Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: BevK9JGlmMZOZpluUXG9sQGRX0KGHjvca0KUHWiFaQo=
Subject key identifier: 06:B4:32:2C:29:E7:94:AB:36:DE:BF:36:DD:79:D9:57:B4:E9:58:9B
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 019D2A04BEFEE98EA415A4C8B17CFF3BD891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 12:00:47 +0000
Manifest this update: Thu 26 Mar 2026 12:00:47 +0000
Manifest next update: Fri 27 Mar 2026 12:00:47 +0000
Files and hashes: 1: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: Vy9Q5pU6f3QWe+kaaLlX93ICi6RZqHnot4s41NjgwUU=)
2: cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa (hash: tIaWypa+2w3+EhClID+rbKASz6IrpIfwCtlLXu1+XIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:be:fe:e9:8e:a4:15:a4:c8:b1:7c:ff:3b:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Mar 26 12:00:47 2026 GMT
Not After : Mar 27 12:00:47 2026 GMT
Subject: CN=06b4322c29e794ab36debf36dd79d957b4e9589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:69:fb:48:79:96:ab:47:12:bc:81:6b:e5:
93:03:61:52:d3:5f:6a:55:a1:37:af:a9:18:e8:5d:
e4:ee:fe:a9:37:90:ac:7d:90:a4:a5:e8:62:04:4e:
08:15:f4:67:12:63:96:53:c3:14:f6:d5:f4:bd:05:
70:a5:61:ea:9f:ad:49:f8:0a:63:71:e0:69:ef:2e:
76:34:24:59:74:a6:b9:c5:05:41:35:3c:57:bf:79:
fb:bf:95:55:fb:04:25:4c:57:99:98:07:63:b7:5d:
2d:f8:a8:26:6a:3f:59:b5:81:17:30:c0:b9:42:18:
07:83:57:ba:eb:2c:c7:09:0e:d1:06:e5:ae:cc:79:
d8:8b:19:b2:a0:09:70:55:fc:cc:5d:59:24:df:3c:
e8:39:0c:e1:1c:ed:10:f3:38:3e:9e:cb:64:87:22:
d0:be:e4:cf:99:73:ac:9f:c9:9e:c2:a1:68:5b:18:
9b:cd:34:5b:36:27:c4:02:49:c4:83:47:4b:10:d6:
87:9b:fd:fb:8f:d9:9e:fb:47:11:ea:86:26:2a:16:
02:a5:2e:da:31:32:d5:8b:53:c9:1c:e8:3f:77:7b:
da:9b:f7:06:e6:aa:9f:44:36:9f:4c:0c:d8:4c:6e:
7e:08:3d:e8:07:0b:b3:79:e7:49:2b:80:f3:7f:e8:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:32:2C:29:E7:94:AB:36:DE:BF:36:DD:79:D9:57:B4:E9:58:9B
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bc:29:3a:9b:f9:cf:95:3a:22:e2:a4:85:65:f3:ad:95:96:
b4:25:41:e6:5d:79:b5:ac:c6:53:0d:80:13:30:e3:2f:a3:07:
02:54:01:07:84:96:dd:dd:12:b7:fc:17:6c:e6:f3:e4:a1:7e:
4b:80:a1:e5:2c:df:c9:2c:22:3d:a8:16:79:e0:de:3d:8c:e7:
d0:4b:12:d4:4c:8d:d5:43:a4:bc:87:16:ac:da:08:8b:1a:25:
eb:2a:5e:7f:c2:7e:fb:83:8c:c8:fd:2d:f8:37:9e:da:59:2c:
7d:8d:44:c6:1b:1d:66:c5:96:af:78:8d:fc:c6:6c:12:0e:21:
05:71:85:54:ca:5e:49:c6:8c:f4:bd:e1:a3:c0:b5:01:73:90:
69:03:51:b3:0d:a3:81:28:50:81:a3:5b:e7:59:6f:eb:8b:2c:
67:08:2c:51:fc:cb:dc:08:8c:74:86:85:6b:23:e2:1f:c4:bd:
97:bf:ea:63:b8:37:9d:ff:16:47:6f:0f:f2:63:b3:12:ce:12:
70:8e:b5:2c:19:0e:6a:4a:81:19:fd:8e:30:a6:d9:30:fc:30:
a7:48:c7:2d:76:80:f0:64:ef:58:7f:7c:b9:ea:62:ff:be:fe:
2b:58:53:ed:3d:90:f8:21:61:ca:29:56:3e:f8:68:71:aa:69:
5d:37:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:48 2026 by rpki-client