Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: DWI0idIiqPYoC+1CIK3Ox503Z/cezDklm79FRF7+tFc=
Subject key identifier: 3D:B1:3A:66:B0:F3:67:0A:22:FC:17:52:C0:15:CE:0A:E3:8E:E2:3D
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019D2A3BB6659095939933E9714EB4C67179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 12EA
Signing time: Thu 26 Mar 2026 13:00:49 +0000
Manifest this update: Thu 26 Mar 2026 13:00:49 +0000
Manifest next update: Fri 27 Mar 2026 13:00:49 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: 2z4p4L5HkCTJhU2Z2k0420t7blG4NSQf6cPwe6cwPwU=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b6:65:90:95:93:99:33:e9:71:4e:b4:c6:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Mar 26 13:00:49 2026 GMT
Not After : Mar 27 13:00:49 2026 GMT
Subject: CN=3db13a66b0f3670a22fc1752c015ce0ae38ee23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:00:f0:6e:51:57:1e:46:a6:c1:26:f5:d8:
3b:a2:b6:ee:31:19:a0:24:85:5a:1f:59:1a:fa:be:
3a:f2:68:f2:1e:91:a2:dc:a8:50:b0:ba:5a:58:c2:
e8:60:0d:36:64:ed:eb:55:04:cd:74:89:f6:13:63:
d8:68:75:c0:43:b0:99:a8:81:78:43:a5:68:e5:45:
8a:e8:53:d4:24:5b:05:6b:ab:05:e3:5b:fb:e3:bb:
9a:b3:d1:75:74:a6:a6:de:d9:15:25:eb:f5:e4:39:
32:e8:6e:04:8e:79:b9:c5:a4:f8:43:55:a3:eb:64:
d5:bd:92:2f:3e:fb:03:be:b3:23:7c:5d:b0:8f:50:
01:16:6b:9a:0f:90:00:a6:f7:9a:7a:24:ba:2d:f9:
5b:ba:52:28:05:02:28:5e:40:62:1a:5f:75:33:a6:
83:34:f8:82:2e:f9:fd:39:9d:7a:22:8d:71:fa:62:
7d:c2:10:48:4d:1f:12:c3:6c:8e:ae:56:0f:e0:a9:
f2:1c:de:6e:b4:0b:bb:f6:b3:ae:ab:a9:98:35:36:
76:dc:43:33:de:1a:73:26:43:03:45:ab:b0:68:c5:
bf:68:c7:92:8a:05:4d:ac:03:66:cf:07:82:97:9d:
b0:e2:95:7c:12:fe:f8:fa:26:fc:63:4d:58:63:c8:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:3A:66:B0:F3:67:0A:22:FC:17:52:C0:15:CE:0A:E3:8E:E2:3D
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:13:ee:8b:3f:c8:2c:15:ed:ce:70:1d:1f:79:b1:74:8d:
7e:20:a0:fe:eb:73:79:f9:5c:a7:f7:d4:93:3d:5c:25:42:04:
d0:ec:ca:8a:c7:ee:1d:be:42:60:8d:11:fc:ae:bc:64:9a:47:
c9:e2:f7:05:8d:b2:20:81:5c:ab:1f:ec:2a:54:bc:29:36:69:
8f:10:55:db:9a:d9:57:19:98:5d:96:33:74:f3:5a:04:dc:c7:
ff:32:66:bb:11:71:a0:71:a3:eb:93:9a:98:5b:a5:67:a0:25:
22:bf:7b:e3:14:33:70:5f:11:b8:06:59:93:fc:ae:c4:f5:7a:
a7:13:7c:c2:97:08:d3:a7:0e:c5:8f:a0:0c:35:11:43:9d:a2:
71:78:10:ce:dc:c1:a5:db:7f:4f:40:9f:09:39:8b:73:a8:6c:
99:4c:26:2f:17:b3:d7:a4:74:72:3c:70:ec:ac:41:c4:48:1b:
ce:08:99:ea:f7:9e:3b:e2:c3:3d:01:b1:d6:47:37:b1:35:90:
c8:8b:1d:ad:7b:b5:7d:94:24:a1:e2:cb:60:40:67:31:37:4a:
35:f9:31:ba:45:6c:26:07:e6:36:a2:19:53:4d:66:39:4c:6e:
4a:f9:80:21:34:0c:8b:b5:58:4a:18:1d:13:a0:55:30:54:9c:
25:6b:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:53:31 2026 by rpki-client