
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: T5LXPWfC/5jvG5IOhddma57zBtBAb/HgQChQNMJMFQM=
Subject key identifier: BA:95:52:39:7D:3C:7C:35:6B:CF:68:97:C2:D6:54:01:CB:AC:10:E9
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019CAB33FF10140B0B829E9EF365B42C5A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 0983
Signing time: Sun 01 Mar 2026 21:00:37 +0000
Manifest this update: Sun 01 Mar 2026 21:00:37 +0000
Manifest next update: Mon 02 Mar 2026 21:00:37 +0000
Files and hashes: 1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: KcW0tXejMvNbJkXP2k1vJIMqke+nya5nmA/yfrEml3s=)
5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ff:10:14:0b:0b:82:9e:9e:f3:65:b4:2c:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Mar 1 21:00:37 2026 GMT
Not After : Mar 2 21:00:37 2026 GMT
Subject: CN=ba9552397d3c7c356bcf6897c2d65401cbac10e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:b7:7d:4e:09:9e:1f:cc:31:27:fa:a4:c7:
c7:86:1c:90:ea:69:6d:6f:f1:b2:40:1d:3d:59:3e:
9f:3e:8b:cd:82:b4:49:56:bc:53:86:e3:9b:41:5e:
45:07:50:7e:8b:82:18:40:02:0a:36:2b:f0:9c:fe:
74:d4:ef:3c:56:70:d4:e3:11:d7:24:23:84:7f:36:
00:18:db:9f:0b:2e:3f:a6:99:04:1c:42:1a:83:ec:
e6:a9:db:e3:15:ee:0f:1d:17:90:6d:87:2a:db:7a:
c0:01:a7:0d:4f:98:0a:3c:6a:78:85:f1:11:c0:cf:
06:af:93:60:48:20:ce:ae:ee:2d:08:db:f5:01:83:
f5:05:86:3a:a5:4c:7a:44:af:4b:6d:b3:7c:83:1a:
36:48:23:aa:d1:3b:62:5d:f5:6b:44:37:ad:d9:5d:
69:1a:d4:d8:3a:9f:37:42:1c:06:27:1f:44:c3:4c:
0d:20:dd:e4:40:4c:cc:bb:f9:20:0f:b0:5b:49:96:
93:29:2d:1b:4d:77:11:d1:30:7e:ed:0e:4d:2a:16:
2e:26:03:28:c0:e2:27:5c:45:ba:f3:e9:52:0b:26:
d0:22:c5:05:00:19:fe:a0:18:48:48:be:7b:f9:f6:
33:1b:b3:2d:85:94:6e:ac:76:03:c6:09:ed:52:04:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:52:39:7D:3C:7C:35:6B:CF:68:97:C2:D6:54:01:CB:AC:10:E9
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:e9:c3:6d:dc:66:43:59:a1:82:11:0f:4a:d0:32:03:1b:
c8:ab:21:15:0c:db:65:38:33:bd:85:d7:eb:b1:78:0e:30:37:
7d:80:14:e5:fe:64:b3:08:bc:79:48:a9:cc:30:9d:9f:d2:58:
83:fd:e5:bf:93:2c:36:36:c5:43:bd:f7:67:c1:d3:1d:f7:df:
d7:a0:01:5f:4f:3d:e7:fb:8d:bd:bc:7e:6d:22:c2:df:54:93:
1f:25:f7:58:f2:ce:7d:35:bd:dd:6a:a6:25:a0:e1:f9:c3:6e:
9d:da:b1:e4:fc:5a:9b:2d:d9:fb:19:e1:a6:08:c3:49:12:ac:
4f:e0:65:c0:23:c1:c1:05:11:38:8d:d3:5e:37:77:07:38:fc:
80:8c:8c:d1:db:70:3d:a7:ca:69:fc:06:ea:36:ac:aa:e0:61:
2d:d0:3c:0e:b5:39:29:51:de:e9:12:8a:4d:5d:7e:82:e4:ab:
8b:d9:49:1b:5d:4d:24:a1:50:de:71:e2:10:82:86:41:ce:bf:
1d:35:b5:92:5e:34:28:52:b7:ee:37:53:da:d9:22:01:2e:ad:
fc:40:f5:71:3b:23:c9:45:fd:18:8c:a1:6c:ef:09:40:fe:4e:
c0:21:7c:70:67:f7:bb:b1:48:bf:e5:98:6d:f9:f8:02:e9:74:
a1:b2:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:31 2026 by rpki-client