Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: eqr7Ubb03qo4DsvD1gzRSVFGYJNZsyHXjIQW+wwzBjw=
Subject key identifier: D9:2B:28:15:39:97:30:EE:B5:10:30:8A:25:CE:0E:70:8E:20:A3:40
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019CACB48BA0AB4A86E20768C0E6B8717DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 12D1
Signing time: Mon 02 Mar 2026 04:00:39 +0000
Manifest this update: Mon 02 Mar 2026 04:00:39 +0000
Manifest next update: Tue 03 Mar 2026 04:00:39 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: MQPTf4tiHWaIQ4wIE6L9zgieAb0AXFYtNscSmZL+ihw=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:8b:a0:ab:4a:86:e2:07:68:c0:e6:b8:71:7d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Mar 2 04:00:39 2026 GMT
Not After : Mar 3 04:00:39 2026 GMT
Subject: CN=d92b2815399730eeb510308a25ce0e708e20a340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:93:20:ad:a9:18:e2:05:7f:42:a3:54:86:
b8:d0:f3:14:0b:d1:03:96:36:d4:30:48:9f:40:5a:
9f:eb:5d:6f:b4:e8:4e:97:84:d1:38:55:96:8d:54:
97:f3:41:3f:c9:05:94:0e:19:5a:ea:6e:e3:b6:f1:
03:45:b3:e9:fe:e8:e2:56:f9:81:48:88:3a:37:f1:
9a:9c:97:c4:33:84:d9:c0:f7:24:98:08:cb:e7:f4:
59:da:87:84:a5:c6:92:58:21:a3:81:f6:a5:9f:e6:
da:1c:09:72:61:8d:38:3f:c7:77:4e:d0:ed:52:c3:
06:5e:5b:1f:26:ea:c7:5e:76:44:f2:eb:d6:fd:64:
c4:87:c3:32:14:c5:d0:94:5e:f9:9d:f4:8e:2e:52:
c8:87:50:5c:f4:ff:fe:60:d0:ba:92:ee:6d:a5:8d:
4d:bb:bb:29:e0:cd:53:3c:33:3c:49:14:83:1f:4d:
de:4c:75:2e:1f:e3:9a:14:d2:40:dc:d0:75:61:a5:
c2:ad:ac:9b:92:4c:d9:dc:aa:99:b5:1d:ff:3f:f5:
7e:51:ef:a3:f3:dc:9e:ba:70:59:12:f9:ce:a0:07:
97:64:3a:fb:3d:3c:f3:bd:6c:fe:a5:24:d5:31:fa:
2f:e4:26:a6:46:91:35:7d:0e:42:f4:df:ab:38:ee:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:28:15:39:97:30:EE:B5:10:30:8A:25:CE:0E:70:8E:20:A3:40
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:da:29:3c:a2:5b:a3:16:0e:23:f9:6d:9a:50:8b:0f:96:05:
b8:ea:9e:fe:cb:65:39:2c:c8:2c:f6:5a:82:77:65:79:bc:c4:
91:c4:e2:8b:26:fa:8f:8b:6e:5b:e1:8f:5a:8b:7e:00:bb:47:
20:31:60:a7:d7:7a:78:66:fe:34:af:53:fa:dd:81:01:f4:66:
51:8a:97:60:98:6b:a3:a8:cc:02:2d:56:0a:7d:b2:a1:1f:d7:
b7:a1:38:c3:bf:f3:7f:b8:c0:0b:29:d6:b0:df:94:01:78:c3:
2d:55:50:f7:26:f2:62:92:eb:6a:c3:27:86:a3:ff:d1:c5:45:
96:d6:e9:32:f1:ac:70:7d:8e:cb:15:a2:4d:c3:22:81:61:48:
10:00:d6:9c:4c:65:d3:0c:5b:c5:61:67:8d:cb:30:ad:62:3c:
5b:6a:85:a6:98:81:c0:53:aa:79:98:6e:ff:d0:01:20:98:2f:
16:5a:74:ca:d0:ab:ea:14:5e:7b:28:9f:06:80:14:15:a0:9a:
ba:10:aa:23:36:4d:91:aa:a0:7d:09:3c:ae:49:88:25:b3:d8:
7c:e8:03:43:80:87:77:d6:58:b7:98:7e:d5:e7:87:74:1a:af:
9c:1c:0c:91:ce:21:0f:89:81:79:7f:37:ff:db:33:e5:10:d4:
f6:36:00:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystIugq0qG4gdowOa4cX2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz
Y2VlMWMwHhcNMjYwMzAyMDQwMDM5WhcNMjYwMzAzMDQwMDM5WjAzMTEwLwYDVQQD
EyhkOTJiMjgxNTM5OTczMGVlYjUxMDMwOGEyNWNlMGU3MDhlMjBhMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgeTIK2pGOIFf0KjVIa40PMUC9ED
ljbUMEifQFqf611vtOhOl4TROFWWjVSX80E/yQWUDhla6m7jtvEDRbPp/ujiVvmB
SIg6N/GanJfEM4TZwPckmAjL5/RZ2oeEpcaSWCGjgfaln+baHAlyYY04P8d3TtDt
UsMGXlsfJurHXnZE8uvW/WTEh8MyFMXQlF75nfSOLlLIh1Bc9P/+YNC6ku5tpY1N
u7sp4M1TPDM8SRSDH03eTHUuH+OaFNJA3NB1YaXCraybkkzZ3KqZtR3/P/V+Ue+j
89yeunBZEvnOoAeXZDr7PTzzvWz+pSTVMfov5CamRpE1fQ5C9N+rOO7K/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkrKBU5lzDutRAwiiXODnCOIKNAMB8GA1UdIwQY
MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt
Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2
LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9opPKJb
oxYOI/ltmlCLD5YFuOqe/stlOSzILPZagndlebzEkcTiiyb6j4tuW+GPWot+ALtH
IDFgp9d6eGb+NK9T+t2BAfRmUYqXYJhro6jMAi1WCn2yoR/Xt6E4w7/zf7jACynW
sN+UAXjDLVVQ9ybyYpLrasMnhqP/0cVFltbpMvGscH2OyxWiTcMigWFIEADWnExl
0wxbxWFnjcswrWI8W2qFppiBwFOqeZhu/9ABIJgvFlp0ytCr6hReeyifBoAUFaCa
uhCqIzZNkaqgfQk8rkmIJbPYfOgDQ4CHd9ZYt5h+1eeHdBqvnBwMkc4hD4mBeX83
/9sz5RDU9jYAxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:05 2026 by rpki-client