Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: LhVzyxc4GSoEICnM3qVIjl3qOln5qAESJYjD9eVBL6M=
Subject key identifier: DE:E4:05:5B:EB:B3:C4:F8:16:A4:F7:3D:8C:21:7C:D0:38:33:71:1E
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019D265ED9E33B16E4962E4FA6927FCF7CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: fDV2nB8v5h1rL2Jhz2pAeO+W1RAcbeEwfNXWt2feb5o=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d9:e3:3b:16:e4:96:2e:4f:a6:92:7f:cf:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=dee4055bebb3c4f816a4f73d8c217cd03833711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:71:27:df:7d:b7:57:ed:19:73:8e:5f:3f:
eb:93:d6:2d:ca:bc:4f:66:c2:f7:0a:18:22:6d:6a:
0e:79:27:aa:15:4a:75:9f:b6:3d:51:2e:73:3c:2c:
3d:b9:06:23:0e:b6:3e:7d:6d:b0:99:7d:22:f9:33:
e5:15:5f:75:68:ea:27:f9:f2:f2:b9:03:bd:a2:ff:
3d:59:83:a1:b8:27:68:5d:c7:a2:75:21:ef:a4:fa:
a2:7b:85:32:88:de:b9:f9:43:69:af:89:a1:2a:a2:
8f:e1:42:86:6f:86:a2:d5:72:c9:59:79:47:d5:d8:
b5:84:c0:c0:6f:2e:9b:ac:8e:70:54:09:93:5a:22:
a2:b6:64:ce:09:0f:0c:5f:e4:69:94:2f:53:20:03:
f9:d6:93:d2:94:a4:3d:38:dd:af:4e:6d:fb:5c:3a:
60:30:42:9f:ff:df:37:14:46:f3:d6:80:5f:1a:c3:
90:9a:08:34:bb:67:37:8f:7c:4b:09:f4:de:b4:98:
c3:04:f0:40:ca:a0:b3:2d:13:e5:fa:57:72:70:bf:
0e:e9:5a:08:79:5e:8c:9e:9b:6e:41:b3:ad:08:28:
d6:31:69:c6:a0:fc:cf:34:3a:42:0a:1c:62:99:12:
d4:7d:ab:59:06:7a:2b:54:f7:58:4d:10:66:00:4a:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:05:5B:EB:B3:C4:F8:16:A4:F7:3D:8C:21:7C:D0:38:33:71:1E
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:52:9f:ed:fc:f2:15:4c:5e:0c:a1:96:9a:38:6f:6d:78:15:
67:80:89:42:95:d2:05:cb:20:4f:cf:53:3e:89:1b:89:29:21:
f7:6c:4f:17:fd:43:fe:9a:64:f7:f7:93:72:95:7f:7a:ea:75:
76:1f:a1:ab:62:5b:83:5f:de:40:50:1d:ef:5c:d1:c1:99:47:
36:ed:82:07:ed:4e:3a:37:fd:e5:36:61:56:f8:12:ae:f7:4d:
04:e9:0c:56:0f:fc:0f:ef:b9:88:b6:de:83:00:06:d9:1a:91:
90:08:77:8b:7e:2a:9a:50:59:98:e0:3d:7b:f8:c1:a1:22:8c:
18:7d:16:6b:13:7b:a9:77:7e:5e:3e:b1:b7:95:54:2e:08:e9:
d3:e9:7c:e0:0f:4a:93:4e:b9:6f:aa:53:48:7c:a4:14:43:d1:
6c:fe:5d:7a:f0:6a:da:b4:95:68:a4:b4:e3:47:11:c0:c6:3d:
85:7c:35:95:4b:50:f2:12:e6:9d:d8:e1:c8:dd:ea:65:e5:d2:
5e:3a:b6:6a:06:18:79:2d:a0:48:a1:1d:ac:6d:3c:c5:8d:2b:
84:9b:0c:3f:b6:25:01:cf:a3:d5:37:7f:c6:33:05:49:b0:33:
2a:37:66:10:14:57:1a:2d:8b:80:f1:69:24:a3:60:d5:f5:74:
a6:fd:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:08:43 2026 by rpki-client