Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: UmQdSi5o0UrtKLSKkF6bBsfa1D16wKmfBSHjkS4LbMM=
Subject key identifier: C3:96:6F:46:5E:B3:14:35:89:0D:61:9F:01:51:F2:DA:94:6C:BC:F5
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 019CAD225FECB6743C91CAD6277D6E136666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 167C
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: TzgqeW6rgWZAqUKm2v8BZO8DXGk.roa (hash: M6dwx1AXl/eH7+LUO9NVXM2ZImlSuaZZOmBRbMf7fbE=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: CNg1CLkdBm6soAby7ZN3JUPkjtHKBC5xtWZ+y7LG4SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5f:ec:b6:74:3c:91:ca:d6:27:7d:6e:13:66:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=c3966f465eb31435890d619f0151f2da946cbcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:b2:8e:24:00:d7:73:36:21:00:dc:80:a2:
ef:0e:9b:13:d9:85:cd:40:a0:63:5c:f9:32:66:cf:
da:60:d3:df:b1:41:48:39:fe:de:c9:92:eb:b0:f6:
2b:23:31:1c:92:42:ce:61:d8:9e:91:0b:3c:f4:6e:
09:60:d4:d1:fc:03:c2:35:86:3a:60:89:34:47:36:
ac:de:c9:dc:70:b7:95:f2:a0:71:55:d2:29:05:48:
f3:e2:62:4b:44:a0:fe:d0:74:82:ea:8d:93:37:ea:
5b:d4:ce:56:53:02:c7:12:5e:a1:c4:ce:37:fe:be:
8f:38:83:3a:d0:49:de:cc:20:a5:e0:7d:34:21:3a:
88:28:13:a9:63:a5:46:13:4c:46:62:ff:1d:9c:cb:
7a:8e:4b:65:71:ac:f7:1c:79:cd:ed:57:2a:82:8a:
ce:cb:80:18:81:0b:29:9a:8d:57:37:e4:34:9a:37:
87:71:f2:f9:c5:70:90:e7:b3:a2:29:96:e4:5b:53:
47:b2:2a:2a:68:d2:08:a2:8e:a6:60:cb:ff:6a:44:
b0:a3:60:ee:52:e7:fa:a9:bf:aa:1f:a3:18:cd:3c:
93:02:e9:af:48:5d:52:46:36:9c:0c:4d:ad:78:8c:
c3:63:86:ef:c6:d1:f1:05:37:22:5a:2a:8a:13:fe:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:6F:46:5E:B3:14:35:89:0D:61:9F:01:51:F2:DA:94:6C:BC:F5
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:4e:ff:ab:de:09:d1:ee:bf:06:f7:d5:00:1c:32:b1:6a:
58:cb:3e:94:bf:7b:d9:ec:d1:8a:1b:b6:1a:4a:f6:81:f9:d0:
a1:71:e7:4d:83:5c:2a:5b:90:bd:e9:e2:8f:1f:6d:86:97:7c:
00:10:b5:26:9d:3b:d8:27:e5:24:7e:10:a1:af:59:e3:29:b1:
4b:04:78:46:b7:f6:09:87:1a:3d:ee:4e:05:d0:bc:cb:d9:26:
2c:01:81:9e:ae:2e:3a:2e:68:4e:c9:74:e6:44:40:b9:2c:94:
92:68:11:8f:1a:a6:87:5b:7d:dd:1d:89:6f:19:a3:0b:ec:b3:
a4:39:ca:7f:2e:09:21:d0:c3:31:33:6e:00:2b:78:da:a6:1b:
0f:96:90:28:b1:ec:8f:51:08:06:8f:7b:8b:16:9b:f7:27:23:
a6:40:5f:76:f5:bf:88:d9:cb:50:01:26:ef:2d:25:86:88:26:
d0:6e:d6:75:0d:2b:4f:e2:dd:84:89:db:77:94:09:9a:0c:7a:
f0:47:76:3c:5d:76:4e:2a:de:37:e2:2b:ed:f6:34:d3:04:2b:
0f:5d:48:d6:30:f8:d8:e0:38:d7:1e:18:d9:05:94:0d:a2:c6:
6d:63:e6:78:f3:1d:f5:58:eb:6d:b3:b9:b0:85:6a:07:55:69:
5b:80:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:10 2026 by rpki-client