Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: i3rce7Ug60CmHrkJKRPqJ3QS345uqKiOpoY30FyA378=
Subject key identifier: D0:B6:B6:4B:26:D1:1D:B3:87:2C:C4:61:86:24:48:43:A0:BF:B6:A8
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019CAD5A54FE20511AAD952FCCB3241CCBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 02AF
Signing time: Mon 02 Mar 2026 07:01:44 +0000
Manifest this update: Mon 02 Mar 2026 07:01:44 +0000
Manifest next update: Tue 03 Mar 2026 07:01:44 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: eEUeN11y8LCKxmhRME70SadKVWEwuVqyQxao0mUZvIU=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:54:fe:20:51:1a:ad:95:2f:cc:b3:24:1c:cb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Mar 2 07:01:44 2026 GMT
Not After : Mar 3 07:01:44 2026 GMT
Subject: CN=d0b6b64b26d11db3872cc46186244843a0bfb6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:d7:2c:9e:cb:36:87:b7:8b:69:b7:4a:8f:
c3:f7:25:d2:18:8e:f6:09:2b:0f:a0:e9:d5:38:71:
53:a4:13:f6:c9:98:25:3d:56:c2:7d:19:5c:39:33:
4c:dc:c7:27:86:6d:5b:87:8d:4e:06:5f:b6:c2:c6:
71:1f:d4:aa:22:0d:c7:33:2b:55:eb:3c:1b:38:dd:
71:3d:df:2a:17:66:34:ba:c5:4a:cc:fb:ca:54:81:
a0:ef:25:31:91:19:4d:cf:2a:b0:0e:04:9f:39:1d:
31:ec:9f:1a:6c:80:ba:fb:f2:03:8f:6f:74:2d:e5:
a7:14:b8:3e:eb:dd:8d:75:76:3f:a2:f5:33:f6:3d:
04:3d:e8:62:16:df:1a:f8:37:4b:77:ae:10:50:4e:
51:94:a3:d7:2c:74:a9:81:44:57:61:db:15:b0:4e:
7f:1d:04:6d:df:cf:3f:d0:3e:ba:52:d5:1c:cf:ed:
eb:56:2f:00:84:be:b1:f3:bb:ca:f7:aa:57:d2:75:
6d:88:29:70:be:14:67:4e:39:90:07:ef:56:1c:b1:
0b:3a:14:77:d7:69:7d:c4:e5:18:d9:06:ee:b6:df:
d5:b5:65:63:88:c1:1e:16:47:19:b4:4c:fd:2c:02:
25:b0:2a:c4:c1:1c:55:98:4d:1e:53:f8:b6:d4:fb:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:B6:4B:26:D1:1D:B3:87:2C:C4:61:86:24:48:43:A0:BF:B6:A8
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:df:fe:94:1d:f2:d1:bc:1c:4b:4f:31:31:7f:05:0b:a6:
45:14:9a:58:06:d0:b1:63:2b:9d:e1:d4:38:ee:61:01:fa:ed:
81:ed:d0:61:62:30:53:29:c1:4b:aa:e6:da:81:fc:9b:21:a1:
75:14:51:f6:c6:a2:29:5b:3b:2d:1e:95:55:79:68:65:fa:ac:
2f:ff:b0:eb:1a:97:c3:27:9f:54:8d:a0:2e:6b:be:f9:f2:61:
33:c1:fb:6e:cd:2d:3f:9b:48:82:5b:e0:7e:df:53:23:4c:a8:
75:00:1b:71:d0:85:50:65:96:72:82:97:0d:c9:fa:6b:16:b3:
96:a3:3f:e5:28:97:12:4e:fa:29:1e:83:68:f7:90:dd:4c:41:
26:66:d6:c1:61:53:09:ef:06:26:9c:e1:d7:ce:d5:fc:71:77:
06:96:fd:e5:a1:11:d7:11:f9:76:87:2c:f0:8d:56:78:c9:cb:
3b:0c:4d:e8:83:fa:1a:dc:ce:bc:b3:f6:ac:44:0d:89:5a:ad:
97:26:d3:41:36:b8:0a:25:3c:00:6b:70:8e:90:3c:de:da:f5:
8d:7c:12:7b:76:6b:6b:78:70:12:c2:0e:31:1a:b2:ba:20:da:
e8:81:e3:74:db:68:41:4c:b3:d0:e4:b0:42:ff:19:aa:9b:cc:
e4:c3:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:40 2026 by rpki-client