Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: rooLK2HC6sEtL0c7W5FO51aEwgDd2D4+JAXbOcP5NWI=
Subject key identifier: 85:C6:44:84:AF:59:2F:B8:27:E0:BB:6F:E6:81:B9:48:81:90:C6:DE
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 019D2695F08EC8758BC831E0BF07B259D6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: DQHz18ELdv8jnffr82Jko005C6FymJxyAqDllCDfJQs=)
2: lomzg8TRXkBkQAJV3SYj7kC0l0k.roa (hash: gnOZFo1e3nzIFcl3On+9oUhEAr2nhDp2g8Ki0TCHhqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f0:8e:c8:75:8b:c8:31:e0:bf:07:b2:59:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=85c64484af592fb827e0bb6fe681b9488190c6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:15:4b:e3:f4:c9:b6:de:32:fd:76:96:13:
e2:2b:b1:23:7e:dc:1f:9b:9b:96:fd:69:ad:62:e4:
ba:5e:95:7b:58:bb:03:89:f5:30:f8:fa:06:63:b9:
53:7a:89:33:32:f2:e8:c9:47:b5:0f:05:a1:c3:46:
33:96:07:f4:51:ae:e6:ab:6c:43:c0:cf:05:4f:a9:
15:eb:5d:a3:fc:a8:d4:71:87:30:73:ca:c6:fa:13:
ff:b2:11:25:6e:4b:d4:64:e0:30:a1:a7:24:55:8b:
9c:15:8b:1e:83:92:1d:3d:a5:94:ea:1a:54:f3:ce:
0f:9a:62:17:1a:f3:74:a0:ea:38:b3:e5:1f:1e:a0:
f8:7a:19:ae:2f:cf:1e:86:b9:5a:12:7f:39:42:44:
14:6d:75:6e:5f:92:55:86:c5:90:a5:29:da:c0:62:
91:24:9c:bc:80:74:9d:7a:f0:75:5c:d6:22:b5:2e:
df:9f:4a:dc:b4:9e:ca:f6:7a:09:7c:63:68:15:7b:
89:0c:33:cb:71:ef:65:31:36:c8:bc:cc:7d:2c:21:
c7:4b:17:c5:ac:dd:b7:a3:c4:c0:4e:ea:f8:7e:39:
65:45:84:62:25:dc:c8:28:34:24:9b:db:f4:02:80:
51:03:98:0a:ea:7f:4e:14:06:82:71:5a:e3:de:47:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:44:84:AF:59:2F:B8:27:E0:BB:6F:E6:81:B9:48:81:90:C6:DE
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:9b:d1:c6:d4:42:c1:d6:3f:03:f1:6d:a5:2f:a1:ba:59:
22:ce:1f:31:4d:2d:2b:fd:7e:9a:d9:32:43:fd:8c:d6:a0:6f:
4a:4b:ba:cc:23:4c:a3:5a:3a:66:3c:59:d0:31:00:65:3a:7c:
e8:5f:62:9b:8d:79:78:ec:f8:2a:c1:e7:b3:41:ee:85:09:de:
a7:02:b9:ee:c7:08:27:7f:93:f6:f4:9b:ff:9a:c4:ea:dc:90:
eb:50:10:77:91:ac:39:55:81:b3:2b:bc:2c:60:e4:9c:4c:cf:
32:9a:3e:96:e9:0e:7e:e5:d2:0b:3a:0e:4d:35:51:f1:11:8f:
07:5d:56:00:ee:28:9b:5e:73:7d:39:c6:bc:e9:18:e9:85:90:
8b:13:fc:c9:3e:7b:07:94:81:e6:f9:71:ef:02:e5:79:c8:89:
97:5d:29:c0:db:23:cc:73:49:ac:fa:a8:9f:50:b2:6e:8d:af:
a3:92:1d:80:a0:38:1b:19:06:bb:02:59:cf:93:b8:ef:84:1a:
b8:46:00:fa:5f:f5:e3:54:b8:04:e4:09:1a:c3:c9:5d:a3:51:
f0:6a:64:d2:04:67:ca:d9:0d:5e:d6:78:f6:18:fe:af:8c:7c:
a8:4e:9e:65:52:eb:0d:05:a4:37:fa:bf:b8:d5:00:85:e9:14:
e7:b0:d2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfCOyHWLyDHgvweyWdasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Nzk5Yjc3MmI1NTFkYjc4NGVlYmE4YjBlMTE1YTBjNDMz
Y2QzYmEwHhcNMjYwMzI1MjAwMDUzWhcNMjYwMzI2MjAwMDUzWjAzMTEwLwYDVQQD
Eyg4NWM2NDQ4NGFmNTkyZmI4MjdlMGJiNmZlNjgxYjk0ODgxOTBjNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2wVS+P0ybbeMv12lhPiK7Ejftwf
m5uW/WmtYuS6XpV7WLsDifUw+PoGY7lTeokzMvLoyUe1DwWhw0Yzlgf0Ua7mq2xD
wM8FT6kV612j/KjUcYcwc8rG+hP/shElbkvUZOAwoackVYucFYseg5IdPaWU6hpU
884PmmIXGvN0oOo4s+UfHqD4ehmuL88ehrlaEn85QkQUbXVuX5JVhsWQpSnawGKR
JJy8gHSdevB1XNYitS7fn0rctJ7K9noJfGNoFXuJDDPLce9lMTbIvMx9LCHHSxfF
rN23o8TATur4fjllRYRiJdzIKDQkm9v0AoBRA5gK6n9OFAaCcVrj3kdw3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXGRISvWS+4J+C7b+aBuUiBkMbeMB8GA1UdIwQY
MBaAFGh5m3crVR23hO66iw4RWgxDPNO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEt
MGM3NmEzMTZiNTJlLzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85NjJmMmQtNzI4Mi00MjFlLWE2MzEtMGM3NmEzMTZiNTJl
LzEvYUhtYmR5dFZIYmVFN3JxTERoRmFERU04MDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbWb0cbU
QsHWPwPxbaUvobpZIs4fMU0tK/1+mtkyQ/2M1qBvSku6zCNMo1o6ZjxZ0DEAZTp8
6F9im415eOz4KsHns0HuhQnepwK57scIJ3+T9vSb/5rE6tyQ61AQd5GsOVWBsyu8
LGDknEzPMpo+lukOfuXSCzoOTTVR8RGPB11WAO4om15zfTnGvOkY6YWQixP8yT57
B5SB5vlx7wLleciJl10pwNsjzHNJrPqon1Cybo2vo5IdgKA4GxkGuwJZz5O474Qa
uEYA+l/141S4BOQJGsPJXaNR8Gpk0gRnytkNXtZ49hj+r4x8qE6eZVLrDQWkN/q/
uNUAhekU57DSMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:32 2026 by rpki-client