Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: 4BXbxI4PeRdsL/dv3xJzI5vgb0w3BXhONRSwk2ppQwQ=
Subject key identifier: 34:3E:43:2C:FE:DB:AB:A4:EC:90:EF:73:84:18:2E:45:BE:2A:0D:CB
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 019CAA8FA0C20345072AE2A053C57E8A115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 14DD
Signing time: Sun 01 Mar 2026 18:01:05 +0000
Manifest this update: Sun 01 Mar 2026 18:01:05 +0000
Manifest next update: Mon 02 Mar 2026 18:01:05 +0000
Files and hashes: 1: Sn2KyoKjFfROku-b9ZDgfYm_GtE.roa (hash: gXKBGj1pUODxBLRTrQNK3Rbmt+qgOzJRUgGGxVVoxKU=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: 8g7sddZ8Lu42g85/yyFhOj/NqVYR21K3pIz70C9pK/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a0:c2:03:45:07:2a:e2:a0:53:c5:7e:8a:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Mar 1 18:01:05 2026 GMT
Not After : Mar 2 18:01:05 2026 GMT
Subject: CN=343e432cfedbaba4ec90ef7384182e45be2a0dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:a9:86:f1:52:4b:90:28:cb:a8:c1:5e:96:
da:3e:33:53:f7:e8:75:2c:3a:8f:d6:c5:58:76:82:
fd:c4:38:ac:98:9e:44:8a:d9:65:3a:3d:b0:ec:f5:
91:9f:5d:21:ac:6e:0b:5c:f2:86:97:8d:df:6d:30:
69:a1:7c:25:a0:e4:48:e8:fb:a5:9a:d9:68:9a:e1:
df:01:44:ec:e6:0f:9b:af:4b:a9:db:d0:39:de:15:
ee:bf:bf:52:91:df:d6:46:d0:ad:3c:32:59:8e:4f:
60:87:c4:f4:28:7f:bd:e3:18:29:c9:97:e2:2f:29:
1c:4f:8f:af:75:e0:97:8f:17:22:87:96:05:ce:7b:
68:68:7b:89:40:75:0a:6e:72:6a:f8:a4:12:f3:32:
ea:8d:82:91:58:2a:35:e7:c3:73:9b:77:6b:d8:c3:
ce:53:0e:f2:69:0d:35:b3:e7:76:5f:2b:a2:d6:58:
72:b9:d6:8f:9a:82:ad:ba:12:51:eb:3d:51:e0:5c:
be:14:0a:3b:3b:e3:88:f6:b6:cb:dd:45:02:73:aa:
7e:17:13:61:a4:7f:f1:e4:32:7c:ff:6e:d1:92:c3:
a4:25:3c:42:50:96:3d:07:ac:99:ad:fd:d4:2d:7d:
06:1d:00:e9:f8:4b:17:6c:5d:e7:82:a8:90:cd:a1:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:43:2C:FE:DB:AB:A4:EC:90:EF:73:84:18:2E:45:BE:2A:0D:CB
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:93:4d:14:23:90:9d:e7:59:d7:05:fe:a3:df:73:f1:49:
3e:94:e8:21:cd:0d:1b:2c:30:37:6d:c8:7a:91:3f:0b:59:c9:
fd:ee:36:78:70:aa:cd:19:7d:b1:8e:a4:dc:68:0b:a6:59:b5:
e6:84:af:7b:e3:b0:40:68:79:97:60:4e:24:4e:03:df:aa:1e:
bb:15:a4:95:75:11:0f:36:90:5c:4d:80:50:4c:90:57:7d:49:
53:c2:f1:7a:06:b2:d9:f7:ea:09:70:10:7d:14:8b:17:0a:43:
bf:38:9c:ec:9a:2c:c8:90:58:9e:2d:0b:7f:8a:fc:bd:dd:01:
00:1a:9d:3d:3e:44:9b:78:0b:6f:52:f7:fc:91:0a:31:00:b4:
7f:75:a6:c4:df:a2:b5:d8:12:98:7f:e0:6c:d3:eb:25:4a:92:
ec:cf:27:d4:3e:34:7e:46:12:8b:23:3b:a3:b1:a2:62:8e:f5:
de:52:62:d3:88:92:ee:26:e8:a0:79:eb:39:91:46:16:10:e3:
5a:78:68:35:65:90:2e:e5:92:5b:a4:33:21:4d:30:a7:18:f3:
43:83:39:a8:62:c9:4f:62:37:54:a1:e1:63:20:d4:2c:1d:75:
b5:68:fa:c3:26:83:78:16:d4:2f:f8:ba:9b:63:f8:05:7a:91:
0f:fa:bf:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj6DCA0UHKuKgU8V+ihFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0
YWJlYTAwHhcNMjYwMzAxMTgwMTA1WhcNMjYwMzAyMTgwMTA1WjAzMTEwLwYDVQQD
EygzNDNlNDMyY2ZlZGJhYmE0ZWM5MGVmNzM4NDE4MmU0NWJlMmEwZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbGphvFSS5Aoy6jBXpbaPjNT9+h1
LDqP1sVYdoL9xDismJ5EitllOj2w7PWRn10hrG4LXPKGl43fbTBpoXwloORI6Pul
mtlomuHfAUTs5g+br0up29A53hXuv79Skd/WRtCtPDJZjk9gh8T0KH+94xgpyZfi
LykcT4+vdeCXjxcih5YFzntoaHuJQHUKbnJq+KQS8zLqjYKRWCo158Nzm3dr2MPO
Uw7yaQ01s+d2Xyui1lhyudaPmoKtuhJR6z1R4Fy+FAo7O+OI9rbL3UUCc6p+FxNh
pH/x5DJ8/27RksOkJTxCUJY9B6yZrf3ULX0GHQDp+EsXbF3ngqiQzaGTawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+Qyz+26uk7JDvc4QYLkW+Kg3LMB8GA1UdIwQY
MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt
OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0
LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/OTTRQj
kJ3nWdcF/qPfc/FJPpToIc0NGywwN23IepE/C1nJ/e42eHCqzRl9sY6k3GgLplm1
5oSve+OwQGh5l2BOJE4D36oeuxWklXURDzaQXE2AUEyQV31JU8Lxegay2ffqCXAQ
fRSLFwpDvzic7JosyJBYni0Lf4r8vd0BABqdPT5Em3gLb1L3/JEKMQC0f3WmxN+i
tdgSmH/gbNPrJUqS7M8n1D40fkYSiyM7o7GiYo713lJi04iS7ibooHnrOZFGFhDj
WnhoNWWQLuWSW6QzIU0wpxjzQ4M5qGLJT2I3VKHhYyDULB11tWj6wyaDeBbUL/i6
m2P4BXqRD/q/Iw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:00 2026 by rpki-client