Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: UYmSxF/nz2yz79sWzIF+BSDu5jjltp0p+X9nKDV9oQI=
Subject key identifier: B7:0D:01:9F:F2:B2:64:3E:D2:BB:33:9E:F4:A3:EA:98:0C:B4:4B:29
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019D2816B333F61459480F5414294950A6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 1773
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
3: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
4: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
5: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: 3B87rMpcVG/2haS5qvs5cImASlmfgd6v9Ykx8jNl4pY=)
6: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
7: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
8: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
9: qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa (hash: rhOXifa+7nHd3nhrZbKRQ04m/9DDGuJ4vIHbxjYC8DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b3:33:f6:14:59:48:0f:54:14:29:49:50:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=b70d019ff2b2643ed2bb339ef4a3ea980cb44b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:04:dd:cc:db:80:50:64:91:6d:69:d8:7a:
04:bc:77:e4:ba:9f:83:3f:64:68:3f:af:2a:ae:53:
d7:58:b5:2f:27:28:80:ab:77:77:3a:73:de:45:0d:
28:45:54:e6:4f:17:4d:98:a2:48:cc:d7:1d:2f:0d:
79:b9:0d:7d:cc:54:6c:8f:7d:d8:9c:13:66:a6:8c:
d0:0f:8a:eb:fd:27:13:ae:04:b2:f3:f4:60:52:71:
64:1f:6d:3b:a0:88:75:41:da:49:43:8d:78:fe:13:
84:9c:00:c1:75:1b:f9:83:49:ac:16:fe:c6:73:24:
ea:b7:9b:db:41:5c:02:4b:df:9f:a2:ef:92:56:46:
9c:d0:db:22:d5:a4:b6:21:43:af:db:6e:aa:9a:c8:
b6:4f:e0:77:b2:cc:04:cd:f4:f5:ad:d9:77:d7:b2:
ee:c5:12:90:d3:6e:bd:8d:ef:ad:72:4d:2f:af:c3:
dd:86:36:b5:5e:07:a9:8c:d5:90:67:bb:c1:ab:b6:
7f:5e:9f:45:ba:77:44:21:35:80:39:e0:8b:9f:3b:
39:c4:79:23:9e:42:4b:42:ac:3e:21:84:65:ee:0d:
48:b0:17:a1:af:04:fb:34:36:b8:39:56:ab:67:0f:
f8:f2:b5:cf:9d:5a:fb:f0:b3:77:ce:a5:af:97:70:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:01:9F:F2:B2:64:3E:D2:BB:33:9E:F4:A3:EA:98:0C:B4:4B:29
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:cf:db:8f:ba:a0:87:c4:c8:17:a5:65:72:76:97:75:2a:
82:2a:45:f4:a8:e9:e2:fd:54:c3:40:a8:07:99:6f:26:8e:03:
a2:d6:fc:5b:b2:9a:ce:dc:00:36:2a:62:fb:60:1e:b1:a8:da:
f6:e5:c3:ac:b6:c0:99:4d:3d:ae:f8:17:df:cf:bd:b0:ea:d5:
7b:bd:bf:23:cb:e4:a3:3f:fe:c7:f7:8a:2d:56:9d:b6:0c:36:
98:45:0c:e4:a7:79:a4:f6:08:cb:fd:a1:27:94:a8:4f:d0:33:
19:17:dc:d4:94:90:48:6a:62:c4:4e:36:de:31:82:c3:4b:81:
f3:1d:dd:c7:f8:62:04:9e:a9:ee:1f:11:cb:2b:fc:70:1a:ae:
92:95:69:55:7f:41:bd:9a:fe:fe:c0:d6:85:66:96:59:e0:19:
b3:ca:d9:e3:62:f0:60:46:2b:17:b0:ca:ae:5c:d8:df:a5:80:
62:e4:ba:5c:9d:3e:b0:97:b3:0f:f6:dd:6f:5c:ed:6e:5c:92:
26:46:16:44:48:49:ac:76:e3:02:aa:d2:fd:05:9a:dc:d4:c9:
73:78:a3:0a:73:3d:ac:06:31:2a:6a:15:b3:a2:4d:fa:b7:46:
1d:50:1d:95:10:6e:b5:65:cb:bf:34:a9:f1:8b:1d:ba:c2:2e:
2d:66:0a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrMz9hRZSA9UFClJUKbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjYwMzI2MDMwMTA5WhcNMjYwMzI3MDMwMTA5WjAzMTEwLwYDVQQD
EyhiNzBkMDE5ZmYyYjI2NDNlZDJiYjMzOWVmNGEzZWE5ODBjYjQ0YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6cE3czbgFBkkW1p2HoEvHfkup+D
P2RoP68qrlPXWLUvJyiAq3d3OnPeRQ0oRVTmTxdNmKJIzNcdLw15uQ19zFRsj33Y
nBNmpozQD4rr/ScTrgSy8/RgUnFkH207oIh1QdpJQ414/hOEnADBdRv5g0msFv7G
cyTqt5vbQVwCS9+fou+SVkac0Nsi1aS2IUOv226qmsi2T+B3sswEzfT1rdl317Lu
xRKQ0269je+tck0vr8Pdhja1XgepjNWQZ7vBq7Z/Xp9FundEITWAOeCLnzs5xHkj
nkJLQqw+IYRl7g1IsBehrwT7NDa4OVarZw/48rXPnVr78LN3zqWvl3AH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcNAZ/ysmQ+0rsznvSj6pgMtEspMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxbP24+6
oIfEyBelZXJ2l3UqgipF9Kjp4v1Uw0CoB5lvJo4Dotb8W7KaztwANipi+2Aesaja
9uXDrLbAmU09rvgX38+9sOrVe72/I8vkoz/+x/eKLVadtgw2mEUM5Kd5pPYIy/2h
J5SoT9AzGRfc1JSQSGpixE423jGCw0uB8x3dx/hiBJ6p7h8Ryyv8cBqukpVpVX9B
vZr+/sDWhWaWWeAZs8rZ42LwYEYrF7DKrlzY36WAYuS6XJ0+sJezD/bdb1ztblyS
JkYWREhJrHbjAqrS/QWa3NTJc3ijCnM9rAYxKmoVs6JN+rdGHVAdlRButWXLvzSp
8YsdusIuLWYK6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:08 2026 by rpki-client