Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: LHekGtXpYmCC+jARBEuy+wxUch4Umxu/bkTJqnFRWyU=
Subject key identifier: 95:32:71:2C:96:69:28:0F:4C:4D:4D:5C:56:DB:73:B3:7E:52:C0:D6
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019CAD905C901F20F192E177C28248D9B4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0125
Signing time: Mon 02 Mar 2026 08:00:45 +0000
Manifest this update: Mon 02 Mar 2026 08:00:45 +0000
Manifest next update: Tue 03 Mar 2026 08:00:45 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: uGRqGEDL/qKjnkOjxJ+fJZqgFtqBe3a0iPTYPjZFTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5c:90:1f:20:f1:92:e1:77:c2:82:48:d9:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Mar 2 08:00:45 2026 GMT
Not After : Mar 3 08:00:45 2026 GMT
Subject: CN=9532712c9669280f4c4d4d5c56db73b37e52c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:d3:4b:d2:f6:57:ea:9d:01:35:ee:05:53:
77:67:1b:8a:b6:83:50:cb:c2:69:dc:54:df:8b:05:
6e:04:a0:b4:a3:12:84:6e:2e:d4:3e:bd:8f:89:37:
53:28:9b:b7:24:11:5f:da:f7:2b:86:f9:b8:6f:d3:
9c:2d:74:8b:5b:af:71:98:20:ac:03:14:a4:70:be:
5b:24:96:79:46:39:0a:2e:32:87:24:59:f0:f8:b7:
ab:76:c4:d4:84:49:9f:8f:17:25:eb:58:c9:c3:80:
f8:83:bd:3f:49:dd:8d:9d:80:04:d8:f0:34:7d:00:
c0:76:65:14:f6:f0:cd:78:f8:5c:f2:6e:0d:4b:ba:
52:94:60:58:3b:5d:87:87:55:5d:be:22:c1:86:64:
24:ed:67:48:db:71:af:00:76:bb:d1:1b:4b:ae:a9:
77:16:2a:28:43:b2:95:1b:ad:28:4b:90:50:f0:c8:
7b:6d:7f:be:37:72:0c:db:6e:07:21:05:89:27:58:
5d:9b:88:fc:97:36:f2:14:24:3f:be:a7:de:1f:f8:
a7:5d:03:db:59:7f:f2:fb:07:78:3b:b9:5e:76:85:
38:cc:e3:6c:69:7e:1a:c0:a7:15:b3:89:c4:b9:4f:
61:46:b1:cf:b5:d2:39:52:3e:6e:37:2e:4a:59:70:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:71:2C:96:69:28:0F:4C:4D:4D:5C:56:DB:73:B3:7E:52:C0:D6
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:90:93:f9:53:d0:0b:db:80:6f:ee:cd:bd:05:f1:e6:22:11:
aa:e1:03:ab:3d:5d:88:2e:a2:de:5d:7a:db:46:71:11:c9:bc:
ab:53:b2:2f:0e:7d:fb:6f:ed:e2:e6:a5:a0:37:f5:ae:ac:af:
79:50:c3:d4:92:8b:19:89:94:ee:85:1c:f6:bb:fb:4a:b4:71:
f1:b9:f7:cf:10:43:ab:26:2f:69:21:4a:cf:17:92:63:3c:25:
a8:66:fa:c2:d5:d6:b6:b5:99:ab:6f:58:88:c0:45:c5:e8:40:
fb:b7:df:99:c6:ed:0a:ea:a8:c7:f8:9b:1f:d5:de:04:64:85:
6c:e8:1a:e9:c3:20:26:e5:51:93:9d:82:32:e9:46:10:6c:0e:
74:42:2c:1d:7e:40:f4:1f:22:33:34:9b:8f:1d:48:2e:6b:a4:
87:3b:f0:81:29:2a:9b:5e:7d:ce:cf:f4:f8:21:47:69:04:db:
e8:01:eb:77:6d:c6:5e:d8:b6:82:12:b0:58:56:7e:3b:ef:3f:
dd:15:7f:5d:92:b2:2c:c8:98:de:67:cf:88:bc:bd:09:f6:3c:
86:87:eb:22:d7:a0:e7:9d:40:7e:37:e3:25:15:f6:b2:47:b1:
fc:4f:0f:ca:13:86:23:f1:58:a3:ab:bd:2c:05:97:ec:c2:c3:
0c:66:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:51 2026 by rpki-client