Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: DklmFDE1WTQTs1m0ApzNKF5TisSz+2Hf7Bmn4C6YkPw=
Subject key identifier: 44:46:CF:31:AD:11:40:31:C5:41:F0:02:66:20:29:45:84:2F:C5:35
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019CAAFD0574637CB8AAE801C2F1A01BDC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 153E
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: 7htbhe3WY9W5ly1oRSbQitBVpZ5JRKwKIyi5kRTPFT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:05:74:63:7c:b8:aa:e8:01:c2:f1:a0:1b:dc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=4446cf31ad114031c541f00266202945842fc535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:ab:3d:a3:d5:5c:bf:6c:43:e0:c0:50:63:
2a:aa:9f:09:99:e5:a4:55:49:48:e2:a5:2c:7b:35:
26:98:37:82:31:13:ad:0c:1f:58:f2:7b:85:48:00:
d8:b6:62:81:37:3b:53:9d:49:ec:7e:02:8f:29:ce:
dd:37:5d:e4:24:e0:bf:e4:a8:25:65:e7:07:46:39:
c7:ab:a0:70:89:aa:f2:29:85:b4:9c:d3:f8:c6:57:
ca:7f:6e:ff:91:07:85:c5:3e:2c:71:5e:f1:26:ff:
5d:02:16:15:df:a8:25:7b:d5:d2:85:a8:3c:18:59:
87:ff:bf:88:eb:3f:6f:2f:54:f5:35:1d:b8:ce:f6:
c8:c6:b6:f0:ad:de:2b:6d:85:4e:6a:99:eb:74:e0:
eb:e5:31:ca:5c:80:5b:e0:5c:76:88:62:45:c1:41:
d3:ee:71:b7:57:66:7a:15:ad:dd:95:9c:47:03:c1:
6e:26:61:66:73:52:cf:d7:df:23:f0:14:97:f4:1b:
92:c9:8e:f9:75:d2:5c:b5:ed:46:73:26:e0:33:b7:
2a:93:03:ff:0e:1f:ee:da:38:92:72:55:1d:59:e7:
a7:5b:2f:10:51:61:a8:bf:88:4c:3f:5a:d4:a7:4d:
9c:f4:e4:21:24:77:cb:da:6b:05:bd:43:9e:41:6f:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:CF:31:AD:11:40:31:C5:41:F0:02:66:20:29:45:84:2F:C5:35
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:20:6e:0d:c3:f4:d0:55:6c:72:91:c0:1e:e8:76:a8:09:
22:b7:85:42:8d:02:9f:1a:e0:c5:46:c8:03:e4:6c:fe:bb:27:
3b:c7:63:68:1a:bb:4d:17:9c:8a:af:e9:f2:39:61:46:1a:3f:
28:76:67:f6:2a:c8:12:2e:36:d1:44:e1:ee:52:70:5a:81:cf:
f7:31:c4:51:b9:fb:f1:7e:2f:26:b7:15:2e:b1:b1:1f:c7:2a:
0b:d5:fd:ad:6e:78:82:a9:b8:80:b7:3e:06:05:c0:84:18:5a:
cc:85:a3:5c:84:be:25:97:d7:c2:b2:3d:c8:f4:fb:e6:33:06:
eb:94:1a:0b:fe:68:f5:43:d0:84:37:f7:34:31:8f:9a:ca:b0:
2c:83:a2:d2:64:be:e6:4e:00:c2:5a:23:1f:8b:c0:ff:95:09:
f4:16:08:f4:6f:cd:7c:d6:bc:b2:a0:a4:43:2b:1e:d7:2f:ea:
0b:0d:92:43:78:ca:28:30:fe:60:af:0a:cb:5f:93:25:75:18:
05:8e:80:3b:69:84:eb:88:1d:6e:94:04:82:5d:b6:9a:bb:1d:
b9:94:8a:7c:15:5b:07:00:bf:b0:1b:34:d8:da:e8:4f:2e:d4:
38:ee:53:f1:7f:ac:b9:22:f5:cf:7c:f0:f1:db:7a:52:0b:64:
d4:7d:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client