Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: kP+KReGxl+HDE+2PSNSSwcOXj7n3V/VuR4BseHp5mQ4=
Subject key identifier: 46:A7:4C:11:5C:6D:0E:0C:B4:89:4D:6C:73:77:6E:A6:EB:A3:66:30
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 019D25F1675D48947E493E2DD61818A556B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0C97
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 17:01:10 +0000
Manifest next update: Thu 26 Mar 2026 17:01:10 +0000
Files and hashes: 1: 4kjooCn4utyvNqQOgFxK7-kKLu0.roa (hash: UOUVc0j6e6Ip7AZ/AsFrmNnJ9pEwnrKNZc+DelE5OzU=)
2: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: sAi7y/NMuJfpqahaS7+tQ0LNzkkqzjN15swd1nwUW20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:67:5d:48:94:7e:49:3e:2d:d6:18:18:a5:56:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: Mar 25 17:01:10 2026 GMT
Not After : Mar 26 17:01:10 2026 GMT
Subject: CN=46a74c115c6d0e0cb4894d6c73776ea6eba36630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:89:fd:9c:c5:e3:79:a0:3e:34:f8:b7:74:
dc:74:d2:83:24:1e:e3:51:34:a0:26:d4:ca:99:5b:
66:25:1d:86:93:7a:70:a5:91:e6:cd:b3:0c:ba:b7:
31:65:a8:de:74:d0:26:b9:58:be:5c:b1:b9:6f:23:
6a:71:0c:f5:49:c1:f7:72:88:5f:7c:e9:d8:5a:32:
78:e0:e9:85:a6:e6:e9:b6:db:95:43:25:8d:4f:c0:
45:50:e0:b1:02:05:ec:09:f1:4e:09:30:01:c2:a4:
b0:33:37:a5:4f:f0:13:4c:e3:95:a0:0b:51:bb:29:
b7:af:61:9e:26:ad:a9:01:a8:9c:23:9b:69:07:0f:
a7:3e:e4:c9:02:80:eb:b2:da:c8:0a:c4:7e:30:04:
f2:28:ef:94:cf:5c:94:01:11:aa:08:68:15:63:91:
b5:c1:d8:67:ac:39:ec:c7:d9:1e:78:53:35:fc:11:
88:3a:f3:05:77:b3:29:68:67:bb:17:ab:99:b9:d9:
ed:b8:88:ff:21:d6:69:c1:cb:a2:25:23:e8:db:6d:
7a:f7:78:17:c7:a0:f6:0a:53:9f:bd:62:3f:14:3a:
80:ef:25:84:8a:32:21:4d:3e:23:bd:86:21:e3:3f:
33:83:ca:59:81:b6:05:64:e5:7d:e6:cc:35:ce:1c:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:4C:11:5C:6D:0E:0C:B4:89:4D:6C:73:77:6E:A6:EB:A3:66:30
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:a9:14:df:1d:ce:86:19:57:d7:1f:46:de:dc:7f:d6:1e:
5b:0b:63:f1:cd:01:8c:be:73:98:bf:4b:44:7c:fa:4b:a5:db:
f8:5a:d9:31:42:4f:4e:0d:6d:03:3e:a0:cb:69:84:95:8d:55:
1f:8a:6d:7f:55:1c:b0:30:f2:ba:d0:2f:d4:69:1f:4a:fe:6c:
fc:af:cf:85:e1:29:c0:57:2f:1c:5e:df:2b:69:30:28:62:20:
fb:35:54:b6:80:20:7b:ec:9f:e5:af:ca:b4:f4:7b:3f:bb:43:
2f:a6:b5:55:6d:2e:69:26:d5:e9:87:4f:12:2c:ea:f7:96:2b:
9b:02:eb:0c:a8:99:83:50:1f:cf:d0:73:6b:1b:9b:e4:03:e9:
4f:d6:f6:88:99:cc:42:3c:35:ff:57:46:37:94:98:a6:6c:37:
92:e0:42:e5:83:4e:b5:e4:c2:15:65:4a:08:aa:ff:13:c5:29:
06:42:7a:46:7d:f2:1b:a8:5d:1a:f5:37:62:4f:ba:d3:5b:5f:
59:34:13:ab:65:70:76:ae:2b:67:8e:e3:ff:11:a5:76:c2:30:
17:7d:71:12:a5:58:2a:c6:b8:81:df:6b:08:00:95:af:18:d7:
17:5c:b2:25:fd:17:28:24:50:94:39:24:fb:51:e6:a3:2f:bb:
7c:cc:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:15 2026 by rpki-client