Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: tQknzu1Mmqe2la8W8gFGBDXJyEwOm60hyFQfxxMD+W8=
Subject key identifier: 3D:6C:F6:29:73:21:37:58:7E:ED:29:B0:F2:37:12:92:48:BF:3F:F7
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 019D273AD8AAEF7B50B71DED605873B0C0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0774
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (hash: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw=)
2: I-sXuwtEcITmgnvZanC5hRWQbdA.roa (hash: dw1mUItwtqi8VkSL6GcnsYfa7bo73GyWptZqIgXTIXU=)
3: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: kTriEAmLXFM6qGEYkjHWhYWPoSQHMZ+QYggVE0BpS7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d8:aa:ef:7b:50:b7:1d:ed:60:58:73:b0:c0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=3d6cf629732137587eed29b0f237129248bf3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:65:a0:d9:fb:39:74:6f:f9:62:05:44:9b:
a6:8e:71:2b:2a:a8:37:d8:b4:d5:27:dc:dc:69:8a:
5f:ce:20:cc:e7:80:44:db:40:d2:1b:97:e2:4e:fb:
e1:3d:14:b4:54:6c:90:a6:86:b8:3e:3a:b6:0f:24:
c3:d3:a8:56:b9:f7:70:5d:d5:8b:ef:75:ac:51:8b:
cf:d5:04:d9:48:a4:99:8b:61:da:7d:9b:f9:31:d5:
af:32:6c:29:b9:36:4a:18:41:50:5a:4a:c5:0a:be:
c4:0b:58:6e:35:bd:b4:dd:10:35:ce:e4:32:c4:ab:
a7:b4:50:f5:21:da:c2:fe:e3:f1:3d:63:30:4f:5f:
36:e6:af:80:2d:d6:04:2a:78:c3:7d:9c:f9:43:42:
96:01:08:cc:dc:01:68:1f:5e:36:a0:86:b9:4f:d4:
b6:56:a4:f4:94:30:b9:3f:03:ef:fa:41:b7:5e:a1:
99:53:65:f7:db:77:8b:54:25:c3:ff:73:a3:2f:8a:
60:7d:4e:d1:3f:ba:52:50:1d:da:af:6d:80:e3:e5:
ee:19:c4:8b:6b:0a:45:ed:86:25:78:28:85:a9:0c:
c1:e5:1d:1d:6e:36:b5:ba:29:5a:6b:2c:ec:b0:81:
3c:fb:5a:5e:05:6c:84:13:c2:10:ed:4b:e9:4c:21:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:F6:29:73:21:37:58:7E:ED:29:B0:F2:37:12:92:48:BF:3F:F7
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:34:76:6a:be:45:e8:30:99:c0:32:59:49:c3:4d:15:0a:
72:9a:67:12:86:4b:42:83:9c:41:3d:8b:b6:ac:da:24:e6:9e:
60:7d:1c:1d:00:08:9f:30:b4:5d:34:3b:b6:1e:a5:e5:fa:23:
49:99:96:db:1a:35:c5:1f:63:24:0e:de:00:8f:71:45:2e:68:
bc:e4:b0:14:b1:51:60:26:ae:ac:b1:fd:a2:97:c6:30:a0:ff:
fe:ff:d3:12:44:4a:f4:60:8c:52:86:c2:dd:2e:72:b3:8b:72:
e6:d7:63:69:ea:65:e7:d1:95:e4:61:a8:2c:c5:16:c7:d4:9c:
b1:e3:66:c9:7d:ae:a4:3a:52:d8:65:80:72:2a:66:cb:f0:df:
2b:32:a0:70:75:2e:b8:c3:8d:b0:12:b6:ac:88:2e:67:ab:f3:
61:19:4d:ad:21:f9:6b:70:5b:42:5d:17:f0:74:2e:54:80:8f:
2f:90:19:7e:d8:35:ed:28:ec:e5:5f:d0:e3:c2:46:a3:ed:68:
8a:eb:95:de:19:d4:ba:68:44:ae:d4:05:36:b8:a2:db:30:df:
13:e9:2c:d3:b0:0f:c8:d5:5a:22:f6:1b:16:e9:26:7a:4f:9c:
48:78:ea:f4:11:1a:48:e3:95:57:cc:4d:d0:32:9b:10:42:1c:
4c:aa:c7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtiq73tQtx3tYFhzsMDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3
OTAwYTgwHhcNMjYwMzI1MjMwMTAxWhcNMjYwMzI2MjMwMTAxWjAzMTEwLwYDVQQD
EygzZDZjZjYyOTczMjEzNzU4N2VlZDI5YjBmMjM3MTI5MjQ4YmYzZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh9loNn7OXRv+WIFRJumjnErKqg3
2LTVJ9zcaYpfziDM54BE20DSG5fiTvvhPRS0VGyQpoa4Pjq2DyTD06hWufdwXdWL
73WsUYvP1QTZSKSZi2HafZv5MdWvMmwpuTZKGEFQWkrFCr7EC1huNb203RA1zuQy
xKuntFD1IdrC/uPxPWMwT1825q+ALdYEKnjDfZz5Q0KWAQjM3AFoH142oIa5T9S2
VqT0lDC5PwPv+kG3XqGZU2X323eLVCXD/3OjL4pgfU7RP7pSUB3ar22A4+XuGcSL
awpF7YYleCiFqQzB5R0dbja1uilaayzssIE8+1peBWyEE8IQ7UvpTCHIvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1s9ilzITdYfu0psPI3EpJIvz/3MB8GA1UdIwQY
MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt
NTY2M2RlMTZkNjZmLzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm
LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJc0dmq+
RegwmcAyWUnDTRUKcppnEoZLQoOcQT2LtqzaJOaeYH0cHQAInzC0XTQ7th6l5foj
SZmW2xo1xR9jJA7eAI9xRS5ovOSwFLFRYCaurLH9opfGMKD//v/TEkRK9GCMUobC
3S5ys4ty5tdjaepl59GV5GGoLMUWx9ScseNmyX2upDpS2GWAcipmy/DfKzKgcHUu
uMONsBK2rIguZ6vzYRlNrSH5a3BbQl0X8HQuVICPL5AZftg17Sjs5V/Q48JGo+1o
iuuV3hnUumhErtQFNrii2zDfE+ks07APyNVaIvYbFukmek+cSHjq9BEaSOOVV8xN
0DKbEEIcTKrHnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:36 2026 by rpki-client