Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: L5TCJ2IPOrcUDQx0aIFieh328PFZSzXuP2v+26G2E1U=
Subject key identifier: 81:A7:66:57:89:14:B8:2D:23:EB:6C:2F:82:60:DD:ED:EC:C3:33:7D
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019D2703FE0B1B70AA13C47D40119CB1A5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 14CD
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: 3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa (hash: RYP+kCE6mn90ehLAvdC/KeyfQc4In+6wu6IVJb4OH5c=)
2: PeACFRzbqNg73GPInX-i49BNtHM.roa (hash: so0IXS+T3rWA07JEuNq7WJWAoqVF14IBJdyXjwBvRmQ=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: cbWp5Zesx3T+YCcK/ZV9JtqejrOUarYurZvL/q6HgMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fe:0b:1b:70:aa:13:c4:7d:40:11:9c:b1:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=81a766578914b82d23eb6c2f8260ddedecc3337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:5d:ad:43:d2:3a:b3:57:6c:1e:9c:c1:c1:
00:a8:16:22:65:35:b8:8b:f8:5c:e0:b5:66:14:96:
0d:68:ed:58:61:4d:3d:fc:79:b9:ac:59:13:42:be:
48:e8:97:59:7e:20:f9:23:17:bd:13:dd:1a:cc:a8:
6b:06:51:89:52:1f:60:5d:86:ce:bb:f4:17:8e:4d:
4b:3a:2d:dc:0a:95:14:f1:ea:c4:a6:12:14:1f:20:
37:ce:34:63:bc:84:3f:aa:b1:07:3b:28:6a:be:1b:
ff:75:51:3d:72:b3:df:cf:23:3f:aa:a0:52:cb:2e:
80:b3:f8:f5:a5:ec:4c:94:de:07:42:77:3d:5e:f0:
14:95:e2:7c:2c:c4:b2:d7:53:82:c4:2e:7b:3b:12:
41:8a:6e:b4:ad:9a:a1:3a:55:fc:64:8f:de:32:65:
cd:de:f8:b9:dd:9c:77:e6:4e:fe:36:7d:d6:f5:c1:
7e:a9:f1:20:60:25:5c:27:5e:81:2f:33:7c:6e:4c:
99:06:65:09:d6:fc:65:47:f8:40:58:31:a0:bb:5e:
72:55:ee:42:11:73:58:9a:16:b4:25:69:c2:fb:17:
6d:de:05:8a:d5:0a:30:84:1e:92:12:75:d0:85:2e:
92:e2:09:36:e5:b1:a4:b6:bf:5d:25:72:18:e9:b8:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A7:66:57:89:14:B8:2D:23:EB:6C:2F:82:60:DD:ED:EC:C3:33:7D
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:df:eb:05:9a:9c:86:b4:7b:d3:fc:aa:20:b4:a6:5f:e9:
a0:da:e5:8d:d4:8f:6c:a5:5c:7e:da:fd:a2:e8:11:bb:2d:46:
06:c9:ea:e5:20:ac:a4:9c:b1:c1:c6:97:07:17:c7:1f:ce:c7:
50:46:14:b6:30:da:e7:04:b4:26:53:fe:67:d6:8b:96:b2:6d:
52:24:8c:77:4a:05:48:cd:f8:cd:ae:09:f1:10:9c:aa:0b:85:
2b:74:f4:f7:48:3d:ab:8f:72:57:89:c5:05:24:4b:37:15:5c:
6b:90:39:71:d0:79:90:50:71:21:9c:2d:eb:3e:b2:6d:6c:98:
ac:0d:fc:ef:b8:4d:3b:14:75:39:7f:f1:17:0d:15:f9:99:67:
62:45:7f:f7:d5:76:ea:f4:3b:f5:fb:d6:cf:d9:d5:f7:65:94:
b3:5c:cb:ac:40:a3:81:b4:15:e4:a5:30:72:70:62:e9:a8:c0:
48:88:32:7e:72:d9:7f:27:31:a5:a5:e1:8e:5a:98:91:03:d8:
9e:80:fa:d3:b7:2e:f0:f2:f0:d2:05:62:d7:8b:f5:ae:22:b3:
4f:50:d5:a7:28:a9:f3:f0:12:36:f5:ef:df:98:24:9d:25:46:
77:a1:8e:c1:74:ae:3b:2c:83:da:2b:dc:af:99:d1:f3:19:6c:
5f:08:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:32 2026 by rpki-client