Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: 6O9/w3yL1wo+BS1gshRRXKrHKL5vd2FDH07QCn7XWIo=
Subject key identifier: D9:F2:F0:91:A0:1F:91:0F:8D:37:54:3A:06:6C:CC:20:D7:99:AC:66
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 019D2772A2985795343898FC8000089BB34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 134F
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: Ng6Dp0gqvOmZJunkFvjhDIeI/rcdHlon1OgVFNYE1Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a2:98:57:95:34:38:98:fc:80:00:08:9b:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=d9f2f091a01f910f8d37543a066ccc20d799ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:e1:2c:fb:81:20:b3:18:ae:7c:02:18:78:
2b:15:4a:7b:c5:96:4a:f5:9a:01:ea:9f:00:83:b2:
b4:de:c9:b7:ff:40:9d:2d:23:1f:0f:38:e4:6a:1e:
2b:bc:da:c1:6d:f4:3b:35:68:a1:0c:34:10:6d:23:
d0:5c:5b:0f:05:bc:ac:36:40:12:82:cc:5b:d1:79:
52:a8:8c:5e:72:ee:61:c3:4c:7f:99:b9:1d:df:63:
4c:54:69:88:2f:e2:a5:c0:3e:ff:18:66:73:c7:36:
3c:5c:ff:da:70:0d:95:b0:38:db:41:90:9e:ff:90:
01:48:78:5f:98:7b:87:fe:f6:76:0c:28:79:8a:98:
46:96:c1:ee:ac:b4:09:ad:99:78:20:cb:c0:5a:7b:
73:d8:10:10:6e:c1:99:2b:72:4b:72:f2:29:8f:54:
de:99:e8:e1:58:1f:fa:ad:4f:29:ef:39:30:6c:59:
ea:4c:3b:09:9e:8a:56:9d:2c:df:c9:88:83:11:45:
79:d3:88:05:28:2d:45:90:f2:45:82:e6:bf:4f:63:
9b:6a:50:5f:cc:bf:6d:04:13:87:48:29:76:13:fa:
1d:c3:82:03:f1:df:38:3a:1a:ba:9d:f2:90:89:dd:
67:5a:18:27:af:c2:16:16:25:fd:75:9b:c1:9e:50:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:F0:91:A0:1F:91:0F:8D:37:54:3A:06:6C:CC:20:D7:99:AC:66
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:16:f5:ab:aa:4b:2e:40:2d:c7:38:65:42:c2:cc:98:09:
c7:94:62:16:00:a7:28:88:42:46:a2:ec:12:c4:d1:2e:cc:c2:
5d:c9:14:8e:3b:71:88:34:2a:9f:7e:8e:41:39:52:bb:e3:d1:
4d:5c:35:ed:54:0a:d8:c4:23:fa:ed:6c:6e:39:bb:8f:a9:c5:
ef:be:b3:12:20:ca:08:6a:6f:85:d9:44:10:0b:cf:44:f6:79:
c1:21:d7:3f:95:e4:67:ff:17:67:f2:14:bd:a6:10:32:89:9f:
f3:55:f9:4f:9b:06:47:49:29:8c:38:cd:e0:f9:68:bf:20:be:
09:65:88:fd:0b:27:d4:82:42:00:3c:e6:1b:eb:b4:29:12:a4:
e2:3f:b5:d7:c8:1d:ba:4d:7c:6f:4b:fb:b6:84:97:5e:0f:90:
54:fa:a2:6e:2c:f7:3f:c8:2e:c1:25:1d:66:ec:0e:49:07:c1:
a2:07:c6:6e:9e:ef:7a:cf:52:15:c9:9f:89:71:2c:ac:0d:5a:
0e:3e:1e:72:56:4c:d6:7b:e1:40:57:a9:6f:5e:20:76:51:2a:
46:23:4a:30:47:80:7e:e5:da:b2:49:fc:1b:22:27:d8:75:17:
18:15:24:0b:a8:f3:b2:11:21:03:69:06:bc:75:04:91:24:e5:
89:9f:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:22 2026 by rpki-client