Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: p43rmFgU1m7rTMSSk1t9VqZ/2Gh+bGekJ5R7X2DPSmw=
Subject key identifier: B2:7D:03:C5:51:18:59:40:E0:8A:17:96:D2:1D:EB:19:F1:0E:0F:3C
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 019D2960D3B72930E6A9DB212CC257928C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: 02F9
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: lqOhx08xx7L+Zm1FSscTeQosm3I9ASWoPrzrl3yBI60=)
2: sh8M4KLHuLakVIud2TbaHMeCEjw.roa (hash: vWKdYFJEWQq1vzlyAwLNl/BBt4KHaNS4rv484R5g4EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d3:b7:29:30:e6:a9:db:21:2c:c2:57:92:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=b27d03c551185940e08a1796d21deb19f10e0f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:03:4b:9a:48:cd:7a:c4:28:24:52:51:e5:
0f:fb:9d:a4:58:ff:79:53:ea:01:91:40:14:12:1a:
6f:62:57:f8:9b:a1:17:6a:af:16:74:3a:de:41:54:
e2:6a:2f:02:6d:ff:7f:93:1d:c9:c8:8d:68:85:8e:
50:c8:75:df:06:66:92:86:9c:a0:b9:41:e1:39:98:
13:09:fd:08:b0:df:75:28:28:e7:24:71:38:78:4a:
20:3f:66:20:bb:61:50:12:4d:a2:25:21:d7:4f:59:
dd:ab:5b:91:0b:5a:2f:67:eb:b8:49:35:b0:a3:e1:
15:29:c5:90:3b:90:f5:5d:68:79:26:3e:34:6b:d4:
ab:3d:dc:79:13:d9:d5:0e:11:44:34:77:5f:31:92:
65:cc:0e:ca:c2:c6:2b:27:7e:71:10:37:27:15:71:
a0:10:36:c6:1e:ee:8a:96:d2:47:15:92:13:c8:bb:
8e:3c:21:56:ef:31:68:20:da:10:c0:92:86:61:31:
53:5f:e7:23:b3:fd:13:4d:ad:02:2c:eb:22:2f:e5:
6e:58:ce:85:68:c6:03:81:f6:6f:e0:3c:8c:78:d7:
f4:e0:60:1b:dd:c1:ab:ec:43:8a:e3:95:5c:b1:ab:
20:6e:20:3d:0c:c3:b4:0a:c8:0f:fc:6d:15:cd:dd:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:03:C5:51:18:59:40:E0:8A:17:96:D2:1D:EB:19:F1:0E:0F:3C
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:31:c5:f0:14:35:fe:f2:01:1f:36:df:b6:ec:4b:3b:82:
7e:28:d5:6d:e7:70:c6:c9:80:90:40:f3:c7:a1:aa:98:ff:93:
3b:b9:8c:a0:8d:f2:1a:90:25:1e:2a:8c:9a:fd:60:ea:f1:52:
3d:49:99:f1:96:9a:98:ae:f5:cc:c4:fa:e7:3b:c6:93:4d:d7:
36:81:ca:72:ec:36:36:5e:c0:1e:5c:2e:d9:af:a7:1e:3c:08:
8a:cf:6d:9b:31:b8:1b:63:9d:1d:5d:3e:85:8b:6a:c1:1d:c5:
76:db:c3:b5:7a:50:03:ba:24:fa:ef:3f:c2:78:31:82:44:9c:
95:df:b6:5c:f7:26:6a:51:0d:0c:09:ed:bb:fc:4b:07:47:53:
87:9c:10:ab:f1:b2:7c:1e:a0:9a:94:de:f5:4b:9c:22:70:5d:
41:c9:4b:23:01:79:cb:ae:21:f9:17:26:b8:62:4f:fc:26:11:
0e:fc:6b:9b:f6:0e:77:c0:7e:4c:63:06:7f:62:3e:27:f5:79:
e2:8d:19:eb:d5:29:fc:2d:07:b4:2e:08:3c:f9:a5:ad:48:c0:
f5:1a:8a:a5:72:16:18:5f:69:38:fd:70:0a:d5:06:ba:45:05:
8a:52:ef:34:6d:55:9f:af:48:fa:59:bd:b5:46:f3:a0:a5:66:
7d:4b:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:51 2026 by rpki-client