Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: yjrq6PEI1DYpQjiMksanfqKhyVYXKC1QgA7Ql8dw82Y=
Subject key identifier: 56:85:13:F8:34:54:B2:6B:DF:1F:B5:04:96:59:E0:A1:0E:7A:FF:43
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019D2695E1E163530850AD0D02028B1AEB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: VcUl-MeV2dO35J7igtql6CHStoQ.roa (hash: FgEXTGiDc3PRCyqi+GhL/fq6GquDlodX0lgQR0+hGik=)
2: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: TMZqf37UUxrk+GiUyEbWxlEA4ftrcbss0lyP1yBacTs=)
3: sTc7d5x8YBD8KLckxEqvHWugEvs.roa (hash: jNItrOQqvxzxGGG+k9qCCY318gxGAc4g/td2z1ediFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e1:e1:63:53:08:50:ad:0d:02:02:8b:1a:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=568513f83454b26bdf1fb5049659e0a10e7aff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:b7:cc:fd:d3:f7:40:f7:60:10:53:b6:42:
5f:3b:3f:93:0a:56:e5:c8:4b:3b:5d:ed:d9:98:dd:
13:77:db:06:40:70:57:99:60:61:08:d5:2b:a8:74:
47:06:17:4e:03:97:a4:58:fb:46:51:dd:89:64:d6:
2d:b3:24:9d:51:d3:fd:83:79:29:c2:64:9d:8b:22:
d0:05:cf:04:1e:fb:91:db:4f:8b:f1:a7:cf:7a:f0:
c9:54:e8:33:25:c4:a8:83:71:09:d6:95:8e:fc:58:
e1:31:07:b2:d9:fc:1b:47:84:0b:d9:5f:ef:66:ba:
28:8b:ce:e7:a6:a2:a8:94:7e:b8:29:f0:23:28:55:
88:e9:0a:44:83:cf:89:13:d9:be:13:dc:ca:f2:db:
d4:73:1f:db:47:31:82:b6:e8:43:90:98:19:68:9a:
f0:56:c6:46:3a:1c:2a:29:e2:14:74:ae:1e:72:05:
13:20:da:fe:3e:91:90:f8:fd:8a:19:c7:93:b0:fa:
c6:64:52:56:93:4d:77:6c:f4:13:29:ea:e5:58:68:
77:fa:0d:08:6b:13:37:a7:93:15:c1:e2:f5:cc:79:
8c:63:cb:77:77:9b:c9:0f:07:40:05:2e:67:f2:1d:
cb:72:f1:35:99:2c:34:28:be:1a:d9:d2:2c:4b:1b:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:13:F8:34:54:B2:6B:DF:1F:B5:04:96:59:E0:A1:0E:7A:FF:43
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8a:df:72:04:01:d6:08:05:9c:41:2e:e7:b4:4e:d1:61:92:
37:b2:92:a4:47:40:00:18:82:59:1a:a8:01:a4:32:e1:8d:7a:
d3:5c:b4:17:57:17:cd:9a:ce:4a:91:c7:8e:55:2b:2e:79:81:
c7:76:4f:6e:2a:db:b3:d8:f7:80:f4:0a:ff:30:4c:5e:45:1b:
c1:ec:89:b5:0f:ef:f3:88:6e:90:9a:6f:52:00:3b:e9:e6:c5:
26:b8:58:70:01:54:d2:c4:e3:ca:c1:50:0e:45:d4:41:c1:e1:
8e:fb:e8:40:8b:d6:d0:07:27:db:12:07:cc:e8:26:20:70:32:
d1:5f:66:a1:96:36:76:15:ce:6b:06:18:77:05:7e:48:48:73:
db:d0:2a:86:ed:4b:5f:4f:60:c2:44:31:6b:8a:51:ca:51:a7:
13:c9:d6:7d:55:a2:13:c6:57:85:71:43:df:5f:a7:b5:2c:dd:
69:77:ab:0a:c6:f8:3c:52:22:f0:46:6f:fe:3c:02:26:d3:49:
9a:a8:d0:e5:a7:3f:a0:94:ea:d0:82:54:c9:58:3e:8f:43:10:
9b:ea:15:92:1b:2b:d6:24:29:96:26:36:e0:1c:ab:a0:a3:f5:
cb:c4:1d:b6:7d:93:f0:11:8d:4c:4d:af:fb:19:8c:72:a8:c8:
e9:8b:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:10 2026 by rpki-client