:1b:63:
cb:05:df:17:7a:16:a0:72:42:c7:bc:5e:64:ce:2b:94:f7:b2:
d2:47:68:47:7e:7e:2e:75:27:a0:9a:aa:a5:d1:7b:7c:16:36:
ee:42:d4:c2:77:1c:00:9f:b3:78:71:c0:f4:bd:71:70:9b:e6:
e2:b0:fb:c0:13:97:f5:64:b7:6b:cf:96:05:fc:fd:d0:c0:c5:
55:1d:d8:d5:f5:b3:15:82:30:2d:b8:32:a3:e6:6d:ce:cc:b6:
07:d4:74:00:03:db:b2:6d:47:67:a7:e8:7c:9f:1b:f8:27:17:
02:c4:1c:a7:5f:e5:07:71:96:80:71:e9:ff:be:5f:c1:8d:c0:
6d:08:c2:01:b1:f3:17:35:b0:37:1d:28:e8:b1:4a:ee:3b:be:
f7:e0:d7:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPO1pfWXvCUvHDdArvLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YTZkMmVkNDZmOWQ4OWIxZGQ2MjE3NzViZDlmYjU1MzZi
ZjQ0Y2QwHhcNMjYwMzI1MjEwMDU4WhcNMjYwMzI2MjEwMDU4WjAzMTEwLwYDVQQD
EyhhZjQ2NTBjOTkwMGZlMjQ1NTBhMDc1MTBhY2Q0NjdhOTFhOTA1ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqmIM30ZgPFhWvSStbK7oO0WSiVl
Bhtp6GAd3uQuZr6YqtqHeZfI/wGffVnZaGIwWoGA3BIm+WKFpQXA6ak8pF3+Ok6V
VNnoZvhSoqTINCT6ZOSycBvDNRB2BedX9NnHmH9ZM2fN4o6eMCdyuFxM5uRCwLad
nqMcvOIOj9oBl/GNuh2dkAmtHwnXJCc0mCqXQ4P7+CHDrP4fWc+1hMMDHbyCEmv0
2d5gkkLAf4cLfEPRF6b+BKfu0Xd8PaHNIIzJg+CKKpVJSwAzJUXsDXyNxrwhAwsP
zPy7GY1Vy9Wvgkhn8J/B4uEXALdtevzxR92XAQjobd3deWaYQRqgAriT9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9GUMmQD+JFUKB1EKzUZ6kakF2sMB8GA1UdIwQY
MBaAFGim0u1G+dibHdYhd1vZ+1U2v0TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEt
MDhhMjJkZTc3ZTViLzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEtMDhhMjJkZTc3ZTVi
LzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbclE0lsl
s37XYOMfxTAUXyFFAzoUgIwPt9O9AoR9FW5+jspAz4mu/Ayvuzmp/cMov010H3YS
0PRT1QpspF//dEjYkaeUpE1v1lo6cW+vc4ZqwmVfrDvGXU1r+PsbjHgvcIzOwy53
tcOMYhtjywXfF3oWoHJCx7xeZM4rlPey0kdoR35+LnUnoJqqpdF7fBY27kLUwncc
AJ+zeHHA9L1xcJvm4rD7wBOX9WS3a8+WBfz90MDFVR3Y1fWzFYIwLbgyo+Ztzsy2
B9R0AAPbsm1HZ6fofJ8b+CcXAsQcp1/lB3GWgHHp/75fwY3AbQjCAbHzFzWwNx0o
6LFK7ju+9+DXJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:15 2026 by rpki-client