Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: zmYK7LeZIPELZdnL+RWhSw0q7tVnPO4RtwsnLkVTEjM=
Subject key identifier: CF:9A:34:70:D3:E4:4C:D5:40:DF:A3:3C:77:3C:42:24:58:B5:2C:66
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019CAB6BB789CE4037DF54988C60565041C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 148D
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: 3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa (hash: RYP+kCE6mn90ehLAvdC/KeyfQc4In+6wu6IVJb4OH5c=)
2: PeACFRzbqNg73GPInX-i49BNtHM.roa (hash: so0IXS+T3rWA07JEuNq7WJWAoqVF14IBJdyXjwBvRmQ=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: CzxUq1KEDICAjFsc6RJgy0OnGOjjkl/Bn1POWYKQGNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b7:89:ce:40:37:df:54:98:8c:60:56:50:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=cf9a3470d3e44cd540dfa33c773c422458b52c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:b7:74:e4:b2:5f:17:3c:1c:07:6c:dc:6a:
fa:c4:d6:32:13:ee:4c:22:4e:f0:44:1f:63:9c:fc:
f6:c3:e2:1e:29:0a:5f:22:91:c9:97:b1:fb:04:a2:
c4:95:37:67:1b:e8:ca:4d:cd:62:75:6f:7d:68:92:
ec:8c:16:41:b2:08:81:a7:50:1c:4b:76:dd:0e:1b:
f4:1d:9e:9c:76:cb:e6:ae:6b:f4:a5:f2:4e:85:bb:
ab:34:74:6b:ba:59:fb:c0:62:0e:94:2a:32:38:23:
a9:fe:0c:c5:0d:ab:af:b0:dd:21:6f:61:b2:ab:7a:
3a:72:24:4d:b8:3a:e3:f4:3b:a2:8e:ac:01:7c:28:
82:75:44:ed:60:93:ff:f3:c0:e5:ed:9c:34:2b:0b:
20:51:d4:0b:39:41:ef:e7:60:e8:81:6e:39:05:4d:
21:31:80:8d:b4:32:94:dc:93:f3:fc:81:50:04:c7:
b6:a2:3b:87:a3:3e:95:49:4a:00:ef:b7:59:f0:0d:
b3:ca:a5:d9:11:89:ac:29:e9:db:c4:b7:8a:32:70:
62:08:c6:7a:d2:1d:e6:a5:d9:d0:a6:79:b5:46:f0:
33:c2:9f:5d:07:b7:42:43:ec:c1:cd:75:8f:d6:55:
22:e3:68:2e:90:98:ce:a7:6d:a2:7d:d1:8c:03:57:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:34:70:D3:E4:4C:D5:40:DF:A3:3C:77:3C:42:24:58:B5:2C:66
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:40:9d:cf:1a:49:14:1a:07:dc:9a:47:80:2d:d3:7a:72:
f0:08:7f:4e:cc:44:3d:63:b7:c0:b3:2b:19:6b:07:18:45:6b:
2f:87:03:fa:81:98:ab:15:ec:0c:a1:70:b3:fe:84:7c:58:e2:
9f:6e:37:79:db:53:7f:f3:9a:3b:9a:13:fa:06:2f:b9:56:19:
39:50:3b:0d:de:79:e7:76:60:29:5d:08:62:45:1b:cb:97:fe:
d9:f2:68:0d:21:00:5d:49:e6:18:a4:a9:04:16:17:89:b1:46:
52:5e:a5:54:70:38:37:0d:43:77:2d:13:65:c4:a7:f5:ff:b9:
9a:9f:3b:8d:b0:0e:36:e6:3a:24:7e:1d:e9:1e:7b:b6:7b:5a:
a4:0c:6d:fa:3f:ae:17:63:8a:4a:02:db:cc:56:db:56:69:ad:
b8:2b:db:ac:09:13:20:0c:00:01:0f:a3:76:9f:a7:0d:8c:4c:
7e:8d:92:03:9d:bd:c7:52:84:96:3b:94:eb:93:9e:aa:37:b4:
10:6d:a9:8b:2e:a6:57:e9:15:6f:71:58:80:51:fa:7f:01:a5:
75:13:a3:c6:95:72:6a:93:db:99:f7:5e:ab:a2:0e:3c:78:3d:
57:d3:e1:44:49:9c:f8:13:40:63:e4:b4:af:b8:22:4e:13:5a:
67:fd:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:33 2026 by rpki-client