Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
File: aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft (raw, json)
Hash identifier: NCr7H2vXOsS1otOLtZImfeeYebnsw/TdHMaFUDTlKlI=
Subject key identifier: 8C:03:60:3D:70:5F:93:47:AC:4A:98:BB:32:8A:CA:53:59:21:10:EA
Authority key identifier: 69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
Certificate issuer: /CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Certificate serial: 019D2C6091A87497C2E71A4F3E3D7A8B98F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
Manifest number: 75
Signing time: Thu 26 Mar 2026 23:00:19 +0000
Manifest this update: Thu 26 Mar 2026 23:00:19 +0000
Manifest next update: Fri 27 Mar 2026 23:00:19 +0000
Files and hashes: 1: aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl (hash: pF/VwdmUo4m32w/QPCvn1Rz6FpdIhAAvc9ltm1u5lFY=)
2: iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa (hash: A/Iygha2SGjwHmAbZm3zd/UIf3Y/PB7zRPxZUCvbMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:91:a8:74:97:c2:e7:1a:4f:3e:3d:7a:8b:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Validity
Not Before: Mar 26 23:00:19 2026 GMT
Not After : Mar 27 23:00:19 2026 GMT
Subject: CN=8c03603d705f9347ac4a98bb328aca53592110ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:3c:05:c9:11:56:10:0a:f3:bc:47:03:1d:
01:71:e0:92:f0:7e:65:b8:a5:2c:7a:a7:a3:67:f7:
fa:1c:6f:87:ad:99:7f:8e:17:1b:76:e7:4b:5f:8d:
60:d6:ad:bb:3e:47:e9:02:77:b5:e2:9d:5e:6a:cc:
31:9d:f1:3f:91:5d:61:b8:8a:f9:3d:e3:d1:60:98:
9f:32:6a:f2:6c:ff:66:a2:44:cb:3f:0b:d5:ba:da:
fc:9a:e4:be:a6:56:e3:47:f1:39:8c:c8:2b:a7:53:
23:09:84:f1:bc:19:cf:24:81:4f:da:fa:0d:2b:2c:
d3:97:a8:f0:29:9d:db:ab:80:d2:d0:8e:f3:3d:c4:
41:6f:de:b2:a5:94:55:cb:b4:8b:a4:82:2d:eb:c7:
26:ae:42:96:58:a7:2a:52:95:22:99:3d:f3:0d:b0:
fa:7f:4a:a0:55:d8:3f:00:03:49:42:ac:a2:16:36:
25:26:11:8b:0e:77:b0:15:1e:b4:b8:4b:2e:62:18:
6b:43:c9:31:d4:97:96:c7:fd:3c:39:fa:8b:f8:b0:
6d:0e:a9:95:ec:ba:90:38:9f:d7:fa:d0:63:71:f3:
02:bf:59:02:f5:2d:5a:36:3d:bb:e7:1a:2d:e2:82:
8d:ae:64:11:bb:9e:8c:f8:49:f6:0d:16:d2:87:de:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:60:3D:70:5F:93:47:AC:4A:98:BB:32:8A:CA:53:59:21:10:EA
X509v3 Authority Key Identifier:
keyid:69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e0:9d:e7:4a:92:68:25:82:3a:e7:2c:2d:eb:6f:34:a2:3a:
39:eb:d7:c3:18:01:d3:ad:2e:3c:69:28:39:c9:56:67:05:48:
88:3f:ad:12:b0:b6:3a:ef:96:52:ea:67:07:ca:76:9e:ec:e7:
d3:de:12:a8:89:ef:c6:4b:19:0a:f4:98:0a:89:9b:ba:eb:75:
b8:d6:b2:d5:1d:ea:86:52:bc:b7:e5:e2:9c:5d:45:6d:e7:4e:
7e:27:1b:db:ea:13:7c:b1:25:b4:1d:d3:c3:e1:f7:02:d3:9a:
3e:61:01:b1:36:b1:df:0c:ec:23:35:72:f2:77:59:ae:f9:14:
75:8b:04:1b:16:95:a3:47:c4:2b:20:c9:7e:a7:50:a7:a0:82:
73:1f:b5:ea:1f:6e:70:e0:72:e3:13:a2:28:1f:f8:74:e5:e5:
4a:ec:2b:29:89:6e:e5:93:b6:46:aa:ba:38:6a:43:11:f6:15:
15:b3:6e:ec:7c:ad:9f:f2:0c:e8:7e:74:58:c4:8b:f3:1b:ef:
ff:09:19:c3:bd:7a:ac:03:6c:bd:14:42:83:76:db:7c:ed:17:
52:86:1b:25:be:19:24:32:b6:b0:38:65:8f:86:a3:67:d3:35:
62:61:c6:4d:d8:c2:45:ad:60:c5:09:10:4e:16:5b:1e:25:54:
7a:ec:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:37:44 2026 by rpki-client