Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: xcUiy1GXd0nXxkVshMmPGNMOO7OZrV0ZWsNPaZ9Q+D0=
Subject key identifier: 5B:FB:B4:C2:2F:92:0F:53:7C:2D:1F:7F:92:75:6F:4B:1A:08:2A:92
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019D27DFBC2862C1ACAC9587F1338F35C158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=)
2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: u/ACatw/ISxYImM/W1vqHGojufSqLQvR4ao+uMvA2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bc:28:62:c1:ac:ac:95:87:f1:33:8f:35:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=5bfbb4c22f920f537c2d1f7f92756f4b1a082a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:25:75:ac:ed:ec:8c:2b:5d:31:c3:8b:f5:
3e:63:7c:07:47:84:6f:4f:0e:5d:4c:d2:84:0e:a3:
cb:14:17:94:b5:37:73:8a:ff:ee:a4:35:4e:2c:de:
bc:33:bd:46:57:d4:6f:92:dc:5f:47:14:b9:96:b5:
07:62:6a:13:99:f7:c2:04:15:c6:72:e8:e4:19:b8:
c6:3b:0e:d4:fc:76:02:09:cc:58:a4:dc:8f:71:b1:
8d:60:b3:4b:fd:90:b6:51:2e:dd:4f:ea:f9:6f:ff:
c5:96:2f:50:12:d0:a7:89:1d:ae:0b:d1:38:95:20:
92:90:0d:ec:d6:78:b7:49:69:d7:a4:fd:5a:3b:0a:
8f:f1:b5:f0:d1:55:61:10:fc:a7:78:8e:5e:69:cd:
eb:ff:57:28:d1:b3:f3:2a:49:e5:5d:6b:2e:27:1a:
e4:c7:ad:12:28:69:d2:fa:a8:2d:c9:77:e4:9c:67:
ae:b7:53:18:cc:38:cc:49:bf:ca:91:16:c0:ca:b4:
95:ca:87:17:4d:82:c1:d0:01:c4:05:98:71:c4:95:
6c:37:5d:27:76:a1:48:cf:b1:d0:d0:0a:fc:cb:b2:
9d:03:1c:3f:c8:8d:04:83:29:e1:66:25:d3:b5:7b:
38:d5:b1:97:df:90:94:56:bb:6a:28:ad:ee:39:51:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:B4:C2:2F:92:0F:53:7C:2D:1F:7F:92:75:6F:4B:1A:08:2A:92
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ce:21:b9:5d:e7:9e:5b:84:b5:bb:0e:cd:ea:b9:5b:49:ac:
f0:40:53:10:7b:83:7c:31:40:92:70:09:12:67:62:70:56:1f:
9e:9a:21:e7:01:09:12:2c:a9:64:a2:84:ad:5e:eb:10:21:64:
1e:5b:67:79:8b:61:f1:a3:89:f9:bb:e7:f9:50:69:e7:26:79:
92:fa:c1:04:40:a0:6f:40:04:40:60:77:70:12:ce:6c:7f:9f:
c8:82:66:a4:30:7c:b0:00:04:cb:d1:83:93:62:e4:83:11:6f:
79:7b:06:9a:4c:4b:ef:63:51:a2:89:9e:4f:00:18:6a:88:dc:
f9:6a:27:cf:35:b6:66:a5:2e:0a:92:5b:5d:e1:d0:83:4e:2b:
16:6d:63:a5:bb:0d:d2:ce:5f:f9:05:cb:63:e7:9c:b5:fa:10:
0d:cd:aa:f4:92:c1:09:65:dd:3f:1f:c0:e6:b2:9b:d9:a1:39:
5e:89:b6:2a:4f:45:be:0c:54:43:03:aa:99:7e:77:03:ac:8d:
e3:b9:ba:18:13:7e:95:65:12:62:7a:d5:3f:35:a8:fe:f8:8a:
c7:4b:4e:e4:68:1a:7d:58:8b:09:24:89:74:63:16:ef:ef:71:
26:18:1e:4d:17:f5:0e:77:69:5a:a2:6c:2a:5a:5e:00:58:68:
23:81:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:25 2026 by rpki-client