Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: FfBXz+R+rIEliX3qG/UlfZefJ+BkaWCFhyMs/m3IUOI=
Subject key identifier: FF:36:72:BC:4F:B8:1C:9B:69:17:FA:BA:47:91:F1:B6:6C:BD:C6:95
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019EC1EDF42039768F4AE33B79B534BB1B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1653
Signing time: Sat 13 Jun 2026 17:00:57 +0000
Manifest this update: Sat 13 Jun 2026 17:00:57 +0000
Manifest next update: Sun 14 Jun 2026 17:00:57 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: o+o9HwQcJXfr/Ps6VLDTG7oMJRI8z6kco8Kzw47SEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:f4:20:39:76:8f:4a:e3:3b:79:b5:34:bb:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jun 13 17:00:57 2026 GMT
Not After : Jun 14 17:00:57 2026 GMT
Subject: CN=ff3672bc4fb81c9b6917faba4791f1b66cbdc695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:fd:ef:18:ab:16:43:1e:54:33:f7:9e:64:
48:b4:01:76:41:8b:af:54:7c:4c:6b:67:0b:18:fa:
aa:42:b4:88:29:8c:56:a4:ce:e6:23:18:b8:ab:0d:
61:f7:89:0c:5f:90:10:2e:de:d0:36:f8:ce:44:eb:
61:1a:11:74:b0:41:6f:13:c1:12:48:4e:f6:e5:2c:
d2:f5:1b:54:e5:5d:51:55:c1:79:97:84:55:af:53:
f5:6c:69:a7:b5:70:40:c6:04:86:07:d0:ba:81:55:
89:88:fe:c3:e3:3f:a2:bc:03:80:38:d3:49:67:d3:
70:ac:f5:ef:b9:cf:32:b3:c0:0b:90:b8:be:80:83:
55:64:24:62:16:65:1f:18:b5:ca:e6:d8:56:dc:fb:
3a:32:7c:18:3d:c8:99:6e:cf:ac:3c:74:b5:c9:ce:
6f:93:fe:79:fc:2b:e2:31:54:41:88:3f:64:03:ce:
ce:84:fe:48:34:8d:51:6f:0b:c8:9f:00:d7:38:ba:
68:46:51:1d:0a:ec:ed:c5:83:61:41:df:fe:3c:9f:
2b:15:0d:d8:58:04:1f:7b:46:c7:75:b1:d1:ed:2e:
1f:1e:81:b8:fb:e9:f2:b9:b9:d5:27:bf:a8:d9:5b:
16:e5:7e:64:44:03:a0:aa:72:74:e0:e6:52:c8:49:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:72:BC:4F:B8:1C:9B:69:17:FA:BA:47:91:F1:B6:6C:BD:C6:95
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:b2:8a:aa:98:cb:3d:fa:d0:b8:e4:4b:74:11:c4:17:62:
ef:b8:8c:d0:e0:ee:2d:04:40:29:79:ae:94:19:c6:bc:6f:a3:
39:8f:d9:d4:8f:a6:45:17:c4:d9:16:94:a2:8f:96:77:e8:4c:
9d:03:05:8a:86:97:b9:12:03:fc:dc:35:ef:5f:42:21:e9:4e:
4e:b9:38:98:3d:a6:d6:3a:c0:d6:59:8a:e2:de:a0:a6:56:9c:
f8:37:d9:9e:0a:51:d4:49:e3:a7:ab:07:27:30:0e:69:b1:84:
c5:75:a3:c4:59:92:5e:85:3c:5a:8f:67:16:28:16:ce:25:97:
62:f5:fa:8d:ed:38:ce:07:da:cd:c6:11:20:80:35:61:c6:ff:
27:c9:30:1b:39:fa:0c:d3:34:30:2a:e5:db:24:c8:d5:71:f3:
ca:d5:f6:7f:21:89:0c:f3:cb:49:5e:d3:92:8c:01:0b:9d:91:
54:36:81:5a:01:47:21:44:da:6c:46:0c:38:e2:a2:75:ed:7f:
3c:0e:4a:96:98:f0:b7:98:84:8d:cb:b5:ef:0a:23:3f:3e:21:
ad:fb:6b:3b:2e:20:63:8c:d7:8f:ae:e9:aa:32:6b:b0:d0:8b:
75:ca:77:cb:72:72:75:76:79:73:e6:67:2d:f8:a8:ad:63:96:
49:66:90:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7fQgOXaPSuM7ebU0uxsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjYwNjEzMTcwMDU3WhcNMjYwNjE0MTcwMDU3WjAzMTEwLwYDVQQD
EyhmZjM2NzJiYzRmYjgxYzliNjkxN2ZhYmE0NzkxZjFiNjZjYmRjNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmr97xirFkMeVDP3nmRItAF2QYuv
VHxMa2cLGPqqQrSIKYxWpM7mIxi4qw1h94kMX5AQLt7QNvjOROthGhF0sEFvE8ES
SE725SzS9RtU5V1RVcF5l4RVr1P1bGmntXBAxgSGB9C6gVWJiP7D4z+ivAOAONNJ
Z9NwrPXvuc8ys8ALkLi+gINVZCRiFmUfGLXK5thW3Ps6MnwYPciZbs+sPHS1yc5v
k/55/CviMVRBiD9kA87OhP5INI1RbwvInwDXOLpoRlEdCuztxYNhQd/+PJ8rFQ3Y
WAQfe0bHdbHR7S4fHoG4++nyubnVJ7+o2VsW5X5kRAOgqnJ04OZSyEkHTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP82crxPuBybaRf6ukeR8bZsvcaVMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn66yiqqY
yz360LjkS3QRxBdi77iM0ODuLQRAKXmulBnGvG+jOY/Z1I+mRRfE2RaUoo+Wd+hM
nQMFioaXuRID/Nw1719CIelOTrk4mD2m1jrA1lmK4t6gplac+DfZngpR1Enjp6sH
JzAOabGExXWjxFmSXoU8Wo9nFigWziWXYvX6je04zgfazcYRIIA1Ycb/J8kwGzn6
DNM0MCrl2yTI1XHzytX2fyGJDPPLSV7TkowBC52RVDaBWgFHIUTabEYMOOKide1/
PA5Klpjwt5iEjcu17wojPz4hrftrOy4gY4zXj67pqjJrsNCLdcp3y3JydXZ5c+Zn
LfiorWOWSWaQwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:42 2026 by rpki-client