Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: XTINTKjMU+u01yXS4ucP78KHTy/D4yPf8G7W2C9XCOI=
Subject key identifier: A8:FF:0E:09:22:47:19:8E:23:BB:E9:39:1D:B5:A3:27:A8:1B:5E:4B
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 019D292923BB724358C6092E4DD3F7A7B1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 0374
Signing time: Thu 26 Mar 2026 08:00:55 +0000
Manifest this update: Thu 26 Mar 2026 08:00:55 +0000
Manifest next update: Fri 27 Mar 2026 08:00:55 +0000
Files and hashes: 1: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (hash: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4=)
2: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (hash: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY=)
3: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (hash: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc=)
4: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: cWoKu7JQo9Tpa8BMZ9vPT8iBRD/CC7h/IoHHnSOSbdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:23:bb:72:43:58:c6:09:2e:4d:d3:f7:a7:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Mar 26 08:00:55 2026 GMT
Not After : Mar 27 08:00:55 2026 GMT
Subject: CN=a8ff0e092247198e23bbe9391db5a327a81b5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:ef:6f:07:12:58:ff:47:35:3c:1c:60:0c:
a8:33:1e:53:bf:ef:ae:af:4a:0f:04:05:ee:fe:6e:
e8:19:1e:9f:ad:06:e9:7e:89:a4:08:57:3e:eb:6f:
8d:2e:28:c0:0d:f2:73:16:24:b0:aa:3e:c9:d4:99:
19:a1:a4:c4:d6:a3:e0:bb:eb:3c:86:00:5f:f6:17:
5d:a3:d5:e2:a6:d4:7a:e9:e8:8c:e2:77:df:00:93:
9d:cf:7a:e6:da:94:7b:93:ea:3c:b7:05:97:4c:15:
e8:4d:16:fc:11:3a:75:4e:1c:e0:8c:f3:0a:1d:cc:
34:6f:86:5d:82:33:cf:19:da:83:74:d9:06:f1:bf:
64:60:0f:fc:1d:32:72:0c:6b:f2:7d:75:d3:b6:50:
2c:cd:cd:ca:5f:e8:9c:07:dc:d1:27:5c:16:99:9b:
22:75:25:ea:a4:bd:ca:ce:34:13:33:48:df:4d:39:
81:5b:7e:3b:40:cf:fa:23:a2:b9:c3:95:fc:5f:a8:
7c:d2:58:e9:91:c2:11:0d:48:55:8c:13:67:6e:76:
04:4b:af:99:56:4f:43:3f:f7:d5:e8:ec:7c:e6:b9:
82:5a:7e:cb:3a:f5:78:4b:68:2b:b9:ac:56:df:f0:
da:f1:83:b8:62:77:a4:98:62:bc:62:31:72:31:d5:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FF:0E:09:22:47:19:8E:23:BB:E9:39:1D:B5:A3:27:A8:1B:5E:4B
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:fd:42:92:8c:88:0b:13:2d:80:e5:48:6e:e0:8a:cd:e9:
f1:ae:6b:cc:4e:a4:fd:17:9d:cd:96:a8:62:69:b6:fd:36:f0:
a8:c2:27:cf:c4:af:80:00:1b:3f:4b:b4:16:62:ce:94:e0:1a:
9d:bd:f6:82:7f:de:bd:cf:90:9a:16:f0:b0:04:49:73:70:a8:
22:42:34:c3:6d:cf:d8:e4:5a:56:6d:17:87:b3:c4:fd:09:55:
e2:41:a9:3e:c1:7f:21:71:72:d4:31:1c:d2:ea:bf:c3:33:ad:
15:17:f0:9f:88:61:8c:2f:21:92:8b:c6:6a:55:4c:1d:15:eb:
c9:65:45:d3:a9:98:a8:20:47:2c:43:dc:b1:6f:de:59:12:5b:
a4:db:1b:57:69:dd:a2:21:8f:ce:19:19:5c:f3:ee:2a:ed:c9:
45:56:0c:06:95:74:fa:00:c9:0d:7f:bc:43:de:78:a5:28:cd:
fd:07:b0:40:3f:76:98:f8:bc:f2:65:60:1c:c4:1b:89:41:6a:
62:4a:66:64:76:4e:08:0b:73:8e:58:73:88:14:4f:16:11:38:
a7:b3:16:5c:9b:52:46:70:e6:99:9e:7f:b8:2b:b0:c8:86:f7:
4b:e8:8d:c1:09:e3:36:21:cb:77:f7:32:80:d3:98:dc:48:6e:
00:81:4a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSO7ckNYxgkuTdP3p7HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh
NzFjNGIwHhcNMjYwMzI2MDgwMDU1WhcNMjYwMzI3MDgwMDU1WjAzMTEwLwYDVQQD
EyhhOGZmMGUwOTIyNDcxOThlMjNiYmU5MzkxZGI1YTMyN2E4MWI1ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlHvbwcSWP9HNTwcYAyoMx5Tv++u
r0oPBAXu/m7oGR6frQbpfomkCFc+62+NLijADfJzFiSwqj7J1JkZoaTE1qPgu+s8
hgBf9hddo9XiptR66eiM4nffAJOdz3rm2pR7k+o8twWXTBXoTRb8ETp1ThzgjPMK
Hcw0b4ZdgjPPGdqDdNkG8b9kYA/8HTJyDGvyfXXTtlAszc3KX+icB9zRJ1wWmZsi
dSXqpL3KzjQTM0jfTTmBW347QM/6I6K5w5X8X6h80ljpkcIRDUhVjBNnbnYES6+Z
Vk9DP/fV6Ox85rmCWn7LOvV4S2gruaxW3/Da8YO4YnekmGK8YjFyMdV1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj/DgkiRxmOI7vpOR21oyeoG15LMB8GA1UdIwQY
MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt
YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm
LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV79QpKM
iAsTLYDlSG7gis3p8a5rzE6k/RedzZaoYmm2/TbwqMInz8SvgAAbP0u0FmLOlOAa
nb32gn/evc+QmhbwsARJc3CoIkI0w23P2ORaVm0Xh7PE/QlV4kGpPsF/IXFy1DEc
0uq/wzOtFRfwn4hhjC8hkovGalVMHRXryWVF06mYqCBHLEPcsW/eWRJbpNsbV2nd
oiGPzhkZXPPuKu3JRVYMBpV0+gDJDX+8Q954pSjN/QewQD92mPi88mVgHMQbiUFq
YkpmZHZOCAtzjlhziBRPFhE4p7MWXJtSRnDmmZ5/uCuwyIb3S+iNwQnjNiHLd/cy
gNOY3EhuAIFKBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:30 2026 by rpki-client