Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.mft
File: aSCEteHc5qyErB1ynzjmLwkqpco.mft (raw, json)
Hash identifier: ZX/Fo3g3OBpYPRAgaM3Knt7rGCrLXVEOcp7A9RKmN2Q=
Subject key identifier: 2F:8D:0D:04:12:9A:E8:A7:FC:18:B0:30:6E:4D:26:86:1E:48:42:6E
Authority key identifier: 69:20:84:B5:E1:DC:E6:AC:84:AC:1D:72:9F:38:E6:2F:09:2A:A5:CA
Certificate issuer: /CN=692084b5e1dce6ac84ac1d729f38e62f092aa5ca
Certificate serial: 019D345180D777904ED32D24F1A70EB43FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSCEteHc5qyErB1ynzjmLwkqpco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.mft
Manifest number: 41
Signing time: Sat 28 Mar 2026 12:00:49 +0000
Manifest this update: Sat 28 Mar 2026 12:00:49 +0000
Manifest next update: Sun 29 Mar 2026 12:00:49 +0000
Files and hashes: 1: aSCEteHc5qyErB1ynzjmLwkqpco.crl (hash: t74JEEQQ9RHiAQAp07GiIt/I+REaxHt4o5cgBSBb0nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSCEteHc5qyErB1ynzjmLwkqpco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:80:d7:77:90:4e:d3:2d:24:f1:a7:0e:b4:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692084b5e1dce6ac84ac1d729f38e62f092aa5ca
Validity
Not Before: Mar 28 12:00:49 2026 GMT
Not After : Mar 29 12:00:49 2026 GMT
Subject: CN=2f8d0d04129ae8a7fc18b0306e4d26861e48426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:e8:e5:ab:40:88:c4:3e:da:e6:ff:c7:3d:
19:c0:34:55:2e:4c:3e:be:47:9f:37:2c:f0:2d:47:
25:2d:19:3a:7e:58:2f:c6:c6:20:0f:50:85:08:dd:
0a:b0:e9:dc:2d:6b:96:ed:83:20:43:5f:76:79:e6:
c4:43:51:9e:c8:a1:18:bc:81:d1:f9:98:59:38:a2:
84:8c:53:c4:5b:8d:3a:de:2e:44:b2:27:1b:97:06:
01:df:55:e6:71:9e:f3:4d:09:bb:fd:cc:8f:d5:dc:
37:88:fd:9a:f9:dc:fc:d5:63:a2:4e:6e:7f:d6:1c:
c5:2a:f0:92:19:7c:8b:cc:2a:58:87:ce:8b:8b:cc:
be:ad:ab:62:1d:ab:ea:73:59:27:75:47:90:95:c5:
af:09:81:b7:1b:9e:fa:43:e1:6f:83:f2:38:7f:34:
5f:ca:fd:5a:90:45:76:45:1e:0f:10:b8:34:b4:be:
40:5a:e4:e1:f3:aa:98:3d:95:ec:67:5b:e2:a4:2b:
0e:b2:d1:eb:12:3a:6b:4c:c2:dd:61:ae:d7:cd:5c:
a0:e4:fc:6f:1b:27:4a:e4:df:35:08:0c:5e:70:ac:
1a:6d:a5:93:a2:a0:b3:62:47:34:35:09:cd:b4:c7:
0e:8d:99:ae:6d:b6:58:d5:f8:20:4f:98:00:b5:fe:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:0D:04:12:9A:E8:A7:FC:18:B0:30:6E:4D:26:86:1E:48:42:6E
X509v3 Authority Key Identifier:
keyid:69:20:84:B5:E1:DC:E6:AC:84:AC:1D:72:9F:38:E6:2F:09:2A:A5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSCEteHc5qyErB1ynzjmLwkqpco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/72a66b-ad76-4cf2-a329-cff348944a8a/1/aSCEteHc5qyErB1ynzjmLwkqpco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:a3:e0:27:97:10:c1:8d:3e:fc:e2:0f:bd:2d:6c:cd:1a:
d9:dc:ba:dc:85:a5:af:f8:07:92:32:17:0d:2b:4d:04:ed:11:
3d:4d:bb:e1:db:6b:3e:1e:0c:93:06:22:10:51:91:cf:e7:42:
ab:50:79:4a:d1:65:36:21:b5:7d:ca:05:55:92:3a:46:e3:1e:
fc:8e:e4:b5:29:eb:de:5a:3d:2f:b6:af:85:54:9b:15:0c:15:
aa:f1:b1:59:31:cc:26:fb:3d:22:5c:e9:3e:8c:7e:e3:5d:ea:
c9:9d:5f:6c:8a:b1:95:fd:58:2a:19:f2:ea:d7:77:50:c8:6b:
9d:4a:7f:68:99:50:a7:4d:8d:79:2a:f0:a2:48:59:8d:e5:b8:
af:03:f4:3c:ee:2f:fa:62:60:54:f4:96:60:2b:c2:cf:e1:af:
7c:71:fd:44:22:ff:27:a2:81:dd:40:b6:0a:ad:6a:87:62:2c:
c2:a8:16:a4:1c:a3:2d:6c:55:90:5e:4d:aa:72:ed:d3:d3:3c:
e5:ac:8a:56:bb:ff:76:80:e0:0c:78:5e:cb:f5:a8:30:f7:65:
bf:13:47:d6:6b:60:f0:b8:c6:85:a9:75:ba:37:a6:30:2c:bd:
f7:7a:d1:6c:61:f7:05:47:de:2f:ab:c9:51:03:af:72:cc:98:
51:c4:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:12 2026 by rpki-client