Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: tITvLSS9QaSdVPYtXfDE9hjGcNPRefcbglwTcyBvMsk=
Subject key identifier: 3B:3F:FE:05:B6:55:AD:27:ED:93:9D:42:CB:E1:4C:95:00:D8:21:B0
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019D9999AFCEC3C83539F8EF36A521B0E1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0515
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
2: UuJYJB8qqQVCGi-vt_wHrI42MfU.roa (hash: jzA4jxCzEMlyx7GLDIuObiY90eTPpxuRqUa3CtlcCok=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: ooKEY3cnoltc44P9Co1sR+pDIZNRSDWOr/j0YGvtm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:af:ce:c3:c8:35:39:f8:ef:36:a5:21:b0:e1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=3b3ffe05b655ad27ed939d42cbe14c9500d821b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:3d:e9:0f:51:0c:e4:19:93:42:70:be:86:
50:f8:ff:1e:45:93:40:03:bf:61:91:75:12:97:a2:
8c:e1:cc:64:14:58:2d:89:9b:69:6e:47:f9:48:5e:
58:a7:0e:ee:0e:ee:37:25:8b:d3:1e:05:6d:47:3c:
13:7c:6d:05:de:ac:1b:73:8b:31:0d:45:34:7e:9d:
26:8b:65:ed:7f:c8:6e:37:1e:75:b6:c3:9e:31:70:
56:84:13:ba:0d:fb:e5:39:60:03:01:7d:4f:bf:77:
02:e1:55:6c:0a:63:69:03:72:4e:5e:91:6e:35:28:
ad:cf:94:b6:e9:1b:20:d1:21:98:fe:37:91:67:9c:
82:1b:a8:3d:43:42:60:48:47:76:c1:21:20:90:e7:
58:3f:b4:38:5a:90:35:15:57:1b:3f:dd:f7:90:e6:
92:90:8a:46:f4:d4:12:c5:7a:52:26:b6:87:15:95:
94:a7:13:39:34:d4:dd:26:d7:8d:f6:bc:d1:f1:82:
33:63:21:c3:58:3d:2f:ff:cd:69:fc:31:bf:19:5a:
9f:ba:84:c8:8e:ec:51:14:a0:db:c0:e2:be:97:3e:
44:fe:b2:e3:7e:7a:f9:75:8a:e1:5c:8e:29:c1:13:
b4:95:f5:f9:d9:af:fc:d8:3c:34:e0:50:97:ab:44:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:FE:05:B6:55:AD:27:ED:93:9D:42:CB:E1:4C:95:00:D8:21:B0
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:15:6b:55:c6:ce:f0:c0:78:24:92:fb:c5:f3:3b:b4:60:8f:
82:39:db:0a:02:38:38:d5:e9:8a:4a:8b:fd:6f:45:1a:be:02:
b6:ef:f3:62:fe:f7:98:f1:cc:84:0e:5f:04:67:5c:a4:20:f1:
0f:ab:fd:c6:dc:b4:f7:2e:d1:61:32:38:3d:4b:57:b5:fd:6c:
58:a2:fe:93:5b:11:95:eb:5d:da:3f:a0:fb:fc:af:07:d0:63:
db:6e:2e:c6:66:29:c1:85:b8:7a:e0:64:e8:8e:2d:0a:bb:7d:
56:f3:62:e0:43:a5:8d:9e:8a:d0:a7:e3:1f:8b:96:b5:3b:e2:
a2:99:69:2b:38:22:7b:76:ec:81:f7:f9:01:6f:6e:a4:6d:10:
92:93:ab:9a:10:31:fb:0c:ca:92:98:34:97:3d:7c:6a:87:51:
9a:5c:f9:12:c1:21:f6:b7:11:f7:4e:b3:4a:dc:ab:88:51:c4:
fc:ff:15:82:f3:a4:f1:ea:ad:6b:c9:ea:94:47:5a:f9:a9:33:
3a:62:73:bf:b1:c7:5d:02:db:d7:49:b0:2b:90:cb:3a:c4:9d:
fc:c5:19:81:43:52:36:72:4e:50:7f:b5:73:69:77:e2:6e:34:
4d:ae:90:30:a9:57:0d:9e:d7:16:56:e3:3c:5d:73:0b:fc:36:
97:f4:3a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zma/Ow8g1OfjvNqUhsOHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDY2MDRjODhjMmUwNGU2MTY3MjQxMzE1Yjc0YTc1OGNl
NjQ4YzMwHhcNMjYwNDE3MDQwMTE5WhcNMjYwNDE4MDQwMTE5WjAzMTEwLwYDVQQD
EygzYjNmZmUwNWI2NTVhZDI3ZWQ5MzlkNDJjYmUxNGM5NTAwZDgyMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1E96Q9RDOQZk0JwvoZQ+P8eRZNA
A79hkXUSl6KM4cxkFFgtiZtpbkf5SF5Ypw7uDu43JYvTHgVtRzwTfG0F3qwbc4sx
DUU0fp0mi2Xtf8huNx51tsOeMXBWhBO6DfvlOWADAX1Pv3cC4VVsCmNpA3JOXpFu
NSitz5S26Rsg0SGY/jeRZ5yCG6g9Q0JgSEd2wSEgkOdYP7Q4WpA1FVcbP933kOaS
kIpG9NQSxXpSJraHFZWUpxM5NNTdJteN9rzR8YIzYyHDWD0v/81p/DG/GVqfuoTI
juxRFKDbwOK+lz5E/rLjfnr5dYrhXI4pwRO0lfX52a/82Dw04FCXq0QYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs//gW2Va0n7ZOdQsvhTJUA2CGwMB8GA1UdIwQY
MBaAFGjWYEyIwuBOYWckExW3SnWM5kjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUt
N2NjMjk0NWYyY2E2LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wMDYyMjUtOWJmZi00NTgzLThhMTUtN2NjMjk0NWYyY2E2
LzEvYU5aZ1RJakM0RTVoWnlRVEZiZEtkWXptU01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBVrVcbO
8MB4JJL7xfM7tGCPgjnbCgI4ONXpikqL/W9FGr4Ctu/zYv73mPHMhA5fBGdcpCDx
D6v9xty09y7RYTI4PUtXtf1sWKL+k1sRletd2j+g+/yvB9Bj224uxmYpwYW4euBk
6I4tCrt9VvNi4EOljZ6K0KfjH4uWtTvioplpKzgie3bsgff5AW9upG0QkpOrmhAx
+wzKkpg0lz18aodRmlz5EsEh9rcR906zStyriFHE/P8VgvOk8eqta8nqlEda+akz
OmJzv7HHXQLb10mwK5DLOsSd/MUZgUNSNnJOUH+1c2l34m40Ta6QMKlXDZ7XFlbj
PF1zC/w2l/Q6hw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:49 2026 by rpki-client