Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier: Rq7ld6UY+Di3tZD4DkV4cXcxx7HXf0GLXa2fWXUHG2w=
Subject key identifier: CD:7A:B2:81:9F:2E:39:D0:0D:92:79:77:D2:9B:03:09:91:64:B1:53
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial: 019CA8D856F4F5895A743013812BBBB73160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number: 7F
Signing time: Sun 01 Mar 2026 10:01:16 +0000
Manifest this update: Sun 01 Mar 2026 10:01:16 +0000
Manifest next update: Mon 02 Mar 2026 10:01:16 +0000
Files and hashes: 1: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: M/CpFs0QFTODeMyj0lsP4CnCxDBLedKYGMR2mCOVOsk=)
2: m1qW-rNjQ9tvdP1C_KCuJF_EXmw.asa (hash: 9lMkCyfIyGj1UpJgP+o5HSOV99to1p1lL2KxmkMnf2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:56:f4:f5:89:5a:74:30:13:81:2b:bb:b7:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Validity
Not Before: Mar 1 10:01:16 2026 GMT
Not After : Mar 2 10:01:16 2026 GMT
Subject: CN=cd7ab2819f2e39d00d927977d29b03099164b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:5a:56:a8:5f:10:3e:bf:1a:03:54:ad:41:
cf:df:7b:70:78:05:d2:c7:50:7a:11:3c:e6:0c:bb:
e0:b7:ff:8b:0f:8a:6a:da:40:5e:f9:3d:28:9c:11:
bf:5c:9b:22:ca:3c:4f:fe:74:8f:14:f0:36:78:d5:
38:c7:b5:d4:9e:96:16:28:cd:d8:2f:b4:16:06:62:
cb:81:4a:a2:51:ac:ed:7a:3c:70:d5:ec:e3:f2:c7:
04:d6:71:e7:41:bf:e1:f4:b3:26:98:a8:89:8e:8f:
c2:c7:2b:a7:79:ba:c5:fa:14:c5:7a:95:a2:57:44:
9b:a6:71:bc:80:0f:79:4c:48:ac:f6:ee:f2:de:73:
dc:08:ec:98:bb:12:98:1a:aa:84:c1:54:d4:04:aa:
88:1a:90:19:86:6b:5f:64:42:38:bf:50:17:72:fb:
89:cf:40:9f:50:64:e3:05:14:3c:a4:c0:1a:db:a9:
18:5a:45:07:84:01:e1:96:cc:7f:8e:11:78:c3:a4:
2d:d1:43:0f:58:63:ad:ad:9b:35:12:0b:a4:c9:91:
6b:e6:8f:b6:9a:c5:fa:b3:a9:3d:a2:2e:f8:13:9c:
6a:2b:68:df:2c:a2:ae:2c:79:32:66:92:c4:cd:99:
e6:8c:03:08:69:2f:f1:52:bc:90:dc:e4:4c:5c:84:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:B2:81:9F:2E:39:D0:0D:92:79:77:D2:9B:03:09:91:64:B1:53
X509v3 Authority Key Identifier:
keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:f6:c6:50:cb:29:b9:6c:01:d9:06:de:21:5a:5c:cb:51:
c2:25:19:ba:63:76:b8:d4:dd:a7:ac:a0:66:d1:cc:c7:1f:d7:
12:80:df:27:71:fc:b2:bc:14:00:ae:3b:2f:d7:00:2d:00:e7:
fa:d7:24:9d:0d:0c:39:3c:2c:bc:b9:46:9a:01:15:a4:55:04:
b5:e9:94:12:7c:d7:e0:b2:c0:72:74:45:fb:ff:0a:d2:df:92:
5d:64:d5:08:34:1c:d0:d8:7c:da:3f:8a:f1:60:a8:8d:ac:ef:
c9:ed:37:45:c1:55:e0:0e:13:f2:eb:2b:1c:23:c8:dc:c0:d8:
30:e6:fb:81:6e:b0:3c:b4:53:fc:ae:f4:b6:5f:48:52:a2:19:
ce:b1:40:6f:da:a2:9e:13:d5:55:a7:30:78:27:19:44:26:55:
bb:94:30:a8:24:02:04:7a:9c:ca:81:cf:7f:a2:7b:9b:04:bf:
c3:25:ae:18:18:25:12:e9:8f:be:b1:21:e7:09:5a:8d:d2:20:
1e:34:3b:c2:30:e7:94:c5:e2:56:e3:08:ef:06:89:a0:ff:a5:
ab:6f:cb:c5:3f:a8:12:dc:84:7b:92:c7:0e:6c:1f:3a:a9:6a:
57:91:2e:df:b3:b7:d6:b8:f6:56:c0:13:06:91:1b:65:88:d9:
33:ff:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:56 2026 by rpki-client