Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: lfgvv09jhhN12Sl5Gk5c0kMpYdhRZzNanhr1bDKeMJk=
Subject key identifier: 30:33:F8:1C:2C:6F:33:48:6C:E0:BF:43:0D:A6:B0:A4:D0:4D:41:FB
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019D284D88168A56418D629A43A173C108BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
3: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
4: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: UszYs/hdHDEhBu4cZHmF0hqBLHgtdXJdmdGA8ebGxRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:88:16:8a:56:41:8d:62:9a:43:a1:73:c1:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=3033f81c2c6f33486ce0bf430da6b0a4d04d41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:a3:21:8c:d4:23:e7:1c:7f:b8:6e:fc:c0:
ba:e8:2c:22:fe:6d:5a:84:06:a4:07:4a:74:c3:95:
a9:d4:16:cb:8e:6c:db:64:a9:41:c3:b7:f9:9e:9c:
2a:99:43:4e:c4:0a:dc:8e:00:19:ba:f6:34:58:9f:
1b:dc:08:ac:82:fc:61:9f:eb:15:c4:32:89:8f:4b:
c0:ca:a0:01:a0:f8:17:4c:95:c4:f5:6f:d9:79:16:
4e:8a:42:4f:c3:b0:b4:0c:bf:fa:98:2e:de:d5:f2:
d5:d9:1d:fd:76:18:39:35:c0:60:93:e9:8b:2f:e5:
13:0a:66:bd:bb:b4:29:ef:54:ae:7e:90:72:83:46:
5d:87:d8:c9:c9:70:c5:12:b1:76:86:78:fc:49:c5:
71:a2:a4:19:c6:c5:fb:24:60:72:80:48:77:48:21:
e6:18:1a:ee:2c:48:61:88:71:4b:c0:e3:7d:9a:b0:
24:a7:8e:d8:43:e5:84:17:99:00:36:2c:7c:ab:4c:
a6:94:7a:0a:77:0b:93:a2:73:e1:6a:20:1f:63:22:
91:aa:9e:f6:15:b1:44:60:5e:25:4f:9c:ac:0c:38:
72:49:55:3d:e6:06:d7:c1:a7:1a:94:1e:b4:cf:39:
24:4f:c5:15:ab:8a:66:c1:d6:d1:f3:f4:51:f1:b5:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:F8:1C:2C:6F:33:48:6C:E0:BF:43:0D:A6:B0:A4:D0:4D:41:FB
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7a:fa:65:cd:e4:72:86:5e:39:35:66:ce:82:ad:3d:53:32:
97:0a:88:f9:b7:b9:89:9d:87:de:ef:50:30:95:a5:70:5a:7c:
6c:d0:79:a9:c5:6c:0d:b5:82:ca:51:10:2b:f5:44:10:41:ba:
3f:ae:6b:fd:da:28:03:4c:bc:97:cb:63:52:eb:b6:4f:7f:88:
3d:f7:a5:fc:5e:eb:7d:23:53:7a:d4:cc:f3:9b:a5:d5:db:68:
6e:7a:e2:e3:f9:41:72:f3:37:76:70:27:f3:32:25:25:64:c0:
cb:72:8e:85:6c:03:50:4f:29:b8:40:ac:6d:8f:cf:07:2f:1f:
13:d2:f1:07:dd:1f:e2:31:c1:c9:3a:65:ee:f0:1c:42:08:14:
a5:8e:e7:c9:b6:35:25:b5:51:fc:28:ac:c5:2b:59:c5:86:54:
36:2a:0e:51:10:72:78:c5:e5:27:a4:f6:c7:ae:17:ed:0d:61:
f5:a5:06:b5:57:5e:81:bc:e0:64:b8:0a:99:83:0a:e2:e7:d0:
cc:6e:0c:6b:ec:a3:e0:1e:d9:6f:8d:a7:95:0a:3c:9e:7d:80:
ea:55:59:b3:cf:b0:ec:5f:e8:d3:86:40:1a:b9:91:5a:51:4b:
c9:05:7d:14:47:72:a7:dc:73:4f:79:39:01:e0:a0:38:6b:6a:
61:be:59:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYgWilZBjWKaQ6FzwQi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjYwMzI2MDQwMTAyWhcNMjYwMzI3MDQwMTAyWjAzMTEwLwYDVQQD
EygzMDMzZjgxYzJjNmYzMzQ4NmNlMGJmNDMwZGE2YjBhNGQwNGQ0MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ejIYzUI+ccf7hu/MC66Cwi/m1a
hAakB0p0w5Wp1BbLjmzbZKlBw7f5npwqmUNOxArcjgAZuvY0WJ8b3Aisgvxhn+sV
xDKJj0vAyqABoPgXTJXE9W/ZeRZOikJPw7C0DL/6mC7e1fLV2R39dhg5NcBgk+mL
L+UTCma9u7Qp71SufpByg0Zdh9jJyXDFErF2hnj8ScVxoqQZxsX7JGBygEh3SCHm
GBruLEhhiHFLwON9mrAkp47YQ+WEF5kANix8q0ymlHoKdwuTonPhaiAfYyKRqp72
FbFEYF4lT5ysDDhySVU95gbXwacalB60zzkkT8UVq4pmwdbR8/RR8bVEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAz+BwsbzNIbOC/Qw2msKTQTUH7MB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnr6Zc3k
coZeOTVmzoKtPVMylwqI+be5iZ2H3u9QMJWlcFp8bNB5qcVsDbWCylEQK/VEEEG6
P65r/dooA0y8l8tjUuu2T3+IPfel/F7rfSNTetTM85ul1dtobnri4/lBcvM3dnAn
8zIlJWTAy3KOhWwDUE8puECsbY/PBy8fE9LxB90f4jHByTpl7vAcQggUpY7nybY1
JbVR/CisxStZxYZUNioOURByeMXlJ6T2x64X7Q1h9aUGtVdegbzgZLgKmYMK4ufQ
zG4Ma+yj4B7Zb42nlQo8nn2A6lVZs8+w7F/o04ZAGrmRWlFLyQV9FEdyp9xzT3k5
AeCgOGtqYb5ZQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:13 2026 by rpki-client