Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: /jsCBqRU5VPOCb+5dCNyu9LY7NobyfTfJv+yxcsdqFE=
Subject key identifier: F8:59:DA:A5:A4:EF:44:26:A2:AF:E8:5E:C1:51:AF:E3:7C:3E:9E:12
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019CA8D81387090E1A6A1B4154FCE0C1B360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 10:00:58 +0000
Manifest this update: Sun 01 Mar 2026 10:00:58 +0000
Manifest next update: Mon 02 Mar 2026 10:00:58 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: YRt6BO31tUDyIcJnI6NiVmvkbVxust4lzhixntk6+N8=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:13:87:09:0e:1a:6a:1b:41:54:fc:e0:c1:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Mar 1 10:00:58 2026 GMT
Not After : Mar 2 10:00:58 2026 GMT
Subject: CN=f859daa5a4ef4426a2afe85ec151afe37c3e9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:2f:19:cd:cf:2d:3b:63:20:f7:65:89:56:
74:39:20:a7:0a:93:fc:8f:5c:4f:ae:c0:fd:ce:5d:
08:ef:eb:66:a2:63:24:e4:b1:53:77:93:86:60:10:
4a:bd:12:58:4b:6c:2c:d3:af:ab:5e:02:03:89:48:
0f:d1:c4:b4:5b:2e:4d:4a:34:86:aa:2e:69:55:87:
66:eb:7f:a6:37:e8:8d:13:87:0f:e3:4e:b4:f9:f2:
24:16:0f:c7:40:16:a9:39:33:bd:d8:84:51:6e:41:
bb:0a:53:7e:7e:9d:ab:f4:a6:2a:2e:b9:53:ea:1b:
8f:1b:bb:b7:4d:00:1c:7b:5d:fa:ea:82:75:90:bd:
4c:ba:94:a2:4c:53:4c:fb:ab:e8:38:db:ca:7f:c0:
61:c1:5d:4b:39:72:75:23:d6:83:10:aa:b6:79:40:
d4:78:a6:2f:b7:86:ce:69:9b:ff:a1:e8:c9:f9:a6:
f0:3a:52:82:0f:22:31:5b:d8:b4:5e:4d:3e:bd:65:
c7:21:dd:db:a2:c2:94:69:09:a9:90:3b:0c:d9:96:
34:8e:39:a6:25:cf:fa:a3:db:4c:b4:30:4d:c2:57:
03:1a:ea:3a:fa:0b:34:af:b7:4e:c8:ea:88:84:6a:
bb:87:c8:39:1c:ff:3d:f1:fa:d1:d8:87:38:10:e3:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:DA:A5:A4:EF:44:26:A2:AF:E8:5E:C1:51:AF:E3:7C:3E:9E:12
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:b9:2c:ca:99:ea:fe:47:0c:57:7a:1f:54:71:92:f2:d4:
a6:92:43:bf:b5:42:2e:3f:c0:71:87:5c:4d:0d:90:9c:69:3f:
72:a4:f2:8c:cc:eb:7c:86:bf:b0:96:97:28:2d:a6:5b:ac:68:
91:91:b9:9a:98:d3:8e:06:77:69:d2:0e:bd:02:e6:29:1b:7d:
56:22:af:5e:61:82:65:fa:9d:d3:05:37:db:6b:0e:c1:f0:8d:
7d:90:06:94:84:9e:75:40:c7:e5:5a:e8:55:50:ec:7c:cd:6a:
57:9f:8c:c7:c5:c5:72:b2:fd:e0:dd:e2:18:9f:28:65:a1:01:
03:e6:60:04:22:b3:ad:e5:fb:9e:e5:ab:59:99:d5:0d:9f:c5:
aa:4b:92:08:8b:8b:b2:19:67:96:17:e7:58:6b:33:c4:ee:f2:
10:cc:5c:f9:16:6a:43:c6:60:32:81:13:7e:f8:28:be:0d:ec:
ab:19:f7:09:7e:98:35:6d:4f:45:ea:ae:4d:5b:96:46:62:ac:
8b:39:7e:02:1c:0c:96:41:6a:47:33:52:91:4e:f6:c2:85:82:
6f:85:e5:7f:b8:e6:b2:43:e1:95:8e:6e:54:ad:28:b7:04:fa:
d6:42:9f:98:45:68:6a:a9:59:1c:e4:1b:9c:ce:5e:8e:39:eb:
4f:d6:18:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:25 2026 by rpki-client