Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.mft
File: aDMgCDfWvqvzWDiKAOVFuM5z9jE.mft (raw, json)
Hash identifier: x5o853x6h+sUvCUwJCMBhG6ucDHFD5d1IilBqHDzo7k=
Subject key identifier: 96:DC:D5:84:3C:77:23:0F:95:83:2B:7A:30:E3:48:D3:9A:F5:D6:6D
Authority key identifier: 68:33:20:08:37:D6:BE:AB:F3:58:38:8A:00:E5:45:B8:CE:73:F6:31
Certificate issuer: /CN=6833200837d6beabf358388a00e545b8ce73f631
Certificate serial: 019D322BBC284B25F88F4EB63DFD66E343D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDMgCDfWvqvzWDiKAOVFuM5z9jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.mft
Manifest number: 46
Signing time: Sat 28 Mar 2026 02:00:19 +0000
Manifest this update: Sat 28 Mar 2026 02:00:19 +0000
Manifest next update: Sun 29 Mar 2026 02:00:19 +0000
Files and hashes: 1: 5zk72GIBe30KoSZXKwmuFndxTrk.roa (hash: GT3JzXwUUjVRP+4i+zBT3todjjTDmn2sEVsNEsZY/Ag=)
2: aDMgCDfWvqvzWDiKAOVFuM5z9jE.crl (hash: vBfxHFTXspbDmsEIyahtHPtii6lvx+fiNCRz+22J2w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDMgCDfWvqvzWDiKAOVFuM5z9jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:bc:28:4b:25:f8:8f:4e:b6:3d:fd:66:e3:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6833200837d6beabf358388a00e545b8ce73f631
Validity
Not Before: Mar 28 02:00:19 2026 GMT
Not After : Mar 29 02:00:19 2026 GMT
Subject: CN=96dcd5843c77230f95832b7a30e348d39af5d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:96:fc:d1:b0:bf:56:e7:fd:6d:15:f4:5a:
32:d2:6a:f1:a5:1b:03:5e:98:a4:f1:b9:0c:85:a2:
ee:82:de:b6:d3:f7:0c:48:84:08:72:03:f2:c8:d0:
f9:96:ae:25:e0:bb:f1:34:24:35:c7:b5:02:52:0f:
14:06:9b:f5:1f:af:cd:8e:c4:ae:29:55:92:0d:2e:
b0:31:10:b1:3d:40:d0:bf:08:83:4d:e3:cc:c1:a9:
d0:fe:3f:16:93:56:84:3b:14:6d:76:36:7c:10:07:
77:2c:06:96:8e:1d:51:0b:91:47:04:ca:ca:24:63:
24:f4:db:ae:5f:2f:cc:40:d7:5c:b4:ca:bc:21:a0:
ad:4c:05:2d:98:25:63:bd:9b:04:7b:7a:fb:c0:57:
de:df:e2:d6:a6:6c:b1:58:fe:ab:3d:e4:99:e9:eb:
60:78:03:b3:c2:ef:15:38:97:d7:d1:75:ed:cd:15:
d5:02:7c:42:af:f9:9c:b9:0c:64:67:c3:ea:63:17:
e4:fc:de:1f:ff:1e:ee:6d:4f:ad:e9:6a:ba:e9:71:
72:66:2f:ac:2d:a1:b9:59:0d:9f:a1:39:74:ac:06:
72:8d:35:f3:99:8b:e0:3d:fb:17:26:e9:4e:f0:a8:
64:4d:ca:1d:9d:55:2b:d4:b4:d8:01:5d:25:12:74:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:D5:84:3C:77:23:0F:95:83:2B:7A:30:E3:48:D3:9A:F5:D6:6D
X509v3 Authority Key Identifier:
keyid:68:33:20:08:37:D6:BE:AB:F3:58:38:8A:00:E5:45:B8:CE:73:F6:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDMgCDfWvqvzWDiKAOVFuM5z9jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09b295-2032-4778-9318-9164b542a219/1/aDMgCDfWvqvzWDiKAOVFuM5z9jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a8:8a:e3:cc:e6:3a:8f:b8:91:50:22:86:c9:b2:91:d5:23:
