Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: guNlxV8D2KLt3DmcQZxIZ5/izRKJA3zEh4sm9v3V2YY=
Subject key identifier: 52:BF:6C:BD:AF:AF:F5:BD:37:49:99:AD:0B:88:F5:B4:21:43:91:F5
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019CAAC6E59CEEE91AF32A5A7624AD9FBB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1853
Signing time: Sun 01 Mar 2026 19:01:27 +0000
Manifest this update: Sun 01 Mar 2026 19:01:27 +0000
Manifest next update: Mon 02 Mar 2026 19:01:27 +0000
Files and hashes: 1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
3: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
4: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: +iqSBf1Bh6Zcz2C9iGljdEybqXsAl1eGiwbf6Fg7erQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e5:9c:ee:e9:1a:f3:2a:5a:76:24:ad:9f:bb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Mar 1 19:01:27 2026 GMT
Not After : Mar 2 19:01:27 2026 GMT
Subject: CN=52bf6cbdafaff5bd374999ad0b88f5b4214391f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:8d:d5:f4:b2:8d:86:bf:bb:c6:93:42:bb:
2f:f9:40:23:fa:36:8e:56:73:44:0e:0e:81:fe:35:
c8:62:9d:28:4e:4d:4d:74:f2:86:9e:9a:eb:ad:2f:
7e:02:21:da:82:69:f8:1d:43:48:9f:38:2d:31:da:
66:56:52:3e:3e:55:96:1e:06:13:a9:54:69:b8:e0:
f4:f4:87:84:81:ec:d0:00:1a:7e:7f:bd:26:ed:6b:
c7:a7:1f:ea:5f:d5:d2:85:35:9d:9d:04:25:c2:72:
e5:c7:71:c3:4c:58:90:df:4f:57:8b:71:6b:ab:66:
bb:27:7a:3a:ab:d9:22:c2:f8:fd:c5:61:be:bc:f6:
7b:c7:5b:77:8e:e7:fe:1a:98:38:f9:2e:ad:b9:c9:
f9:a2:66:7c:bd:2c:8f:4f:d7:e0:8c:c9:51:63:d2:
d2:d3:68:d3:16:a4:88:dc:19:e3:90:68:8d:80:6b:
c8:5c:34:ad:48:49:7a:55:e6:82:58:01:70:46:f5:
b5:42:d1:42:6a:53:b8:24:f8:81:4e:48:b0:89:f5:
30:05:37:85:ba:71:55:aa:be:fb:8e:90:f3:c1:ba:
53:85:aa:5f:b7:fa:07:af:31:44:bd:6c:7f:c1:1a:
74:8a:52:8f:b8:a2:a3:ff:28:ad:c8:33:f6:e9:bd:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:6C:BD:AF:AF:F5:BD:37:49:99:AD:0B:88:F5:B4:21:43:91:F5
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:3a:58:0c:75:5a:21:88:97:f3:1e:60:3f:ef:48:28:18:
a0:cd:c2:5c:83:c8:45:42:6d:01:59:6b:eb:0c:bc:93:e4:a4:
76:31:e7:91:fb:9a:e9:25:f7:ea:d6:2b:85:14:4b:db:5d:41:
16:eb:0e:6f:98:f3:62:34:08:8c:6b:58:b3:b3:62:74:05:e2:
c3:20:94:a9:bf:e4:a2:7f:4c:c4:2f:17:66:96:b9:52:c8:86:
5c:05:f8:ae:c9:2c:67:02:d0:64:3b:1a:a5:65:ce:94:f0:74:
c6:94:88:ec:6f:f3:b3:14:e2:27:43:ba:44:ad:71:44:f2:28:
2c:8e:e8:b3:f8:e3:95:79:0e:cc:8e:5d:18:4a:6c:98:e3:bf:
59:fa:4c:be:d5:82:1f:65:3c:0f:a5:f5:b9:57:e0:0c:15:15:
35:30:0e:78:45:f2:48:2f:46:d2:dd:12:62:e7:30:98:cb:66:
d6:f8:80:ba:35:0f:61:90:7c:a3:b3:41:06:a1:c7:41:59:47:
8c:e8:43:a6:7b:ce:39:d5:38:f1:94:fd:e6:35:ed:87:23:93:
5a:08:6e:50:47:a6:39:0a:43:8c:5b:d8:72:93:3a:52:cc:f3:
a2:fa:70:64:7b:49:c0:9c:77:b3:d6:c3:18:68:84:86:38:e9:
11:bc:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:56 2026 by rpki-client