Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: 51zdAgBmOoDgB98KcKID3mtmR6ztmk4zWTO6qECIteE=
Subject key identifier: C6:DE:56:0E:44:C0:C4:17:00:46:9F:61:09:D0:EC:41:58:F4:CA:EA
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 019CAB345CF41877BCFE20A878ACB2946152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: 0lL1Huc46WXxUsyr0Hn47HAdMOozD1xWgP0kLKso6bI=)
2: hpJdcso_n4malOGRsLM9jlcq2PA.roa (hash: fdvBY/m75V1oPyWW90Ox8zMppAT8R3oNsWGUpS0XZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5c:f4:18:77:bc:fe:20:a8:78:ac:b2:94:61:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=c6de560e44c0c41700469f6109d0ec4158f4caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:6e:90:ca:4a:48:ea:f1:30:11:09:cb:17:
61:13:43:d4:7f:ab:5c:35:11:30:1a:6a:8d:87:e8:
93:be:4a:4d:ac:f6:24:44:59:85:7b:39:45:93:56:
a0:79:65:36:7b:bc:5d:fb:70:25:df:59:24:9d:cf:
04:84:ca:9c:b7:41:85:07:ed:8d:00:22:bd:57:5d:
a5:a7:77:c0:43:64:3a:34:c8:0d:17:52:03:d7:a9:
33:64:bf:6c:4a:cc:38:5a:2b:1f:3b:8a:e2:6c:f9:
5d:82:87:0d:d2:b9:46:0a:e4:6e:80:08:ce:2c:38:
ef:2f:73:b6:9e:11:eb:de:f8:41:44:3d:03:01:b0:
39:fa:f8:4a:42:1c:8f:50:e5:86:24:83:e0:10:83:
e2:9e:5a:63:e6:14:52:a6:13:8e:6d:72:63:42:76:
3b:c6:e1:7c:06:5b:7a:26:2f:bd:e5:29:f2:ba:69:
fe:92:c4:2f:1b:50:30:10:da:da:a4:ac:77:d9:c2:
24:ee:81:07:8d:20:99:32:24:9e:a8:e1:28:83:74:
d5:7b:85:2c:b1:a5:24:be:1e:00:3d:b8:d5:6b:9b:
88:82:30:63:f5:92:7c:28:a9:d3:ba:67:0e:65:bf:
44:53:88:6f:30:52:08:b7:25:c7:20:c1:f2:9d:80:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:56:0E:44:C0:C4:17:00:46:9F:61:09:D0:EC:41:58:F4:CA:EA
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:85:ef:b1:31:0f:bb:35:7a:b2:16:af:4f:23:8e:52:a0:11:
da:4a:8c:a0:23:e5:4a:48:51:52:c9:1c:5a:c8:f6:a4:72:23:
f2:a3:81:b5:c7:0d:87:6b:50:fd:92:cd:da:0d:01:b6:f7:b2:
5a:cf:a9:07:b7:56:a9:d7:2e:3e:f1:f8:1f:84:70:04:96:ec:
4e:e2:03:62:e6:42:fe:62:d8:7b:d0:fb:ed:cd:6a:e8:16:a2:
86:5a:56:41:00:a1:1a:e6:24:60:cc:c4:3b:c0:2e:a2:38:83:
be:a7:d2:f0:7b:90:8a:88:aa:db:26:94:c6:23:40:fc:0f:10:
a2:64:c3:58:5b:65:bc:bf:0b:fe:28:71:7a:f6:62:7e:25:d9:
7c:e9:7a:61:44:05:25:a9:f0:fe:a2:0b:14:b3:75:86:f8:27:
0d:d9:a1:fb:e3:9c:b4:6f:04:31:8b:af:83:a6:b6:8c:d1:2f:
43:3d:55:c5:12:9d:42:c5:95:b5:bb:95:9a:b3:a0:95:0f:0c:
b3:18:97:29:69:b9:d9:4c:bb:86:79:20:f0:08:97:93:c9:14:
cf:a8:94:9b:2d:28:d6:f1:9c:7b:58:d3:d3:a9:d9:1e:5a:7f:
05:2a:a3:e7:ba:e8:ea:05:55:31:88:c8:a9:86:31:06:21:13:
dd:54:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:31 2026 by rpki-client