Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: E8uJ6fdqKfyfPJpsjKjMzOe+BnAxtS53qJ7Uq0uM4Do=
Subject key identifier: CB:19:3F:36:DE:D3:A0:21:E1:8F:83:9D:78:2C:93:B6:8A:99:70:15
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019D27A8DD307E7C15589560D364747D121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: AyrWJ1pCEZ806HcRYC0q/JPQsiRuCmlVwoerkg2YIzw=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:dd:30:7e:7c:15:58:95:60:d3:64:74:7d:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=cb193f36ded3a021e18f839d782c93b68a997015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:99:6b:1a:92:0f:a6:c2:49:7e:92:bd:35:
62:1e:ea:a2:5b:46:62:cc:0d:db:66:ae:a7:a9:56:
d3:b9:53:c5:f5:72:a9:4a:27:2a:bc:b6:85:65:33:
7f:1f:05:1d:a1:af:50:bd:e6:80:35:69:0a:c5:af:
8a:c5:e8:86:32:52:97:d6:c8:9e:6e:86:d8:5c:6c:
db:7d:97:b2:ed:e4:fb:df:c5:1f:59:32:41:d1:32:
15:83:10:69:02:59:e7:a1:ba:f5:ed:83:85:cb:1b:
17:53:be:26:bc:58:fa:30:f0:0c:43:79:e4:c7:25:
8c:2c:b7:20:ca:4a:a9:a1:a2:07:13:33:31:48:95:
ac:95:12:3a:a4:1b:5b:33:b8:f4:ee:99:c8:92:80:
ec:ec:cb:77:67:a0:36:b8:e6:07:f8:e0:64:be:08:
d6:e5:27:44:dc:71:50:23:e1:33:32:c4:0f:a0:cc:
a0:c3:92:63:5e:e7:bf:ef:08:60:a3:ef:1f:95:02:
ce:c5:97:67:93:26:13:f1:d9:7c:f1:4a:6f:2a:e3:
23:72:cc:f5:98:81:54:db:aa:ae:9e:14:3f:fa:74:
30:9e:74:7a:ee:2a:39:80:a9:75:94:0c:eb:33:29:
92:2d:0a:bd:6d:89:33:8f:95:1e:36:d1:c8:06:8b:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:3F:36:DE:D3:A0:21:E1:8F:83:9D:78:2C:93:B6:8A:99:70:15
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:59:ff:f7:ef:9f:36:dd:d8:e9:2a:d4:86:9f:c1:a9:4f:16:
e5:27:48:49:7e:fa:e0:98:ee:fa:57:94:de:ba:80:83:1a:9b:
f6:d1:0e:7e:51:9d:fc:cb:7f:84:08:fe:4e:71:69:15:2d:7b:
3e:af:27:1b:5c:72:5e:62:0f:4c:6f:bc:75:15:3a:d0:b3:25:
16:61:80:09:3a:12:f9:c7:d9:25:63:93:af:cc:1c:2c:e2:34:
d2:9c:a5:dc:a4:e4:d9:be:49:da:5d:f1:80:06:cc:61:e3:65:
ec:87:ad:96:9c:a2:88:15:de:a7:02:97:d8:14:82:94:fe:8c:
e7:8e:98:a5:f1:9c:51:58:08:f6:80:aa:3e:49:84:4c:c8:1b:
7c:0f:b7:30:71:b9:05:c9:fc:18:5d:89:f2:07:dd:9d:21:04:
fb:c5:af:db:62:e3:4a:92:42:c7:ca:5d:a4:97:9c:7a:91:3c:
77:ea:a2:24:4f:0f:9a:7f:9a:c4:a0:5e:db:91:00:40:39:69:
6a:ec:3a:49:64:08:25:0c:e1:3b:cb:03:5e:2f:50:bd:23:eb:
65:27:1c:aa:8c:ae:5d:eb:23:22:1a:8b:4d:37:c4:00:39:d3:
12:2c:cf:ef:b2:7a:93:1c:8d:01:ac:3c:7c:08:35:f6:cf:44:
6b:17:ae:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqN0wfnwVWJVg02R0fRIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy
NDg2YTQwHhcNMjYwMzI2MDEwMTExWhcNMjYwMzI3MDEwMTExWjAzMTEwLwYDVQQD
EyhjYjE5M2YzNmRlZDNhMDIxZTE4ZjgzOWQ3ODJjOTNiNjhhOTk3MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KZaxqSD6bCSX6SvTViHuqiW0Zi
zA3bZq6nqVbTuVPF9XKpSicqvLaFZTN/HwUdoa9QveaANWkKxa+KxeiGMlKX1sie
bobYXGzbfZey7eT738UfWTJB0TIVgxBpAlnnobr17YOFyxsXU74mvFj6MPAMQ3nk
xyWMLLcgykqpoaIHEzMxSJWslRI6pBtbM7j07pnIkoDs7Mt3Z6A2uOYH+OBkvgjW
5SdE3HFQI+EzMsQPoMygw5JjXue/7whgo+8flQLOxZdnkyYT8dl88UpvKuMjcsz1
mIFU26qunhQ/+nQwnnR67io5gKl1lAzrMymSLQq9bYkzj5UeNtHIBosUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsZPzbe06Ah4Y+DnXgsk7aKmXAVMB8GA1UdIwQY
MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt
NzAzY2FiNGQwNTk4LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4
LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVn/9++f
Nt3Y6SrUhp/BqU8W5SdISX764Jju+leU3rqAgxqb9tEOflGd/Mt/hAj+TnFpFS17
Pq8nG1xyXmIPTG+8dRU60LMlFmGACToS+cfZJWOTr8wcLOI00pyl3KTk2b5J2l3x
gAbMYeNl7IetlpyiiBXepwKX2BSClP6M546YpfGcUVgI9oCqPkmETMgbfA+3MHG5
Bcn8GF2J8gfdnSEE+8Wv22LjSpJCx8pdpJecepE8d+qiJE8Pmn+axKBe25EAQDlp
auw6SWQIJQzhO8sDXi9QvSPrZSccqoyuXesjIhqLTTfEADnTEizP77J6kxyNAaw8
fAg19s9Eaxeurg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:47 2026 by rpki-client