Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: 4YhyPJw+zXyYuxedN8Jxmd3gUF4PbsP3L72QF+tAPEs=
Subject key identifier: 64:79:07:1E:C0:60:0C:C0:3B:90:2E:90:89:53:1D:09:59:1D:E8:C0
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019D27724AD5A8E289BCD8192453A912EB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 07B2
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: zupYSVhgWLYh8oqIobupRZl0ijkuBUPjSAIAKAMBGOM=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4a:d5:a8:e2:89:bc:d8:19:24:53:a9:12:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=6479071ec0600cc03b902e9089531d09591de8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:2e:0b:60:c0:19:7c:cb:2d:0e:d7:ce:b7:
e5:f7:2d:41:08:3b:d1:cf:b6:4b:9d:62:ef:25:7c:
5f:6e:d0:c4:54:e8:c7:d7:b2:3c:d1:ac:3b:f7:2d:
57:9d:1b:4f:90:ed:8d:10:ca:bc:ee:28:bc:fc:af:
7e:90:f7:09:50:ca:82:c4:e8:af:cf:08:32:e0:e9:
21:1c:6d:40:6e:b4:06:93:3b:70:38:96:33:af:4b:
0b:a6:15:0e:f3:8b:d5:f6:b3:3f:5b:ce:bb:64:09:
c0:6a:7a:ab:ac:35:16:11:75:56:64:f0:17:07:9e:
88:f0:64:9e:64:de:55:2d:22:aa:63:59:12:19:42:
4d:06:95:3c:64:5b:97:fa:42:ee:11:99:6f:dd:02:
94:3f:da:e2:6f:bb:93:74:b5:aa:54:08:42:fd:e4:
dd:86:4e:4b:38:ad:31:ef:3e:56:69:67:48:40:9b:
28:8b:80:ad:ba:c0:74:70:24:20:da:13:94:0d:60:
cd:d9:14:49:da:a5:bd:0d:11:2f:e4:92:dd:a1:e4:
7a:ad:e3:8f:72:91:0d:f2:00:2d:ec:f6:ea:77:40:
fc:bb:12:8c:18:0a:f1:8d:99:61:51:1f:0b:14:44:
7c:f0:92:f3:10:e5:21:2c:99:50:85:84:3c:33:58:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:79:07:1E:C0:60:0C:C0:3B:90:2E:90:89:53:1D:09:59:1D:E8:C0
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:eb:8c:c3:d9:41:4a:a2:09:e5:60:dd:66:03:49:f0:fc:
a8:7a:0c:70:b8:17:b5:21:e5:b3:44:3c:d8:57:10:93:80:db:
3f:11:bf:6c:63:c2:e3:eb:68:53:b9:e8:54:fe:33:2f:0a:41:
dd:2e:9d:5d:38:82:9f:88:12:84:09:b3:82:e7:21:e8:00:38:
49:0a:e3:3f:17:9c:7e:0c:fc:76:2b:2e:3f:fc:83:fb:e5:ee:
cd:fa:83:94:9a:b4:9d:87:5c:f8:0b:cb:82:00:c1:ab:e6:8c:
3f:53:5e:07:38:e3:f6:72:b6:05:73:74:0e:44:12:42:a9:2c:
ad:29:9a:6f:86:31:59:6d:c8:9e:7c:4f:e8:c1:6e:d8:9a:96:
7d:4d:92:0e:cb:8e:6c:97:42:f9:81:da:a3:9c:97:30:e9:83:
88:fb:10:a4:1c:be:d7:ac:91:60:3a:60:2a:85:97:03:1f:47:
9b:f2:9d:de:b1:38:b5:26:87:62:e0:a9:82:47:29:61:45:0d:
67:07:93:a5:8c:64:8f:5b:33:75:7e:09:50:41:f1:ca:80:be:
df:e9:ad:97:10:20:80:93:82:37:03:00:2f:81:70:0f:04:17:
92:30:7d:06:08:b1:d5:b6:5e:18:db:b9:85:0d:13:a3:de:77:
5d:5c:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:45 2026 by rpki-client