Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: KGvVdVFr31v4y5Aqm6jmCkQd1/KQ/Gv99grXHWygBB8=
Subject key identifier: 18:8A:9E:BB:A3:21:B7:D0:05:EC:B3:6A:26:C0:F7:E7:C7:C4:CA:E7
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 019D26CD0D00BFD31E85918F06A0A7EFE68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 059F
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: 5cvDOYI0VRMPT0o1F0sHkJIZLwiqjPZk0IXpV4DZ9l4=)
2: tK1_7kYoh8HPJEz9gt6VcaD4nUE.roa (hash: S18bPoeACVyQQ3iZwMpVkRKWBkpl4d3ZgQ7DJM72ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0d:00:bf:d3:1e:85:91:8f:06:a0:a7:ef:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=188a9ebba321b7d005ecb36a26c0f7e7c7c4cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:ea:7b:cf:5d:f5:81:62:9a:05:be:da:a7:
6c:dd:f1:83:0e:af:d9:d2:05:b1:07:f0:9e:f0:8e:
cb:de:45:c1:56:b2:08:51:b3:8f:25:f5:1b:62:af:
cf:e1:70:de:2e:00:93:dd:4b:d6:f6:fb:c4:fc:b8:
6d:8c:b0:a5:de:ee:93:8b:58:3e:95:0c:36:ee:e2:
f7:0b:8b:67:cc:8d:1b:53:c3:f3:f2:7f:30:19:35:
4a:09:e6:d7:64:cd:72:a3:39:06:e7:a8:dc:8b:01:
51:9c:79:f1:b5:32:33:b7:6e:c5:36:7c:fb:6a:2f:
f6:e8:51:6a:f2:41:57:03:ff:07:32:de:1e:de:a2:
65:89:b0:2a:4b:ab:02:4a:b5:08:c3:97:d2:71:59:
77:c3:eb:0d:90:20:b2:b9:89:cd:bd:06:f7:a4:2a:
53:dc:87:86:0c:12:22:94:fa:f1:34:9e:8e:28:4e:
92:6b:65:d7:cf:6e:df:37:c3:18:70:37:01:e6:e0:
ba:d6:aa:c8:e9:c8:cf:a3:12:6b:5e:49:ca:03:3b:
cb:bf:df:a0:59:2f:2c:ff:3b:69:65:42:bc:ec:ff:
49:48:16:79:48:01:6e:8e:f4:e9:c9:ab:2b:5d:21:
db:10:8e:98:4b:55:31:28:d8:84:eb:3b:58:f6:32:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:9E:BB:A3:21:B7:D0:05:EC:B3:6A:26:C0:F7:E7:C7:C4:CA:E7
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:43:3a:71:f7:85:d3:a0:ca:a1:56:22:23:4e:6b:cd:f3:28:
d4:c1:49:ac:9d:79:53:03:23:bd:05:45:38:01:ff:49:dc:4d:
52:10:5e:40:3a:d3:e6:09:69:98:44:f1:52:1f:49:48:5a:2c:
55:9b:0a:6f:ea:75:93:9c:fa:2c:89:36:52:2a:55:28:0b:74:
50:f5:1d:f1:40:dc:17:22:1f:c3:e9:0f:a6:0c:27:6e:53:f1:
38:51:be:d4:c9:15:39:39:22:c1:74:bf:68:b1:4a:05:3b:c9:
88:f6:ac:18:4a:35:a2:95:02:d3:c6:28:30:94:db:12:c1:94:
51:48:6b:8c:4e:fa:a8:e6:ec:a3:b9:f8:7f:54:2c:bf:fc:e6:
79:4f:f9:21:42:35:f5:09:3a:73:b3:84:2c:fb:ec:0e:82:7d:
8b:ef:30:10:0c:06:3b:b0:6d:9e:ec:d3:15:11:5f:c7:89:eb:
1a:d4:17:2d:f6:f1:37:55:07:00:8b:46:97:2c:ce:0f:07:13:
05:1e:a1:76:80:e3:14:df:9a:cc:ee:33:de:e9:b8:b6:1b:a4:
b5:b9:9f:9a:73:56:ae:5e:3f:0d:e5:2f:d3:c3:2f:1e:c0:96:
30:e3:72:b6:e1:64:5a:83:4c:c1:5e:08:f7:4e:b2:f6:ce:66:
06:9e:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:13 2026 by rpki-client