e6:b0:e9:fc:a0:22:3b:2e:58:1a:67:96:25:bf:98:48:fb:c3:
85:a7:8d:37:d3:53:bc:0d:eb:a9:0d:90:53:6b:ea:4c:6d:6e:
88:29:96:f0:b2:8d:fe:4f:55:55:6e:7e:7f:fd:26:36:24:08:
c5:c4:32:15:1e:9e:2a:ba:3a:db:43:83:d0:23:01:65:c9:c5:
eb:da:a4:63:00:04:9b:03:64:63:de:23:24:53:75:06:54:c4:
3e:82:df:f8:5a:9d:e9:5f:6c:1f:11:7a:32:b4:bc:a5:a4:a4:
39:d0:51:5d:b8:55:03:36:92:72:41:69:96:73:39:94:6f:5e:
cf:5b:41:7c:21:2f:7e:24:c4:06:52:39:68:84:e3:2a:48:53:
2f:b3:1e:a2:ad:b3:49:71:26:f3:63:3b:11:93:1d:b0:33:e9:
28:01:2a:5a:ef:69:01:d9:33:43:fd:5d:d0:31:6f:f7:04:da:
c2:cc:c7:40:f6:0a:76:51:d2:20:66:e0:51:20:25:ad:54:74:
a3:97:a8:44:21:1c:36:3a:f3:41:b6:53:3b:6b:e7:30:ed:69:
5f:be:a8:33:52:64:38:15:b0:30:59:e8:8f:ce:ea:c5:f5:1b:
bf:bd:79:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yK7woSyX4j062Pf1m40PXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzMyMDA4MzdkNmJlYWJmMzU4Mzg4YTAwZTU0NWI4Y2U3
M2Y2MzEwHhcNMjYwMzI4MDIwMDE5WhcNMjYwMzI5MDIwMDE5WjAzMTEwLwYDVQQD
Eyg5NmRjZDU4NDNjNzcyMzBmOTU4MzJiN2EzMGUzNDhkMzlhZjVkNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmW/NGwv1bn/W0V9Foy0mrxpRsD
Xpik8bkMhaLugt620/cMSIQIcgPyyND5lq4l4LvxNCQ1x7UCUg8UBpv1H6/NjsSu
KVWSDS6wMRCxPUDQvwiDTePMwanQ/j8Wk1aEOxRtdjZ8EAd3LAaWjh1RC5FHBMrK
JGMk9NuuXy/MQNdctMq8IaCtTAUtmCVjvZsEe3r7wFfe3+LWpmyxWP6rPeSZ6etg
eAOzwu8VOJfX0XXtzRXVAnxCr/mcuQxkZ8PqYxfk/N4f/x7ubU+t6Wq66XFyZi+s
LaG5WQ2foTl0rAZyjTXzmYvgPfsXJulO8KhkTcodnVUr1LTYAV0lEnQAqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbc1YQ8dyMPlYMrejDjSNOa9dZtMB8GA1UdIwQY
MBaAFGgzIAg31r6r81g4igDlRbjOc/YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURNZ0NEZld2cXZ6V0RpS0FPVkZ1TTV6OWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWIyOTUtMjAzMi00Nzc4LTkzMTgt
OTE2NGI1NDJhMjE5LzEvYURNZ0NEZld2cXZ6V0RpS0FPVkZ1TTV6OWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOWIyOTUtMjAzMi00Nzc4LTkzMTgtOTE2NGI1NDJhMjE5
LzEvYURNZ0NEZld2cXZ6V0RpS0FPVkZ1TTV6OWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqiK48zm
Oo+4kVAihsmykdUj5rDp/KAiOy5YGmeWJb+YSPvDhaeNN9NTvA3rqQ2QU2vqTG1u
iCmW8LKN/k9VVW5+f/0mNiQIxcQyFR6eKro620OD0CMBZcnF69qkYwAEmwNkY94j
JFN1BlTEPoLf+Fqd6V9sHxF6MrS8paSkOdBRXbhVAzaSckFplnM5lG9ez1tBfCEv
fiTEBlI5aITjKkhTL7Meoq2zSXEm82M7EZMdsDPpKAEqWu9pAdkzQ/1d0DFv9wTa
wszHQPYKdlHSIGbgUSAlrVR0o5eoRCEcNjrzQbZTO2vnMO1pX76oM1JkOBWwMFno
j87qxfUbv715BQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:23 2026 by rpki-client