Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: HmMPaNOSV2at3UvomMXrtFsdXdStDrKmnMxOAk812iA=
Subject key identifier: 5D:18:66:7F:70:03:B7:3B:72:BC:03:0C:AE:DC:95:DE:ED:0A:7E:68
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019CAC46804F1CAC85AFEA9019A4A5E8AF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0CB3
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (hash: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=)
2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: uj6bzSTl999vS6u5hQpyp1OTJtw8KZ8s6/P3WPITkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:80:4f:1c:ac:85:af:ea:90:19:a4:a5:e8:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=5d18667f7003b73b72bc030caedc95deed0a7e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:55:36:fc:d7:0e:87:a2:f2:93:ff:93:d0:
c8:9b:b5:9c:14:7b:9c:d8:02:c4:e3:55:38:8b:d6:
c6:25:2b:89:af:88:07:36:43:08:17:8f:83:5c:57:
8e:d1:a8:0e:ee:77:12:dd:ae:69:6c:c8:f7:cf:f8:
85:33:a7:70:b8:4e:12:93:a1:be:ef:f9:13:44:40:
2d:5e:30:89:97:d6:89:43:9d:93:a5:8c:10:1d:df:
b4:06:df:cb:ae:ac:b2:e0:cd:b4:7d:94:46:6b:69:
66:f4:64:5b:3d:bd:06:d6:f5:d8:87:3b:18:01:6a:
41:1f:34:ce:97:8f:89:5a:77:ff:20:c2:d8:9b:1c:
76:61:28:ce:df:fb:e8:e3:d1:de:64:52:34:7f:a0:
a0:2f:73:8b:4d:e6:fe:c0:ba:de:51:91:af:53:72:
a5:39:9f:f9:e1:f4:e8:af:23:9c:2f:21:ea:16:86:
a8:7a:e4:cc:3e:87:71:91:a8:31:29:8e:45:b0:b8:
81:d5:1a:19:0d:69:dd:02:54:82:a3:b3:6a:f9:56:
9f:89:bc:b7:f2:c5:c8:6e:11:ce:5b:a5:94:39:09:
fe:73:04:61:d4:20:ed:c7:50:76:dd:f0:42:62:96:
09:aa:cd:72:a1:3f:bc:82:77:56:39:fe:20:99:06:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:66:7F:70:03:B7:3B:72:BC:03:0C:AE:DC:95:DE:ED:0A:7E:68
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d8:53:55:43:f0:92:01:28:83:68:45:69:92:36:89:27:50:
d2:e9:ce:ca:e6:45:43:b0:2c:9e:43:e0:50:c1:84:76:2f:07:
b5:f5:53:79:5f:6a:e5:bd:20:3b:49:81:1a:1c:e1:51:bc:6e:
c1:df:1c:01:1c:61:13:b4:18:90:c1:8d:c4:32:0c:f5:ef:68:
d6:90:94:d6:91:d9:b1:77:1b:a8:8c:dc:69:57:d6:f0:3a:4d:
38:43:55:fb:2b:c2:e5:ac:2b:d7:48:39:c0:06:ea:df:23:fb:
01:2e:b1:31:e2:4d:21:65:30:b3:b0:3d:ed:9a:b6:a7:ed:40:
2e:87:40:93:b4:01:25:aa:4b:12:c2:12:27:00:34:cb:28:2b:
d4:1b:50:3a:ad:60:0f:17:ac:7c:7d:27:ab:63:82:49:94:41:
8c:f4:3c:00:a0:ae:ec:8e:cd:25:79:c6:49:8c:50:a0:28:a9:
f3:02:11:2e:14:fa:2d:56:d6:81:06:b9:21:17:73:d2:33:66:
dc:c6:0e:bf:bc:b3:1f:0e:ef:a4:96:ec:5f:84:25:0d:d8:e3:
17:ff:08:56:45:a7:99:24:3c:6c:a1:dc:dd:56:ca:30:d8:12:
54:63:75:2f:f2:87:8d:e2:2b:ea:bd:07:a6:aa:3e:43:67:e7:
ab:d8:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:39 2026 by rpki-client