Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: EDuLYwPxy4Hgc2mB5WTu90QdJeCJ2V3ltWASd0rzNrM=
Subject key identifier: 7D:95:BD:20:3A:F8:CE:BC:CF:F8:56:F1:D6:63:A1:E6:03:AA:E6:A3
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019D2628359BA5A03198FCBF2F8A0BA7BAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 151D
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: Sn2KyoKjFfROku-b9ZDgfYm_GtE.roa (hash: gXKBGj1pUODxBLRTrQNK3Rbmt+qgOzJRUgGGxVVoxKU=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: 2hTDCKzbu5lU+jOzqE4WSKW2cN3hD3RMKz0Mw6RzNQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:9b:a5:a0:31:98:fc:bf:2f:8a:0b:a7:ba:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=7d95bd203af8cebccff856f1d663a1e603aae6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:5c:70:0a:2a:b6:1f:35:7e:b6:c8:40:73:
f9:b3:8c:ef:17:22:a6:ce:3d:e3:fa:84:43:c1:9b:
28:88:29:83:1c:5f:62:cb:5c:45:4b:b4:10:c4:4d:
3d:0b:69:32:8e:9e:67:3c:4e:47:84:20:61:07:df:
5c:00:c8:2e:7f:a4:0d:87:34:0d:81:ba:be:cc:fd:
21:d5:62:4c:69:46:9c:f0:7e:56:59:b8:06:ec:80:
46:9b:3e:fd:83:b9:1f:59:08:9c:14:63:67:4d:ab:
c0:38:25:c7:61:73:4c:76:e8:11:43:98:ce:83:c6:
6f:74:86:db:4d:67:89:ad:b7:a1:d3:64:56:51:dd:
5b:62:fd:d9:f7:03:ea:a0:73:07:1e:bf:ce:b7:7e:
5e:37:14:d3:6a:b7:32:c9:e4:0b:f1:69:79:21:30:
15:b6:d6:b7:45:1d:a5:79:81:bf:a5:39:98:50:11:
d3:63:64:43:08:ff:8d:68:ea:a2:d7:53:95:3a:95:
d1:73:0a:0d:bb:aa:93:81:ee:b1:f5:50:5b:95:8c:
05:56:ab:28:2e:9b:6c:83:dd:97:60:d9:1f:c2:4c:
44:7a:9c:0a:fb:6a:05:cb:b9:4d:72:a0:1c:76:79:
03:48:06:fa:5f:6a:81:0e:94:5e:f5:88:6b:62:6c:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:BD:20:3A:F8:CE:BC:CF:F8:56:F1:D6:63:A1:E6:03:AA:E6:A3
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:99:5f:44:0b:fe:72:1d:92:a5:68:42:47:b7:bc:cf:c7:d7:
46:04:82:8f:3f:c0:a9:03:52:8e:f2:84:ca:85:4a:3d:8a:c8:
ee:bd:ad:f7:39:f9:09:50:12:03:27:bb:32:d1:98:e9:bd:3a:
b5:a6:7c:20:9b:d3:19:11:e0:52:66:19:2b:10:d5:19:a3:51:
2f:f5:ca:8e:fe:51:7e:41:c3:a1:31:5c:cb:2c:7f:60:9e:89:
25:9f:d9:ea:89:92:d1:c7:58:a4:0c:39:ae:9f:3d:d7:b1:24:
90:a2:16:25:ab:06:ad:13:0a:e2:0a:10:96:41:a2:31:7d:da:
ee:53:0d:76:25:cc:40:85:95:b3:2b:02:cb:ac:1f:7f:cc:ed:
34:50:47:60:d7:a2:3b:01:59:ad:c3:85:e5:0e:f7:0d:28:f0:
c4:1a:cb:75:ff:fd:b4:c9:de:d9:8a:4e:f5:ea:49:58:00:4c:
18:1d:57:22:02:55:07:c9:ed:01:78:f8:0d:e8:33:65:4c:2a:
7f:06:95:61:63:b8:a1:f8:c2:f6:21:9b:2e:67:b3:8a:ce:0a:
f0:af:f2:4d:c4:e4:99:fd:85:db:4a:f7:5b:c0:1c:0b:c7:ec:
b8:43:32:2a:a5:58:27:1e:3e:ff:e1:d0:21:3b:a9:cc:ae:8c:
80:8f:7c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDWbpaAxmPy/L4oLp7rBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0
YWJlYTAwHhcNMjYwMzI1MTgwMTAyWhcNMjYwMzI2MTgwMTAyWjAzMTEwLwYDVQQD
Eyg3ZDk1YmQyMDNhZjhjZWJjY2ZmODU2ZjFkNjYzYTFlNjAzYWFlNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn5ccAoqth81frbIQHP5s4zvFyKm
zj3j+oRDwZsoiCmDHF9iy1xFS7QQxE09C2kyjp5nPE5HhCBhB99cAMguf6QNhzQN
gbq+zP0h1WJMaUac8H5WWbgG7IBGmz79g7kfWQicFGNnTavAOCXHYXNMdugRQ5jO
g8ZvdIbbTWeJrbeh02RWUd1bYv3Z9wPqoHMHHr/Ot35eNxTTarcyyeQL8Wl5ITAV
tta3RR2leYG/pTmYUBHTY2RDCP+NaOqi11OVOpXRcwoNu6qTge6x9VBblYwFVqso
Lptsg92XYNkfwkxEepwK+2oFy7lNcqAcdnkDSAb6X2qBDpRe9YhrYmwgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2VvSA6+M68z/hW8dZjoeYDquajMB8GA1UdIwQY
MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt
OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0
LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJlfRAv+
ch2SpWhCR7e8z8fXRgSCjz/AqQNSjvKEyoVKPYrI7r2t9zn5CVASAye7MtGY6b06
taZ8IJvTGRHgUmYZKxDVGaNRL/XKjv5RfkHDoTFcyyx/YJ6JJZ/Z6omS0cdYpAw5
rp8917EkkKIWJasGrRMK4goQlkGiMX3a7lMNdiXMQIWVsysCy6wff8ztNFBHYNei
OwFZrcOF5Q73DSjwxBrLdf/9tMne2YpO9epJWABMGB1XIgJVB8ntAXj4DegzZUwq
fwaVYWO4ofjC9iGbLmezis4K8K/yTcTkmf2F20r3W8AcC8fsuEMyKqVYJx4+/+HQ
ITupzK6MgI980A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:26 2026 by rpki-client