Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier: P7I9GpiRWmP8vKSB2pUJVWTqzZYrlwhGRnVmUZyXm24=
Subject key identifier: 17:9C:B2:DC:D1:66:C1:2F:2F:D9:E7:C6:20:66:7A:1B:3C:99:EB:7B
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial: 019CB0FFCBD26774E0161EC795278A52538C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number: 0259
Signing time: Tue 03 Mar 2026 00:01:19 +0000
Manifest this update: Tue 03 Mar 2026 00:01:19 +0000
Manifest next update: Wed 04 Mar 2026 00:01:19 +0000
Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: RW9pWeDbBkYlvQDeo8i+PB+jAxiZrGzovd8MQz/cd60=)
2: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (hash: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:cb:d2:67:74:e0:16:1e:c7:95:27:8a:52:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Validity
Not Before: Mar 3 00:01:19 2026 GMT
Not After : Mar 4 00:01:19 2026 GMT
Subject: CN=179cb2dcd166c12f2fd9e7c620667a1b3c99eb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:c8:20:36:0b:22:d6:46:c3:eb:4f:52:81:
62:a4:30:f7:a6:42:6c:f0:fc:2c:e6:8e:cf:d4:e8:
31:64:f0:ce:51:31:1e:a7:3c:74:9e:5f:f4:be:92:
97:30:f0:30:ef:5d:d9:3b:98:90:dc:b8:f2:ab:2e:
a5:f0:61:49:1e:07:f6:aa:3d:67:24:c9:5f:dd:80:
a4:94:fb:d2:7b:a7:e9:97:be:ca:94:ce:f3:5b:fc:
b4:e4:8d:7f:f4:b9:7a:fb:0a:8d:2a:55:e6:46:19:
a6:77:9b:1e:c3:a8:74:8a:ce:f1:0f:04:4c:b8:ab:
11:ba:86:4b:29:88:74:eb:62:d2:dd:df:80:86:a4:
6f:d7:5f:85:9f:73:f8:ff:c6:5c:ee:17:29:27:14:
b7:78:46:89:35:b0:3c:a8:87:d3:ee:77:34:42:7e:
4f:bc:ea:2b:60:00:e9:e9:6b:e4:be:d3:36:54:96:
93:d9:7d:4f:d3:18:2d:3d:06:7c:87:50:ae:bd:ee:
10:e5:cf:f5:d8:ba:38:19:3e:20:a9:95:9f:a2:3c:
d3:17:87:3a:72:a6:36:ff:5f:4b:01:92:6d:11:e8:
06:e1:24:98:43:eb:25:f9:ad:a1:84:dc:da:b4:13:
a0:9d:8f:38:37:3b:b7:ff:fc:e3:52:23:b8:2e:e4:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9C:B2:DC:D1:66:C1:2F:2F:D9:E7:C6:20:66:7A:1B:3C:99:EB:7B
X509v3 Authority Key Identifier:
keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:6c:68:90:6f:dd:60:be:83:93:71:28:da:de:56:2c:b1:
e4:91:00:13:10:68:1f:05:04:36:70:96:8d:53:ab:11:19:3a:
df:84:e3:fd:38:80:a3:db:1f:e7:35:54:08:89:f4:eb:95:37:
5e:5d:d4:71:b5:89:07:7c:a3:c0:44:eb:b0:c7:f7:bd:b2:34:
db:69:7e:eb:9f:cf:a9:d2:be:24:d2:6e:1d:48:c3:7d:94:ab:
41:87:1e:fb:48:ef:e6:02:07:c5:ed:04:22:4a:6f:d6:ed:9e:
e7:4f:97:cc:6c:83:2b:e9:ec:37:66:c9:6a:53:73:35:8e:0c:
ad:88:32:ed:f4:39:05:38:d9:88:32:32:be:8d:c1:c8:3e:02:
50:36:85:96:49:f1:e5:b1:73:f5:25:32:c9:43:0a:b5:8c:bc:
82:c2:96:49:fb:e8:fb:e6:24:f4:7a:71:6d:34:82:f1:6d:22:
e9:fd:ba:88:38:a1:34:fd:94:6c:5c:d5:1d:44:45:2c:14:b1:
ae:32:73:41:91:24:4c:f5:63:82:d0:70:c5:25:6b:0e:a4:5f:
0e:87:9b:dd:53:0b:a1:88:cc:4c:b3:b8:eb:72:8b:29:ae:8b:
5d:47:70:9d:00:ae:02:d6:de:15:ad:b3:66:9a:42:d8:03:0b:
1e:77:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:52 2026 by rpki-client