Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: oWyXihfKXStOPTR0TiXjxFVXFWjCzn4ILlbVozNYH1g=
Subject key identifier: FF:9F:4C:0E:51:CF:3B:6D:AA:88:D6:D0:73:50:D1:4F:9E:19:94:B4
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019D26962F10DA45676688CBBE9CA3DF596A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 0419
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: siw+i5KVeePM6lFf23AHbkdW40GAI9XT50NNwKBdV2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2f:10:da:45:67:66:88:cb:be:9c:a3:df:59:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=ff9f4c0e51cf3b6daa88d6d07350d14f9e1994b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:4c:6b:f6:02:ba:44:f9:e3:04:64:48:75:
ab:56:87:33:9b:13:c5:a3:41:9b:dd:f5:1f:f7:19:
10:40:a9:78:f4:2b:5d:71:b0:10:24:f7:b4:65:50:
fa:b5:50:47:a0:ea:35:b3:40:c6:bb:b0:34:0b:05:
ff:2d:aa:97:9b:e2:7c:e9:4c:c8:67:e3:4e:0d:7c:
d4:35:ac:4d:89:18:3c:8b:6e:cd:3c:c0:d7:0b:28:
15:81:4e:07:b0:58:4b:09:6f:ce:75:a7:cb:3a:48:
49:3a:bb:2b:3b:5c:ec:ba:6d:89:57:0d:58:2b:d8:
21:22:37:d9:44:3c:63:83:2c:8d:1c:9f:70:83:29:
0f:48:7c:b7:47:2b:7e:f2:4e:f3:23:88:4b:d8:cd:
1c:6d:5f:80:e6:eb:40:ee:03:b8:4a:a2:61:87:45:
46:e9:ff:a2:27:4a:b9:46:c3:e6:a4:ce:d6:b4:bf:
9a:6e:15:70:aa:f1:70:81:06:21:38:da:e1:f0:bb:
a9:99:aa:12:51:9e:de:93:6d:a6:af:28:ed:ba:4f:
3d:d7:c2:e3:45:5f:98:44:7f:b7:ed:62:8b:33:f9:
81:1b:06:5c:85:77:83:ec:90:39:1f:3f:89:de:e5:
55:5c:68:ff:a2:4d:de:85:43:ad:a3:bb:da:a9:a6:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:4C:0E:51:CF:3B:6D:AA:88:D6:D0:73:50:D1:4F:9E:19:94:B4
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:9d:b4:ba:0a:b8:2b:6e:72:07:2b:a2:72:e2:10:c7:c6:
31:52:04:fe:b4:d1:d1:d4:30:b5:d8:74:73:9d:0a:51:72:e0:
c3:c8:43:8d:d7:dc:e8:3c:18:40:bd:96:5b:28:bb:1b:de:a5:
2f:12:c4:72:84:07:d5:55:d6:21:3c:c4:90:d7:a4:55:04:c7:
67:16:06:3d:4c:fa:50:d6:c0:0c:63:e2:f3:42:8b:53:8d:f7:
4b:ae:1f:8f:b0:aa:5e:4c:47:73:72:51:67:ea:c8:86:f0:04:
e1:24:a7:6d:8c:94:dc:54:94:25:f5:fb:8c:0b:12:73:bc:3c:
18:8c:9f:97:d2:b1:4f:b7:3f:5f:1a:ae:58:75:b0:7b:cb:47:
9a:6b:71:2f:75:81:5c:dc:f1:81:80:d0:47:10:a8:9a:ca:11:
5d:eb:51:6f:17:01:8d:0a:96:b4:28:fd:3d:79:52:aa:2f:9a:
87:d9:54:15:d8:a1:75:72:cf:e4:72:9a:e7:67:79:39:4b:0e:
d8:6a:6d:61:9e:11:08:d9:6e:2a:6d:36:a0:dd:71:93:32:c1:
b5:34:be:83:01:7e:ca:e0:70:f2:59:87:b1:de:f8:ae:aa:2c:
0c:c2:ac:6a:e2:ab:45:4e:b6:d9:ef:54:d9:25:7e:2e:9d:b4:
70:de:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:46 2026 by rpki-client