Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: UMcC87QvGG8MC6BqpVrYzzdJDSd8YoWO/FM/IMGLzGE=
Subject key identifier: 9C:89:D7:87:D2:7F:34:8B:49:39:4F:9A:12:E4:4B:9E:1C:03:1D:39
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019CAC10207F8885646E0415802D3FB37D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 049A
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
2: UuJYJB8qqQVCGi-vt_wHrI42MfU.roa (hash: jzA4jxCzEMlyx7GLDIuObiY90eTPpxuRqUa3CtlcCok=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: UQqDZn5ZlGDRDGSLo/hLDKKx8V8a7YsSXszkh8Oxlpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:20:7f:88:85:64:6e:04:15:80:2d:3f:b3:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=9c89d787d27f348b49394f9a12e44b9e1c031d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:d2:74:aa:13:dd:6b:33:0c:91:ae:55:dc:
9c:77:91:0f:47:42:b2:ff:6e:2b:0e:43:44:96:66:
1c:42:85:ed:61:30:a8:f9:00:7e:61:c3:88:ac:04:
fd:7a:0e:7c:ab:76:f9:df:bb:95:1a:05:47:be:88:
24:25:2a:7c:4b:b6:38:e0:c3:15:55:0d:a6:a4:2e:
86:20:f0:eb:a2:40:21:df:69:81:3d:e3:49:13:d2:
c1:9e:33:e7:85:83:40:3c:27:45:88:4a:75:a2:39:
f3:50:38:c6:f1:92:8d:e2:87:ec:f5:9f:b2:86:36:
07:74:29:df:82:f2:36:84:fb:78:43:de:5c:7f:f2:
1e:e3:68:ae:19:0c:7d:0d:45:59:f1:94:1c:b3:07:
7d:66:02:85:97:2d:bb:fa:6d:e0:49:70:7c:a5:5e:
9a:ab:cf:00:d9:72:a7:7b:f5:af:1a:70:a0:af:cc:
fc:b3:aa:eb:a3:d6:f7:88:9e:17:5c:80:d6:9b:68:
f7:b0:95:97:a7:32:b2:48:b7:d7:77:31:f0:8b:d3:
3a:ad:3e:30:bf:ad:50:93:e1:a9:d8:4b:43:07:fb:
60:68:e4:ff:e3:52:18:78:5f:38:8e:45:0d:47:23:
dd:71:5d:9d:51:95:d0:a9:05:08:d6:82:12:23:f2:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:D7:87:D2:7F:34:8B:49:39:4F:9A:12:E4:4B:9E:1C:03:1D:39
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:a1:fd:4f:68:9e:e0:30:d2:65:e9:04:64:93:93:29:fc:
f0:96:3b:c9:78:71:d8:34:64:b7:e2:58:0f:c9:1a:40:30:b0:
f0:f8:f1:c2:cc:f3:8e:8b:41:90:67:07:5a:b0:90:69:95:e2:
a6:6c:9c:bf:e5:9d:01:cd:8a:14:92:3c:f6:d0:d3:80:3e:21:
01:ca:b6:33:aa:a6:ad:52:01:99:dc:cf:0f:90:ec:96:5a:03:
c8:4d:48:01:0d:00:08:1d:b0:40:58:27:8d:76:97:b5:1e:f7:
ee:1d:12:f4:3b:fd:d4:d8:7d:4b:d3:90:b4:56:a3:47:ba:65:
35:fc:37:3b:1c:62:5a:03:4a:d4:17:3c:61:7c:28:9b:fa:2a:
cf:7b:4c:70:1e:86:f2:4d:dd:4d:54:8e:d7:46:42:be:66:59:
ea:31:e4:87:7a:ec:4a:84:dd:c1:0a:81:a3:65:f1:fc:cb:fb:
20:d5:a2:7b:cc:ac:d4:70:b8:2c:59:17:85:bf:f1:d3:5b:49:
74:3c:d6:dc:33:14:47:b0:74:42:43:05:d7:67:47:b7:ae:64:
f0:12:5f:de:74:ad:ae:94:a7:d0:70:66:7d:d3:cd:6a:2d:d4:
47:11:8d:6c:0f:a4:f1:75:9c:d6:81:e7:d4:ed:14:82:3e:8e:
6c:63:2c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECB/iIVkbgQVgC0/s303MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl
NjQ4YzMwHhcNMjYwMzAyMDEwMTAzWhcNMjYwMzAzMDEwMTAzWjAzMTEwLwYDVQQD
Eyg5Yzg5ZDc4N2QyN2YzNDhiNDkzOTRmOWExMmU0NGI5ZTFjMDMxZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpzSdKoT3WszDJGuVdycd5EPR0Ky
/24rDkNElmYcQoXtYTCo+QB+YcOIrAT9eg58q3b537uVGgVHvogkJSp8S7Y44MMV
VQ2mpC6GIPDrokAh32mBPeNJE9LBnjPnhYNAPCdFiEp1ojnzUDjG8ZKN4ofs9Z+y
hjYHdCnfgvI2hPt4Q95cf/Ie42iuGQx9DUVZ8ZQcswd9ZgKFly27+m3gSXB8pV6a
q88A2XKne/WvGnCgr8z8s6rro9b3iJ4XXIDWm2j3sJWXpzKySLfXdzHwi9M6rT4w
v61Qk+Gp2EtDB/tgaOT/41IYeF84jkUNRyPdcV2dUZXQqQUI1oISI/LEfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyJ14fSfzSLSTlPmhLkS54cAx05MB8GA1UdIwQY
MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt
N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2
LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCih/U9o
nuAw0mXpBGSTkyn88JY7yXhx2DRkt+JYD8kaQDCw8PjxwszzjotBkGcHWrCQaZXi
pmycv+WdAc2KFJI89tDTgD4hAcq2M6qmrVIBmdzPD5DslloDyE1IAQ0ACB2wQFgn
jXaXtR737h0S9Dv91Nh9S9OQtFajR7plNfw3OxxiWgNK1Bc8YXwom/oqz3tMcB6G
8k3dTVSO10ZCvmZZ6jHkh3rsSoTdwQqBo2Xx/Mv7INWie8ys1HC4LFkXhb/x01tJ
dDzW3DMUR7B0QkMF12dHt65k8BJf3nStrpSn0HBmfdPNai3URxGNbA+k8XWc1oHn
1O0Ugj6ObGMspQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:27 2026 by rpki-client