Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: OXLykf8p97RieUSzVvxpK6J9496iIe9ZOc9xEG5cYCc=
Subject key identifier: 42:61:2E:CC:29:F3:64:9E:64:0A:4A:78:96:F4:32:3C:F7:D6:1C:F6
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 019D265F761CDE887F19CC8CB8DA7F5AADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0FA3
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: 8XVZkZs9aTYgXhHak4NEd39uxJw.roa (hash: SCbWhvc5dAVlQf2Rm3aO7mw2DxqRyMlcWllDbPzS+Gk=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: I4dZ6oEzF2R3dBjZjNY5z9fo3Fh2wgXnH14tI1ji30g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:76:1c:de:88:7f:19:cc:8c:b8:da:7f:5a:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=42612ecc29f3649e640a4a7896f4323cf7d61cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:03:08:f1:39:87:2b:d6:1c:22:1d:49:ba:
f5:03:12:ef:32:2e:bb:8a:4b:77:d2:03:32:16:8b:
b6:d8:c3:97:eb:90:e8:ab:c0:b8:2c:43:c2:d2:37:
91:c4:e8:95:76:2e:a8:99:0a:1c:5e:17:82:37:8d:
4e:cf:89:3c:50:82:ca:c0:b6:22:31:d5:f8:fc:c3:
d3:aa:bc:bd:6f:6a:3c:0e:ae:55:4c:16:46:6b:8f:
1e:62:9b:de:71:49:11:65:e1:7d:96:fa:dc:b6:2c:
5d:4a:55:db:ae:e6:e0:32:fe:92:38:18:22:41:57:
94:78:eb:f6:89:40:ee:2e:14:a4:85:a3:89:a5:4c:
77:22:74:24:2a:3c:02:fe:9c:49:33:01:ea:8f:d0:
0f:b3:95:25:aa:cd:59:2f:42:18:dd:78:56:5e:62:
90:c4:bd:a2:fd:1c:14:de:4c:52:bf:9f:10:48:f0:
0b:fe:98:81:61:fa:b0:e2:00:5c:6e:a8:6b:7c:f2:
6c:fa:11:d0:25:d1:a9:f3:c6:b3:24:88:79:bf:a6:
63:54:0d:7a:b2:c7:e1:fd:b0:69:e5:04:7b:89:a5:
90:7e:5b:72:87:a5:bd:36:2a:25:a9:28:03:25:86:
3c:19:7c:fb:58:6e:a2:7b:37:4a:fe:05:7f:dc:65:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:2E:CC:29:F3:64:9E:64:0A:4A:78:96:F4:32:3C:F7:D6:1C:F6
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:09:1a:3d:1d:ff:4a:35:97:37:d1:63:a5:53:86:95:a6:
7c:b7:e4:c6:c3:a4:18:b6:70:9d:90:2c:83:49:97:43:42:59:
b2:bd:b3:37:7c:f8:07:82:cf:72:30:7e:f7:45:9d:56:fa:ce:
78:51:f2:c7:2a:ea:1b:45:e0:78:94:ec:a9:98:b5:21:63:05:
50:7b:99:84:07:8b:e3:30:7f:dc:5b:05:f4:13:8b:98:b3:bf:
04:8b:90:ed:48:80:3b:b1:eb:ff:1e:38:c8:a2:a2:b4:c5:ee:
01:5c:e5:61:da:a3:98:45:d9:75:c5:c0:97:05:98:85:21:20:
5f:db:77:15:78:ae:44:07:8b:8d:59:0b:8f:73:58:d2:90:2b:
cf:69:f2:cd:40:7e:26:42:80:d7:f8:55:81:43:f7:21:34:ae:
77:ee:d0:70:8b:8a:3f:fa:6e:aa:dd:fa:93:5c:b5:20:14:1b:
fe:0e:0e:d7:04:5a:ed:52:8e:dc:1e:c8:b6:b6:3d:5a:47:b0:
c0:68:13:33:27:03:fe:d4:8d:4f:9c:d1:e6:a3:e9:67:37:11:
8d:a8:8d:39:ff:40:2c:23:1f:f9:86:48:3a:f0:c3:2d:de:90:
c6:f8:b8:c2:ad:a2:0a:a8:42:e2:93:47:35:9f:cd:95:be:17:
9a:79:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:31 2026 by rpki-client