Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: sWkm/EvZxbD7fdVcl2LYlhz/N1CSJddgXm4D4nio1XY=
Subject key identifier: 23:AA:FA:F0:27:40:B5:11:16:CC:BD:C3:78:71:FC:A6:EF:57:D4:06
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 019D2816A8298B757B7646028151827A95FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa (hash: Wv9na50Hk59IBbuSGPYFZW6tYs7AHRdExWlfEtmgec0=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: 5su287+C7UvOtur9B1CVuGk6PaA30c601NXfDX2O7Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a8:29:8b:75:7b:76:46:02:81:51:82:7a:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=23aafaf02740b51116ccbdc37871fca6ef57d406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:e8:4c:18:59:c0:3b:ee:59:d7:8d:e1:bd:
1d:e4:71:a2:75:de:85:e6:3c:62:d5:c5:75:b1:f9:
82:57:a5:cf:7b:43:bd:c0:8b:bb:cc:22:b4:40:49:
e1:f2:cb:98:94:3d:36:e5:f2:f7:90:f3:9c:fe:e5:
8a:4a:4a:b0:95:69:76:19:00:4e:fa:9d:89:11:dd:
08:d8:32:a7:3a:d5:9e:57:fd:21:11:7b:00:35:7a:
ad:d6:e6:d4:37:56:03:2c:fb:c9:2f:1c:63:fc:23:
4d:96:22:fd:c4:0f:78:a6:c8:ca:d3:08:71:4c:97:
b0:9f:ca:e6:c3:cc:04:cc:99:1f:04:c9:2a:ed:17:
d9:77:1e:d7:73:cd:fe:df:e7:e0:f1:60:c8:25:31:
34:0d:ce:4d:8a:48:ac:18:7e:0b:5c:9a:ee:72:31:
24:e5:6b:fd:b8:11:b0:40:43:1a:68:4a:15:40:a1:
69:14:01:99:97:1e:29:17:b5:32:fc:ab:0c:29:4f:
f9:a2:20:b8:02:9b:ae:05:6a:a5:1f:37:ed:e4:ae:
dc:f2:65:d1:93:cc:b9:f1:05:65:2e:08:cd:50:cb:
79:99:de:8f:ec:9d:e1:1b:bf:88:90:8d:96:dc:f5:
83:82:4f:b4:c3:9a:4b:d8:51:4c:fe:89:b6:60:9b:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:FA:F0:27:40:B5:11:16:CC:BD:C3:78:71:FC:A6:EF:57:D4:06
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:e8:63:0f:bf:4f:98:30:85:ef:c3:6d:d0:6a:bf:80:cf:
38:0a:66:1a:f3:e8:1f:e1:43:40:1e:5c:7c:e5:e9:2c:13:1b:
a4:a0:2c:fc:46:24:06:f4:bf:b1:f3:cd:3a:d2:ba:2f:e8:76:
34:b3:93:f4:dc:68:f9:91:56:88:d1:f0:b9:b2:dd:b5:45:e7:
3c:da:c9:7e:b8:4f:5c:74:ff:3c:26:6d:fb:1f:0a:9d:d5:bd:
4f:bb:45:e6:2d:04:62:fc:de:b9:40:ca:98:26:b8:06:8b:9c:
ec:7c:e4:a8:b8:a0:68:11:7f:f7:1f:79:50:17:4b:26:1c:d1:
bf:24:5a:d1:86:b2:c5:9d:b0:c5:21:2b:7a:09:85:28:5f:6f:
28:cf:13:9d:bb:f2:ae:20:b3:7e:e6:c5:9d:0e:53:32:55:83:
c3:62:19:05:2a:6c:06:a6:6b:1d:30:8f:c1:11:8b:9f:ab:fa:
af:f7:26:d5:27:22:af:fe:a8:b4:39:33:20:8d:a8:3c:13:65:
b0:d7:4d:16:6b:bc:fc:e2:9f:47:57:ec:14:14:e9:c6:bf:80:
c3:79:28:3d:bd:6a:42:27:3d:3b:22:2e:b4:a6:94:95:af:01:
75:41:fb:ea:63:ad:d8:ec:b8:a1:dc:7c:2b:5c:e8:92:01:43:
98:cd:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:47 2026 by rpki-client