Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: +pDsQzsp2AZSaovdglwtuch0f20W9dHFZe+Do/MH25Q=
Subject key identifier: 07:72:F3:BE:09:2E:FA:62:DF:59:04:D6:73:7E:48:04:D6:35:47:D1
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 019CABD8E66E30636C691D42BD00E05DA534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 08A8
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: 7xsMIiVMy6lo8Sv2_KFkf6UUkd0.roa (hash: l9A1rvzhgMLewerazX4IIZZJCUhzRMMlFNIhGKIl2u8=)
2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: ibDVUxoTz2s+dGRahuWxPvvIV3MhthmWlkMi/zTvaJE=)
3: sYc6H234_lhFJLVnD1s8r-M0x7Q.roa (hash: mwfgYtpAqD/0PLlomhnZdEd3pDLweTePVgRAfbIpDGg=)
4: wFb-sQ4RN7qQpWbL4eb3ysou4H8.roa (hash: cM0/WidCdHghkLHOhKrAG/w/jjB80DOAe9FkWCIQQq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e6:6e:30:63:6c:69:1d:42:bd:00:e0:5d:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=0772f3be092efa62df5904d6737e4804d63547d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:1a:ec:68:c4:0d:a1:a6:9a:63:47:dd:e3:
d4:72:e6:8e:a4:7f:b4:7f:95:85:5c:20:47:3d:7d:
62:08:76:c3:bd:ad:9f:f8:c4:91:fd:de:2a:9f:8d:
8a:8f:82:88:3c:79:1e:52:90:6e:df:1d:12:12:72:
b0:40:6a:a2:2f:7a:46:53:f7:13:4c:38:77:54:00:
f2:5b:3b:d9:85:d3:82:cb:40:1b:d4:5a:df:d8:b3:
30:10:16:2f:d5:ff:70:84:d7:32:d6:57:68:86:17:
b1:dd:7c:d2:6f:f4:dd:96:b7:1e:4e:84:a2:a3:a2:
4d:89:49:c2:c6:e7:3c:73:9c:81:e9:fa:ca:6e:ac:
09:f7:25:3c:b1:48:10:a2:55:05:44:01:d2:e2:46:
0e:44:8b:29:97:62:a4:62:1b:b5:3e:dd:17:9c:0e:
8f:64:48:e3:65:54:86:39:94:25:4a:67:58:41:c6:
3e:83:34:15:b0:0b:e3:b2:bb:e0:5d:22:4f:ac:85:
3d:d2:6e:14:d7:68:cf:08:8c:26:b7:c0:e4:2f:5d:
a5:3f:00:4c:3a:f5:bb:88:ca:b5:ee:ed:72:1b:b3:
73:a8:51:e3:8c:63:f2:5c:81:3a:ef:f1:c8:0a:c5:
95:7b:25:55:8f:18:f2:58:15:63:8a:5a:81:77:3e:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:72:F3:BE:09:2E:FA:62:DF:59:04:D6:73:7E:48:04:D6:35:47:D1
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:1b:c5:d2:c9:06:c3:f6:a9:25:49:07:36:36:ec:22:c8:
a6:f2:a5:6c:fc:80:8d:08:d8:13:d3:9a:ad:cb:35:3a:53:f4:
71:28:5b:e5:be:24:c4:5c:d1:5d:5a:43:e7:30:c6:f0:82:ba:
31:40:13:25:60:9d:9b:bc:63:06:b6:01:ec:b8:50:7a:3d:ba:
d1:27:cd:86:f1:8a:3d:ac:1d:18:b6:89:37:d8:ae:3e:30:95:
db:a1:e7:17:19:65:ad:d2:4e:2f:b1:b6:4a:19:a6:59:f2:f8:
6a:80:ea:4f:79:96:9b:fc:2a:ea:dc:31:d4:17:47:b5:5d:2c:
f4:01:5c:81:e8:ac:76:5f:e1:8b:80:be:1a:d4:ce:8b:e4:89:
4e:8e:f2:32:4e:0c:a9:4d:c0:60:b7:40:b1:62:de:d4:df:d2:
5c:9d:4e:5e:d4:fd:30:6f:45:32:cb:40:23:18:22:f2:f2:82:
79:ec:67:50:a4:17:17:9c:62:14:99:6a:74:ed:d3:6c:fa:e4:
3f:fd:4f:c9:79:69:a5:82:0b:63:46:66:7e:0c:8c:9c:c9:48:
e2:cc:39:bb:be:dd:31:fd:2a:49:99:81:9a:ac:e1:9b:b1:47:
00:60:bd:22:7c:96:20:2f:ad:d2:12:6f:73:c8:dc:d9:71:ae:
d9:aa:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:30 2026 by rpki-client