Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: Amj72OObGDENHcfNIA9cu1B/+CY3/frIWTQl7VM/IKw=
Subject key identifier: 34:12:3F:70:4D:86:2F:39:48:E1:68:5A:B6:B0:A0:79:31:E0:0D:CE
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019D2A04C65D712E92F88A75EA29A595A91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 1774
Signing time: Thu 26 Mar 2026 12:00:49 +0000
Manifest this update: Thu 26 Mar 2026 12:00:49 +0000
Manifest next update: Fri 27 Mar 2026 12:00:49 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
3: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
4: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
5: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: vrQr3V5vXdAT9lG4eLTPd5oJlyYNe7piywFOgHd7w3I=)
6: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
9: qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa (hash: rhOXifa+7nHd3nhrZbKRQ04m/9DDGuJ4vIHbxjYC8DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c6:5d:71:2e:92:f8:8a:75:ea:29:a5:95:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Mar 26 12:00:49 2026 GMT
Not After : Mar 27 12:00:49 2026 GMT
Subject: CN=34123f704d862f3948e1685ab6b0a07931e00dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:44:b9:1d:90:c8:fc:e2:98:a4:7d:b0:79:
20:e2:06:b7:db:82:7b:93:1d:9c:ee:aa:9c:05:7f:
7a:e7:a3:9c:9a:0e:2a:f3:41:c1:89:07:63:09:ef:
2a:f5:1c:df:61:39:d3:97:d4:a3:7f:6e:64:86:4e:
47:9c:ae:b6:f2:b6:ef:6d:2a:b8:98:47:86:2c:96:
ac:76:dc:83:2f:d4:26:7b:ad:bb:a5:94:dd:e7:a8:
18:ea:75:65:f0:09:3a:73:fe:40:f6:a1:93:81:c2:
7d:71:ca:1f:b8:37:25:4b:f0:71:39:82:83:3e:67:
5b:b8:30:39:f0:0a:46:ff:ca:95:03:37:a6:e8:8c:
5e:7b:50:5d:18:6b:2b:4f:ac:2a:26:f5:01:e2:80:
d9:99:33:cd:33:3f:60:de:82:73:13:ad:79:7f:df:
7c:eb:80:28:d6:11:e7:3b:15:3e:ac:73:60:a5:a2:
53:a5:26:24:59:db:6d:08:85:3c:49:1e:60:a2:bf:
dc:76:bf:ee:8b:ec:9a:24:34:d4:d3:cb:bc:27:e7:
a8:f7:74:37:72:21:4b:78:28:30:f6:66:17:ec:59:
2e:61:67:02:31:bc:2c:fb:c4:42:fc:5a:a1:43:c8:
f3:bd:b6:ef:2d:15:e8:0a:2b:e5:c2:2a:c6:bb:24:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:3F:70:4D:86:2F:39:48:E1:68:5A:B6:B0:A0:79:31:E0:0D:CE
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:01:73:9e:66:57:20:f7:14:7e:d7:21:90:03:29:2d:e3:6d:
fc:a0:1e:6b:ec:8b:2e:f3:e0:76:21:6b:b1:4b:26:8c:bc:54:
ba:3a:b1:30:b8:ef:5b:ac:82:e0:3f:b1:bd:ae:8f:a6:cf:58:
29:a6:e6:77:81:25:fd:71:e8:fb:13:a0:d7:12:37:0c:ce:58:
46:1b:34:96:68:ac:d3:ff:c2:36:5d:35:e4:56:b7:b7:3d:19:
62:78:65:b3:f8:98:d6:99:91:05:4c:cf:5c:b9:4d:28:7f:7e:
82:50:b0:f3:df:6b:e0:07:37:df:48:c4:33:e7:6a:5c:d5:e7:
19:08:24:40:b0:f1:9b:8a:2f:c2:1c:26:a4:0b:e0:cb:7f:2b:
58:9a:7f:25:b4:ac:fe:49:7d:08:d4:e4:54:95:73:08:e9:a0:
f4:31:90:69:3c:e8:11:a7:dc:8f:37:4e:27:31:07:f4:64:74:
84:aa:11:fc:ee:b1:16:44:1c:fb:df:7d:fe:c4:a4:bb:18:6d:
98:b6:bc:4f:93:1c:2c:31:52:36:57:55:2e:f9:cf:fb:04:f6:
90:9c:43:a9:65:14:d7:9a:3b:48:be:e9:c6:63:f7:96:59:83:
77:27:42:17:3b:1b:d3:60:31:34:45:84:da:d4:41:b2:32:f8:
5c:8e:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:24 2026 by rpki-client