Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: szvXwIL6enKd4vfiKM3NJK4M0G9gWHAdcEKNdUJe4eU=
Subject key identifier: D0:F5:C4:AB:86:04:B3:FB:B1:A4:4D:FB:99:2D:C3:3B:8B:0E:9B:27
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019CA94599E51CAF7E9A1225C2767F46D747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 12:00:36 +0000
Manifest this update: Sun 01 Mar 2026 12:00:36 +0000
Manifest next update: Mon 02 Mar 2026 12:00:36 +0000
Files and hashes: 1: XzYex_ieQvekeO6Eu8AhysaHXCM.roa (hash: Uh2DSfJ3JPw4zmLr56LoU47sN4sjUalmk5csq0JOUMk=)
2: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: TQaInYTCZSaRV11DIbmkpGDhmxohymZ/BfCp3B1uHgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:99:e5:1c:af:7e:9a:12:25:c2:76:7f:46:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Mar 1 12:00:36 2026 GMT
Not After : Mar 2 12:00:36 2026 GMT
Subject: CN=d0f5c4ab8604b3fbb1a44dfb992dc33b8b0e9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:ae:be:a4:50:bb:37:4b:0e:9b:4d:0e:ab:
4f:35:75:f3:d6:05:76:b0:e9:2b:0e:b2:27:3d:af:
ea:e3:21:59:1a:20:11:7a:12:9e:9d:1a:f1:7e:98:
90:55:f4:47:40:ce:6d:51:0b:fa:e0:d8:3e:a7:92:
45:14:73:f2:5e:1f:f2:15:cb:0a:f9:a9:25:db:38:
d1:77:c9:ff:1b:41:ec:b0:11:b2:d5:81:a7:58:b0:
85:db:1f:96:5e:72:2d:82:6a:e7:59:a2:1d:14:e9:
6d:fb:5e:4c:5e:79:6b:a1:2a:32:d4:7b:4d:4b:13:
e9:5f:83:92:2c:eb:0e:18:58:62:38:e5:58:ba:80:
01:68:16:62:bb:da:ab:82:f9:df:87:9f:b3:71:9d:
a2:5a:d5:42:08:65:b2:92:1e:b9:7c:b9:47:a4:75:
16:a0:93:1b:ad:40:63:21:8b:b6:c0:b2:84:63:f8:
c5:4f:57:50:75:f2:c4:89:3d:08:3a:96:13:52:33:
da:98:68:ac:17:5a:a9:24:fd:f4:a6:a8:2c:a0:18:
d4:65:7c:da:50:46:bd:d0:d7:45:c6:24:e7:02:da:
cc:7e:f1:d7:81:b5:d8:76:a7:4f:ed:66:6b:50:e5:
60:d4:97:c9:04:35:4b:94:f1:08:0a:6e:3b:9b:8b:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:C4:AB:86:04:B3:FB:B1:A4:4D:FB:99:2D:C3:3B:8B:0E:9B:27
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:00:46:04:18:ca:89:97:99:53:97:99:72:db:ab:79:d0:c3:
2c:c4:f2:4a:91:58:53:5c:c9:17:37:85:24:ad:9b:94:c8:89:
71:a6:99:01:ed:27:8c:cc:6e:bf:1a:ac:d1:7d:35:52:62:e7:
9a:e6:b7:ec:29:ef:74:fa:b8:22:dc:d6:16:93:0b:8e:76:c7:
cd:31:70:4b:4e:0b:dc:1c:31:4b:9a:f2:82:f8:9b:36:b9:0b:
63:04:19:fc:68:88:cd:d2:04:92:eb:03:eb:2c:fd:d9:5b:ca:
c2:76:3c:85:82:a6:f8:56:87:61:9b:1a:e5:e1:0c:1d:ac:f8:
be:c2:11:9e:61:46:b7:ac:f9:03:ce:35:fd:1f:13:07:5b:18:
aa:54:f5:72:2f:be:67:7f:4c:39:41:7c:4a:e6:30:cb:b2:3a:
31:0e:5a:b5:63:6f:cc:cb:4b:a0:f9:eb:cf:8a:2a:d6:34:ca:
2a:57:38:c8:56:83:b3:cb:1a:75:5e:8b:11:f1:a4:e1:51:65:
10:f2:32:0a:cb:7f:df:14:70:81:fc:fd:3c:7f:7d:e9:22:cf:
eb:fe:dc:70:be:3b:9a:0a:39:74:89:35:65:9b:41:5f:d9:d5:
f9:30:6b:7a:63:56:38:bc:69:f6:65:a7:cf:2c:6e:60:3f:8e:
b0:2f:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:55 2026 by rpki-client