Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: yOEl3VSMIAEKSN/okztfkkBRTI9VR2ZbLi/n1pniWyg=
Subject key identifier: 90:DC:1C:78:E2:D1:0D:78:5A:EF:4A:FD:17:4D:D0:CF:A2:D2:86:66
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019CAAFD86AA322F86F7E2AE1D5A6A1CFD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 1652
Signing time: Sun 01 Mar 2026 20:01:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 20:01:07 +0000
Files and hashes: 1: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (hash: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: mUfG4eri1Xt0pN/AntA9V7hsdzg8ZsN2uHX7o0obd84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:86:aa:32:2f:86:f7:e2:ae:1d:5a:6a:1c:fd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 20:01:07 2026 GMT
Subject: CN=90dc1c78e2d10d785aef4afd174dd0cfa2d28666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:22:19:69:b8:9b:91:05:43:31:91:dc:f5:
b0:a1:49:c8:0b:08:23:33:db:36:29:35:f9:ea:bb:
a2:2e:5b:ef:ea:68:5e:2a:72:ad:ff:b3:ec:cf:46:
c9:e5:ec:0b:4d:83:eb:de:87:b1:ee:f6:2b:11:21:
4d:3c:8a:80:ec:5f:f1:2d:ac:6b:81:f8:d4:f1:75:
b4:75:04:82:1a:9f:7c:b8:57:5c:f7:e9:1a:e2:63:
04:e2:9c:f8:6b:b3:fd:b3:5d:e3:32:41:9d:90:7d:
49:f4:58:4f:cf:5b:c8:ec:42:53:13:c2:55:d6:2a:
fe:08:11:6b:a1:e1:a4:c9:33:73:3f:b6:8a:9a:b6:
e6:e3:51:07:f1:d3:e1:b2:f9:50:a8:85:10:cc:73:
41:3f:f2:d1:1d:f8:52:3c:6c:42:6b:89:44:c7:f5:
85:51:9d:f6:a9:c8:da:c1:72:62:78:9a:ea:0b:76:
34:80:ff:c4:6d:cc:76:d4:9a:2d:ef:48:9d:58:14:
6b:39:47:b6:3e:f1:25:be:79:07:4d:99:d1:b5:04:
6f:c5:12:5d:01:7f:73:42:73:62:2f:98:28:cd:15:
8b:51:a0:ca:e2:c7:a9:9e:d3:e8:a9:ef:7a:d7:08:
c1:c3:66:ea:c8:5d:71:99:4f:51:a1:76:e8:c0:55:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:1C:78:E2:D1:0D:78:5A:EF:4A:FD:17:4D:D0:CF:A2:D2:86:66
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:bc:ae:bc:67:6f:41:d4:16:eb:40:e0:a9:46:78:d6:d8:
63:ce:2c:bc:00:5a:26:62:62:d8:24:5e:80:11:fa:1f:89:31:
59:3d:b2:38:66:99:86:08:cb:c6:58:06:28:27:d8:4c:24:95:
1b:d4:a0:6c:21:5f:54:24:f1:e5:52:13:6f:0c:d0:5d:c4:4e:
0a:11:e1:fa:fe:15:a4:66:06:08:e4:4e:3b:12:1c:32:4b:17:
a1:07:2f:51:f0:c6:b0:f5:f0:80:1a:a0:a2:3e:ca:d0:88:27:
8d:a7:1f:09:7d:bb:00:5f:d7:86:13:3c:72:b0:2f:7d:ed:23:
bf:ca:fd:0a:ab:15:36:e9:af:8d:ed:cc:9b:8c:b3:c7:4c:91:
35:44:2a:8f:f9:44:2d:13:e2:22:06:54:5d:a6:96:c9:c9:2b:
6b:6d:88:dc:2f:2b:53:71:0e:48:0b:40:6e:57:b0:27:c2:87:
35:d2:00:79:97:53:15:27:dd:66:2b:d8:6c:dc:4e:d5:d1:7d:
08:08:61:96:ad:c5:ff:2d:16:f7:61:74:8e:4b:13:0b:10:75:
44:0b:bf:06:78:ae:c8:ed:d7:f1:58:68:25:b5:e2:01:65:d4:
f4:22:29:00:cf:a2:bc:05:65:d6:83:cb:bd:ba:1c:d6:62:18:
84:5a:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:54 2026 by rpki-client