Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: 7OV1M67D2o2rD1JlmVR126f0hlYuHcHuZy5GatRFFYk=
Subject key identifier: CA:CC:64:BD:3B:63:25:AF:63:49:00:08:0A:FA:5A:FB:92:A0:65:ED
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019CAA21E787335A9C0119199DE47A422A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: MB0uTApSO8m5vg_bm9trr3XpjgU.roa (hash: 2eNykuyF9+3yCGYPE8lH28bjQtkNd0f4qvsTFx03Ijs=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: Mph2LB5Qn/Oms9Y7ecvsrnB3puUqYCYznoY67Uh45M0=)
3: xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa (hash: hPOQooNWczBMB25D+ekEfhNU7YNSFMQ+pTU+YyTaGew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e7:87:33:5a:9c:01:19:19:9d:e4:7a:42:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=cacc64bd3b6325af634900080afa5afb92a065ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:ab:0e:d4:72:96:49:57:d9:5f:5c:9f:a2:
e8:21:d0:66:a4:25:cb:e7:1a:31:a6:a7:be:42:9c:
fa:1b:bc:b6:58:40:d2:6c:64:8a:3c:62:1e:bc:25:
71:9a:43:e7:cb:dd:9a:0d:6d:39:da:29:6a:00:7b:
63:d4:60:b6:e0:14:ff:71:36:28:6d:30:19:cd:ab:
3a:69:17:3f:66:2a:22:d9:30:ba:48:d7:af:bd:63:
15:0c:6f:0e:9d:b9:f2:d3:84:ca:60:f0:99:f8:df:
e5:0e:fd:bf:cd:78:c5:50:70:95:a5:77:7c:2f:b8:
8a:44:2d:f2:bf:ba:08:f0:34:8d:8e:13:8c:5a:13:
e0:f6:50:49:6c:c7:14:ed:0b:f1:03:13:d7:b0:ae:
eb:5e:f5:8d:fd:08:ea:42:3a:81:1f:61:61:41:f9:
9d:e2:e8:0b:19:5c:b3:df:c7:a1:be:6c:92:b2:c5:
ec:b7:f1:e2:92:c5:b1:a5:06:2b:0b:58:7a:86:02:
07:93:2a:9e:5c:3c:86:9a:80:a7:4d:7a:03:e6:14:
c2:2f:88:e0:0a:fb:07:2c:2c:65:36:17:6a:3b:0c:
3a:e6:f7:dd:07:8f:82:1f:ee:c6:44:da:bd:9a:3f:
83:0a:72:cc:26:c6:46:28:82:32:38:bb:4d:cb:b6:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:64:BD:3B:63:25:AF:63:49:00:08:0A:FA:5A:FB:92:A0:65:ED
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:4a:21:80:f3:44:1b:14:4f:29:79:f9:b5:fb:3e:ac:a7:
1d:5c:60:f1:a4:3e:0d:16:c0:72:38:84:a6:71:cd:5b:5c:c1:
0d:bf:e1:42:5b:a7:90:57:95:65:ac:3d:50:1e:9d:5c:d6:5c:
da:3a:13:7f:fa:52:77:9e:fc:a4:a6:92:04:bf:3d:aa:ee:e9:
9c:13:79:ba:55:a8:d1:27:6a:6f:8d:da:1d:57:95:43:a8:ba:
da:40:b0:20:8a:93:0a:0e:7a:17:58:52:c1:ad:ec:71:fb:b4:
d6:2c:a8:61:c4:d6:59:82:67:b4:50:bf:6a:49:74:3c:0d:db:
18:5d:47:d7:4e:ff:15:10:72:31:09:db:cb:e2:f1:c0:cf:57:
02:b2:62:68:72:80:6c:60:06:58:a1:ff:48:6c:2a:30:c7:36:
a5:f2:98:2b:69:0c:1b:ea:c5:27:f5:88:45:f4:28:7c:da:17:
af:d5:8f:e6:68:a7:92:b4:94:3c:6d:37:f2:dd:f3:7b:af:7c:
be:0b:13:15:df:01:50:7b:2c:c2:87:f3:ff:34:d3:dc:c7:78:
54:29:9f:b5:fd:da:8d:ab:6f:c3:e4:b9:ac:76:28:c6:28:ba:
47:5b:68:8f:06:f7:e3:75:5d:0d:b9:42:e1:8b:ba:c2:d5:d3:
f4:e6:e8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIeeHM1qcARkZneR6Qio8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz
MWYyNDkwHhcNMjYwMzAxMTYwMTE0WhcNMjYwMzAyMTYwMTE0WjAzMTEwLwYDVQQD
EyhjYWNjNjRiZDNiNjMyNWFmNjM0OTAwMDgwYWZhNWFmYjkyYTA2NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJyrDtRylklX2V9cn6LoIdBmpCXL
5xoxpqe+Qpz6G7y2WEDSbGSKPGIevCVxmkPny92aDW052ilqAHtj1GC24BT/cTYo
bTAZzas6aRc/Zioi2TC6SNevvWMVDG8Onbny04TKYPCZ+N/lDv2/zXjFUHCVpXd8
L7iKRC3yv7oI8DSNjhOMWhPg9lBJbMcU7QvxAxPXsK7rXvWN/QjqQjqBH2FhQfmd
4ugLGVyz38ehvmySssXst/HiksWxpQYrC1h6hgIHkyqeXDyGmoCnTXoD5hTCL4jg
CvsHLCxlNhdqOww65vfdB4+CH+7GRNq9mj+DCnLMJsZGKIIyOLtNy7bJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrMZL07YyWvY0kACAr6WvuSoGXtMB8GA1UdIwQY
MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMZKIYDz
RBsUTyl5+bX7PqynHVxg8aQ+DRbAcjiEpnHNW1zBDb/hQlunkFeVZaw9UB6dXNZc
2joTf/pSd578pKaSBL89qu7pnBN5ulWo0Sdqb43aHVeVQ6i62kCwIIqTCg56F1hS
wa3scfu01iyoYcTWWYJntFC/akl0PA3bGF1H107/FRByMQnby+LxwM9XArJiaHKA
bGAGWKH/SGwqMMc2pfKYK2kMG+rFJ/WIRfQofNoXr9WP5minkrSUPG038t3ze698
vgsTFd8BUHsswofz/zTT3Md4VCmftf3ajatvw+S5rHYoxii6R1tojwb343VdDblC
4Yu6wtXT9OborA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:38 2026 by rpki-client