Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: Ia6Qi0Q8tfh4HS+mCn/vN9nni9ywPc2LivdW7y/KL2g=
Subject key identifier: 7C:DB:CE:BE:FF:64:61:06:0D:06:E6:6B:D7:E4:1D:35:C1:5B:31:02
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019D2695C50B1D52B108CDEF73BE497854F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 0121
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: lysktSMUBMIFhr5lSGMV3fIs0D932j0xs7vWUjkLe98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c5:0b:1d:52:b1:08:cd:ef:73:be:49:78:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=7cdbcebeff6461060d06e66bd7e41d35c15b3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:49:88:4c:da:ba:10:93:b1:34:9a:98:13:
90:56:08:bd:06:65:66:94:42:80:41:8f:b1:b9:39:
b9:df:45:50:e3:e2:4b:a7:a4:77:eb:2e:ec:1a:e8:
0b:a6:bf:e0:0e:c5:4c:65:36:5c:cd:5d:2c:58:fa:
aa:d6:a5:c8:48:69:e2:22:ad:97:d3:86:6a:54:bc:
1f:a1:df:0d:49:a2:94:74:42:fd:5d:8e:27:02:06:
ac:f3:56:c0:8a:0b:08:22:a3:b2:b8:d4:eb:92:06:
b8:6f:23:15:c5:d4:35:eb:8a:a2:83:7c:96:34:15:
3b:24:b2:3d:51:4d:e8:f3:80:a0:70:df:7b:a6:9b:
41:6c:b4:db:ae:01:15:94:41:c6:b6:e8:ff:26:07:
45:9d:54:b1:e3:1c:0e:37:c5:0c:6c:d0:7c:62:a6:
46:5a:49:c3:d6:d7:88:44:33:35:b7:a6:0c:6f:b7:
a3:07:50:5e:af:1b:fe:dd:3c:3a:91:58:32:9b:69:
7b:78:af:98:44:a4:5d:39:4c:6e:b5:d9:d2:45:30:
81:69:f6:5e:92:5d:2f:d9:43:3a:d5:49:c7:8a:67:
23:b6:2f:69:c4:33:4f:f9:7e:57:fd:21:d3:c4:35:
eb:6e:0c:82:48:ae:1a:56:85:54:1e:4f:95:cf:01:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:CE:BE:FF:64:61:06:0D:06:E6:6B:D7:E4:1D:35:C1:5B:31:02
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5f:66:41:44:80:31:44:23:63:27:73:73:d9:bd:8f:38:aa:
e6:09:b3:35:5a:c3:7f:9c:38:b9:eb:aa:cf:cb:35:3e:6d:0b:
db:f2:88:83:76:b9:fc:56:87:ce:27:6c:b6:67:e9:f6:50:19:
26:d3:ad:9c:b9:72:0d:c6:f2:bf:77:42:5d:55:19:9b:e0:f8:
ba:fe:2a:94:e9:b0:35:a6:5f:47:c0:48:dd:bb:29:da:a9:17:
87:33:7c:af:5a:67:72:fa:fc:c5:0e:89:64:14:15:27:6d:4c:
22:df:d3:a4:b1:62:a2:cd:02:08:76:6d:74:43:99:e3:ae:96:
e7:9b:33:b0:13:de:14:88:c8:68:d9:fa:f9:f1:93:a6:6a:42:
5f:0a:dd:71:dc:a7:04:42:ff:d9:34:7b:12:af:5c:d5:37:e4:
9c:01:4d:34:03:93:64:58:b5:69:10:a5:82:f9:67:2f:b5:ba:
70:8f:ff:33:2b:86:d1:68:0f:b6:1e:70:a2:bc:be:be:65:34:
a4:cb:b4:72:b3:bb:33:b9:b4:23:9d:f4:1b:44:29:fb:a5:bf:
0e:a5:30:9a:bc:b9:b0:62:8b:31:16:0f:ee:46:cb:35:0f:21:
65:18:41:0a:89:9c:a2:22:5c:04:0f:fe:aa:bd:b3:8c:eb:0b:
1b:be:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:39 2026 by rpki-client