Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: d5GrfqT+L9M5sIUDhWVI9Ba09ruuTWaI3+3HsLWKUYE=
Subject key identifier: 80:96:60:59:F5:0A:82:DB:DC:B4:AA:57:96:07:92:F6:C1:E3:C0:71
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 019D31BE5CEDAD34F34BD04DC0E160827A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 07F6
Signing time: Sat 28 Mar 2026 00:00:52 +0000
Manifest this update: Sat 28 Mar 2026 00:00:52 +0000
Manifest next update: Sun 29 Mar 2026 00:00:52 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: Lknop2DAkUtU0PPP3rymydE6Eq83eOLb2pk+1Og2Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:5c:ed:ad:34:f3:4b:d0:4d:c0:e1:60:82:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Mar 28 00:00:52 2026 GMT
Not After : Mar 29 00:00:52 2026 GMT
Subject: CN=80966059f50a82dbdcb4aa57960792f6c1e3c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:34:be:66:56:2f:2c:05:d4:8e:56:04:bd:
9a:b2:13:d7:e9:9d:e7:e0:8f:4b:bf:65:04:d3:30:
f6:df:49:49:e9:db:18:12:75:08:b4:75:13:0a:93:
98:8f:6c:8a:01:c7:29:1a:c4:74:5d:a7:b4:76:ab:
8a:14:9e:11:dd:d3:00:74:22:f1:9d:43:a2:b8:9f:
ba:4d:3b:3d:b9:69:ae:b3:8b:b6:7b:d6:10:50:ee:
c5:ee:eb:85:22:45:0c:62:ad:55:a4:68:c1:6b:bb:
bc:53:69:87:f2:11:d9:83:c7:9d:bf:fc:a4:66:c1:
cd:5c:0a:bc:58:c6:dd:e2:92:10:12:20:a1:57:e3:
f8:6f:86:34:2b:aa:08:1e:28:58:a4:a0:b7:60:dc:
81:e7:64:b3:a0:fd:40:8e:05:3e:19:dc:ce:ac:b5:
4f:93:93:5b:c0:a2:51:38:f0:69:67:ae:a3:31:36:
31:67:18:d8:e7:d5:cc:11:07:57:57:8d:85:9e:32:
d4:11:40:e1:85:84:91:7d:ff:47:3e:ad:bc:73:43:
9a:a3:7f:6d:90:45:c3:78:d8:6e:e2:26:6e:7c:45:
7a:a9:5f:ed:29:81:f8:ac:26:b0:92:15:a1:59:e5:
94:2c:71:26:1b:97:0a:44:d4:e4:8e:d4:0a:e0:0a:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:60:59:F5:0A:82:DB:DC:B4:AA:57:96:07:92:F6:C1:E3:C0:71
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:48:2c:e5:ef:ba:57:f2:68:dd:b4:3a:25:02:f1:52:25:b8:
15:08:c9:de:15:05:32:9a:96:db:d5:55:87:8e:5d:13:a5:a5:
d0:cf:79:85:21:fe:7c:e6:d8:62:12:47:62:8e:77:63:e3:d2:
3f:f6:88:71:a8:c9:0c:38:b8:54:7c:9a:11:4f:ab:a1:4a:ba:
4e:15:f7:ec:eb:c4:cc:4b:51:fd:a5:93:17:70:d9:99:46:58:
ee:a4:12:c6:bd:b7:c4:22:f1:da:8c:68:16:d8:19:2d:d8:99:
4f:00:30:0f:cf:c6:6f:38:ec:27:38:62:cd:59:87:98:7c:d2:
1a:98:b0:12:89:48:38:ec:43:c6:c1:f7:9a:97:98:e6:05:e8:
83:a0:43:e4:0f:a0:3e:72:94:45:81:09:e5:e8:04:88:30:4b:
90:39:a1:e4:70:19:4e:7c:46:0b:77:31:26:52:b6:2f:c0:15:
3f:6a:e0:32:1e:15:00:15:99:74:7f:15:ba:df:06:4d:fe:41:
44:91:c8:84:b7:b8:73:ed:0f:80:57:c2:92:d0:5a:66:a4:1b:
7c:a1:9c:4a:40:66:d7:39:d8:83:8b:a4:70:28:e4:1a:13:8b:
22:e7:33:30:4a:06:ca:7d:d5:d9:fd:c0:32:cc:38:df:2d:61:
25:18:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:53 2026 by rpki-client