Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: JqqYr9e7o3cciYKrGx26zckq7ZmwzAFwgB60yQid0rY=
Subject key identifier: 84:EF:B3:F7:3B:9C:8F:83:F9:D8:8E:73:AC:96:63:53:E6:14:7A:64
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 019D25832EAE5A59B81E4B191DEA00EB1655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: PEm6S54U13MaQ71v1Rl3kDHGSuw.roa (hash: XFZVOEjHeDyAPzFdAiODpavr6Nt9yGr3hDVGBJwU18s=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: Cn7fuun1ATzk7s+Va3W7liW5NDwt4CUWPGluWxjYNCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2e:ae:5a:59:b8:1e:4b:19:1d:ea:00:eb:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=84efb3f73b9c8f83f9d88e73ac966353e6147a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:2f:43:06:3d:9a:9e:91:5b:c7:b7:b1:2b:
04:f0:2e:90:ca:12:98:27:9d:1f:e8:e2:81:d8:a3:
ef:b5:8f:ab:c9:97:02:7f:7d:4d:ae:79:60:c2:3f:
3e:e6:a2:0e:61:e3:72:5f:e5:2a:fa:61:30:bb:a1:
28:7e:79:c8:aa:bc:de:fd:7a:ee:22:be:c7:a2:77:
db:e5:f9:20:61:56:9a:4f:5c:dc:52:2e:2c:ff:b9:
c1:1c:d1:13:e7:fd:41:66:06:1b:f8:65:c1:07:e3:
89:ad:c1:07:24:d4:7a:d5:c3:d4:e7:78:08:35:d7:
59:bf:df:79:d5:d9:46:ba:c7:70:88:ca:ab:8a:64:
58:2a:bf:da:32:c6:cb:42:e5:d1:9a:91:35:9f:a8:
95:56:7d:80:39:74:37:cb:1c:66:8e:17:d7:a1:45:
49:a8:55:16:1f:4a:4d:b0:14:e7:b4:27:bb:5d:06:
9b:f4:8c:84:63:e1:a5:40:2e:a5:62:36:75:fd:6b:
b2:79:85:9a:ea:27:e1:86:ee:62:5e:db:20:79:98:
ef:5a:ce:19:08:79:00:ad:7a:44:1c:aa:40:36:cd:
bb:7c:58:7a:77:4c:06:4a:11:86:51:2a:b0:9c:fe:
71:a3:e0:8a:03:32:a3:56:88:44:93:c0:69:a1:a7:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:B3:F7:3B:9C:8F:83:F9:D8:8E:73:AC:96:63:53:E6:14:7A:64
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:fa:df:1a:94:50:c9:18:42:39:9d:fd:30:16:a8:85:ed:75:
39:7f:54:27:c1:c4:db:df:3d:4e:8c:7a:27:74:dc:ab:28:01:
11:d8:33:96:46:45:2c:78:f5:bd:23:3f:66:05:74:92:a4:e6:
0b:1d:d9:89:62:34:35:58:22:2a:79:ee:32:5b:c3:51:da:89:
68:be:0c:86:2f:a3:ef:c1:7b:b4:7d:58:f8:f0:fa:e8:9b:bf:
11:f2:e0:f2:69:d4:a3:a1:c1:db:72:88:d1:2b:f9:86:27:e6:
b3:37:7e:ff:d4:2f:95:5b:8c:3c:a4:17:c9:c2:b2:d8:86:ef:
5c:51:45:2a:d1:5b:8c:d7:dc:97:d9:f3:3d:2f:aa:f3:14:eb:
68:77:2e:54:bd:93:73:99:d0:e8:36:e9:aa:d1:65:d5:8c:90:
12:d7:5c:51:4c:e3:72:b9:24:8c:0a:0c:5a:4e:59:cf:4f:87:
60:ec:6d:52:5d:50:84:5b:6b:05:84:2e:6f:a6:71:73:7e:bc:
52:0f:98:3b:20:75:6a:4a:7e:5a:6e:d0:54:b4:cc:26:6b:f0:
a1:b2:e0:33:7e:14:95:11:c9:4d:6b:d0:af:1f:12:55:78:bd:
24:d6:6e:10:40:cb:7d:06:3e:58:7d:d6:90:51:42:87:f4:c1:
71:40:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:41 2026 by rpki-client