Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: 1+rfUnscD/acexc/ECE1w+5qA/QFLbqFhO6SXq1Yqqo=
Subject key identifier: DF:16:B9:F0:30:CF:01:09:9E:A2:C0:0A:82:FE:6D:B4:A5:D6:91:19
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019E1DC73B3D2ACDF4062946AA70F157E62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 17F3
Signing time: Tue 12 May 2026 20:00:56 +0000
Manifest this update: Tue 12 May 2026 20:00:56 +0000
Manifest next update: Wed 13 May 2026 20:00:56 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: GacqXUKlxyFCN3iRGsh5r8QtX8c.roa (hash: c7rKxZ3135SLzDKJLfScVXDzCGPZhUKThOMw3qO//fA=)
3: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
4: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
5: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: 8u/g5fCc1cDd6HVwzT/38eFJcJmFCP1Tpn24398pwaM=)
7: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
8: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
9: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:3b:3d:2a:cd:f4:06:29:46:aa:70:f1:57:e6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: May 12 20:00:56 2026 GMT
Not After : May 13 20:00:56 2026 GMT
Subject: CN=df16b9f030cf01099ea2c00a82fe6db4a5d69119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:45:ed:26:0f:d4:f8:1b:97:d4:81:87:e2:
7a:89:ca:8a:b7:e9:c4:60:db:a0:12:80:f5:02:f3:
22:10:08:62:32:30:9d:53:11:dc:77:5f:b1:01:4c:
81:f8:42:5c:5d:57:6b:81:96:fc:15:bb:74:ac:09:
a5:37:f9:e6:2b:2b:74:d2:ea:23:e7:b4:45:b9:f6:
b6:12:7e:d4:9e:c3:d0:d2:47:81:ff:12:78:82:23:
83:14:4a:73:c5:6d:91:77:ea:a0:96:60:38:05:31:
0c:27:7d:aa:4c:0c:8f:ba:e9:09:17:91:93:ff:de:
09:24:eb:31:30:bf:fb:ed:49:53:fb:6c:87:42:5c:
37:ef:f3:0c:16:88:da:4b:89:31:5d:8b:6b:28:e1:
c3:30:ac:2e:08:b5:f3:89:6d:b4:48:28:1f:9b:2f:
76:60:48:5f:45:2e:fe:5a:08:0a:ce:47:9c:6c:3d:
db:08:20:f2:b4:f6:83:84:35:43:3b:7f:31:a4:78:
05:b5:2c:5a:01:fc:6e:ea:0f:53:d7:02:0b:f3:0f:
fc:af:b1:f2:a1:3c:11:2b:03:83:31:3c:11:b4:d1:
20:47:0d:c7:d2:4c:e4:5b:b7:dc:96:bd:42:bd:d3:
10:3a:6c:e8:5e:12:83:00:66:85:a6:1c:e6:70:93:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:B9:F0:30:CF:01:09:9E:A2:C0:0A:82:FE:6D:B4:A5:D6:91:19
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:27:a4:c4:b2:2b:9c:1a:22:7e:88:3d:0f:2b:e7:77:cf:cf:
24:7d:4b:2c:60:23:d8:fe:27:f6:d1:cd:50:8c:8c:be:49:5e:
9f:6b:99:13:d3:db:28:24:42:e9:56:f1:b6:cf:cd:dc:9a:3b:
e3:a1:22:c0:de:bc:62:d8:ed:d0:1b:54:bf:d7:09:54:60:37:
c6:30:02:d2:2e:e6:3e:f1:7f:c5:7f:df:97:26:43:96:a8:e1:
73:8e:6a:f0:38:48:a1:11:8f:7d:c5:0f:a6:8c:ac:78:3a:85:
6f:4b:62:19:f5:b9:2c:3d:bb:5e:01:5a:35:37:fe:cf:64:bc:
0f:e9:9a:d7:1f:a5:09:c3:16:5a:0e:b2:59:f2:3c:54:69:a8:
98:36:d7:54:38:5d:69:2a:42:be:58:95:53:d6:30:6a:8a:1b:
ed:71:1e:d0:e6:66:0c:32:29:c9:fd:68:d8:b6:b2:27:8f:eb:
3a:9d:ad:c1:50:61:2d:5d:11:3f:8a:fb:b9:ab:b5:a2:e9:52:
ac:e8:3f:d5:b1:5d:08:4f:54:a9:a7:40:4a:7f:ae:54:85:51:
5c:e3:8b:5a:b4:b2:8b:1b:65:83:4f:44:e2:90:5f:d1:9d:8c:
92:74:da:0e:18:5e:d5:01:9b:95:28:aa:f7:21:9f:6f:2e:4d:
b6:95:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:05 2026 by rpki-client