Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: 3O10lReH4NCmMWaux6O3uVFx4qyjr+ITd8M/IlmZ89E=
Subject key identifier: 8B:2B:CF:59:73:D6:77:2B:9C:81:F6:06:9D:06:FF:47:3A:F9:1F:13
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019CAB33FB049D6A01B6FA21F2DD922F68DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: EqvKSR9iXegXy1dMoZ2bleJg3E0.roa (hash: vK0XksnitfnobMuyE2LGuN8IoAOExUJuqPdiZ3yM2Co=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: NOwvqEFJ9n2c3h0i3QwQ6bsDEfnkaIGQHZqwGAy9mFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fb:04:9d:6a:01:b6:fa:21:f2:dd:92:2f:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=8b2bcf5973d6772b9c81f6069d06ff473af91f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:85:0c:67:8d:c0:23:1f:96:ad:7c:80:57:
b8:2e:18:00:b5:e0:78:a5:1b:18:b8:d2:c0:7b:69:
50:e6:68:c1:68:c5:cc:0f:29:50:84:28:77:a2:90:
96:1f:72:20:8c:1b:ea:34:88:6b:93:4e:23:b5:6a:
15:95:62:61:17:fe:44:13:d8:44:3e:f5:de:4a:7e:
d3:ec:7a:a5:b0:f2:94:c9:91:99:6a:f5:79:98:fb:
b3:72:29:a0:11:7f:79:5c:b5:39:a5:3f:a1:7f:11:
18:7c:66:13:53:e2:d9:e5:50:3e:28:f4:2d:0d:81:
87:72:8e:aa:66:5e:54:85:f0:8a:34:b6:b0:f0:66:
6c:b9:be:bd:39:c5:5f:e7:e8:78:33:f0:f6:cd:61:
7f:3f:06:ba:46:23:5d:07:56:98:63:e3:0b:aa:d1:
a2:38:9a:1c:68:d5:d0:e0:30:21:fc:db:f9:53:56:
8f:7f:65:22:54:dd:4e:cc:d9:14:1d:41:c3:70:90:
3c:24:0a:92:c1:e1:1f:7c:f1:67:ea:23:ed:03:16:
26:2a:c7:6c:64:6e:f5:81:dd:6a:46:33:22:b1:0d:
f5:eb:9a:d3:17:16:5e:07:fb:9a:80:b8:9c:91:9e:
de:93:33:45:38:4a:83:b3:d2:80:2a:86:c7:16:d1:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:CF:59:73:D6:77:2B:9C:81:F6:06:9D:06:FF:47:3A:F9:1F:13
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:54:fc:53:ca:c5:54:e3:39:ab:4c:7d:46:fe:c8:b8:6b:30:
5c:bc:9c:59:30:51:1f:28:d2:cc:64:09:6d:51:79:c0:18:2a:
32:b2:f6:8d:a3:4f:cf:04:69:6a:7a:98:fb:4d:26:c6:50:16:
7c:c0:50:bb:04:03:20:67:11:5a:ec:cb:81:c5:14:1e:3d:4f:
da:3e:b2:57:4f:80:fb:83:ff:bf:c4:a2:60:7a:2a:e9:40:76:
0b:ed:fa:28:5f:08:ba:5f:ff:03:4d:e4:c7:6a:d5:1d:80:c3:
f9:53:f3:d2:b2:34:39:7d:39:20:1f:cf:84:43:f1:6d:be:d0:
da:9b:1a:44:d6:50:c8:4b:5b:c8:2c:17:16:e0:06:13:6d:5f:
43:e2:3b:a3:24:07:32:df:5a:ad:ed:ef:ca:c0:4a:ab:9e:cc:
2e:15:2a:a7:d3:41:ee:0f:32:17:07:7c:81:7a:df:25:76:f8:
fc:76:8e:e7:d5:53:19:32:2a:0d:64:22:85:95:7f:0c:ba:19:
3e:96:32:fb:1b:86:08:90:64:f1:74:7d:ce:40:76:e9:36:46:
84:36:37:ef:23:ed:59:7c:3e:37:89:1b:25:f1:0b:fc:29:46:
c4:d2:5d:05:06:a3:7c:f1:96:a2:25:fd:21:fd:9c:37:b6:4d:
ef:51:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:01 2026 by rpki-client