Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json)
Hash identifier: YPSWe2T1Tq9JcJOP3VIDFuakiJQmjJcRdOC8utNdtvM=
Subject key identifier: DD:9F:4D:E6:D3:B3:C1:44:CB:22:FF:45:A1:B1:C6:59:07:F3:6E:1B
Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2
Certificate serial: 019D27A900583C42E7AE04D3B8A2FC5119A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
Manifest number: 03CF
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: Yw7NMxdJYOxSPv5-0Sfz5ahXRag.roa (hash: ZnICYKONJJxjDwVZ62F3+nflf0A7dKQxRmtplOM55/A=)
2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: eI88iICQs9kLnEBp2wFhzNx2dmwv8lXy4h3LxWOnnic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:00:58:3c:42:e7:ae:04:d3:b8:a2:fc:51:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=dd9f4de6d3b3c144cb22ff45a1b1c65907f36e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:7c:a5:24:04:5f:c9:ae:e4:3e:ba:04:c8:
31:e0:fb:c4:63:05:9c:fd:b4:69:86:15:df:a7:1c:
f7:ab:54:a4:e5:bf:39:bd:18:79:af:27:a5:68:0f:
8c:d6:4b:77:85:7e:72:f5:71:67:be:44:65:84:68:
42:8c:59:df:51:13:49:03:70:4d:4f:d2:a0:51:2b:
65:81:ad:a4:09:df:67:bb:ad:76:55:3c:c4:62:98:
80:b6:af:98:32:51:63:16:31:4d:06:db:10:f2:66:
ca:27:b6:7b:75:3c:19:ba:63:83:9e:53:95:98:4e:
d2:37:e7:28:2e:ce:fc:fd:d9:33:c1:ad:f8:55:c0:
af:b3:a6:b7:c5:c4:00:0c:07:95:fb:9f:39:42:7b:
29:38:bc:73:f2:97:07:dd:88:9d:d0:c2:10:f2:7d:
21:ae:79:d6:2a:3c:78:f6:4a:f8:31:86:31:49:64:
ea:e4:97:1d:4e:ef:7e:eb:af:63:60:9b:47:62:f4:
b9:5f:0e:cd:dd:06:86:bc:97:04:9c:f1:8f:ac:7d:
aa:3a:f5:51:ad:a7:4a:af:b6:2b:b6:a9:0b:f8:6f:
eb:0a:5e:f2:9d:92:46:9e:72:ea:a2:e5:2e:a7:4a:
12:17:1e:5b:49:31:f8:62:06:82:33:3f:9d:c4:63:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:4D:E6:D3:B3:C1:44:CB:22:FF:45:A1:B1:C6:59:07:F3:6E:1B
X509v3 Authority Key Identifier:
keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:5b:55:ef:0b:02:c4:1d:1c:79:64:8c:47:36:45:d4:0c:
97:f5:4a:72:62:07:57:9a:0d:84:74:80:4a:37:c7:83:7d:88:
c1:86:98:5b:2d:74:5f:58:f9:ee:3e:5d:c0:d5:cb:d4:cd:52:
aa:34:03:fe:10:82:ab:66:a1:75:a0:61:31:54:b1:06:bb:28:
da:93:b8:f3:f2:46:29:f7:f0:23:09:4b:2e:14:77:4d:4c:a6:
b6:68:8f:f4:32:e2:85:7e:4f:fa:ee:da:c7:53:2e:bf:c2:50:
3a:7d:eb:85:0e:d6:e0:1f:67:37:c7:8e:5d:61:3b:2b:f7:08:
12:ed:d8:e5:15:f3:4e:7c:d2:5a:c1:d0:67:2d:d9:92:17:8b:
f8:5e:81:5b:c5:d3:c0:f5:e7:ae:dc:99:74:5f:68:ef:7f:cb:
7b:d2:98:0a:60:35:60:9f:ba:34:f9:5f:26:b2:c1:d3:d3:13:
dc:53:2f:89:42:74:5b:61:5e:83:62:2e:17:0d:0c:fe:c1:e9:
88:56:9e:f7:25:e2:1e:31:e2:ac:c8:68:5d:91:d5:71:37:3e:
9e:b9:57:a6:cd:a9:04:7a:46:64:da:ad:c5:fa:dc:76:d2:c3:
30:c0:6d:db:34:18:49:a0:a1:2d:39:9b:18:d3:71:41:e4:d0:
eb:2f:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:48 2026 by rpki-client