Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: RQBa/BxPRjNGg2Hr2D1cQ7H/fhemQ1nDSJ6ZxuLS7Z4=
Subject key identifier: 1D:6A:06:57:68:ED:8D:E0:96:8A:18:9C:B5:D3:66:DB:C3:1C:DA:5E
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019D2703AB936F25CD610A81F198AFA380C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 02C4
Signing time: Wed 25 Mar 2026 22:00:45 +0000
Manifest this update: Wed 25 Mar 2026 22:00:45 +0000
Manifest next update: Thu 26 Mar 2026 22:00:45 +0000
Files and hashes: 1: KEev86svpAueO8veqiaCNQVfz30.roa (hash: RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: UA9cd93JQ5GbntGigBdZFGEZUxD+FXP8R9eZvYUwkZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:93:6f:25:cd:61:0a:81:f1:98:af:a3:80:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Mar 25 22:00:45 2026 GMT
Not After : Mar 26 22:00:45 2026 GMT
Subject: CN=1d6a065768ed8de0968a189cb5d366dbc31cda5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:9f:a2:9d:81:53:79:61:04:aa:0f:cd:f6:
eb:e5:42:49:57:6a:ec:12:24:7b:16:1e:5a:18:ad:
85:f0:14:67:bc:e3:85:7b:1b:d2:90:55:c0:57:7c:
e3:d5:0f:a7:6a:15:f5:63:77:31:9c:30:2e:d7:53:
c3:86:f5:d6:26:7e:b9:7b:0a:8a:56:5e:a2:45:20:
11:a7:f1:02:51:f3:8b:f8:ed:10:2d:d7:1a:0c:f3:
9b:86:72:f4:89:e6:f1:d9:f4:95:de:a1:b9:02:ec:
df:53:27:b8:9b:de:0b:0f:db:5d:48:1f:8d:e0:2f:
a4:9f:17:e5:3d:d6:38:a5:ee:9d:cb:25:ce:57:55:
34:83:96:03:a6:73:10:6f:db:2b:33:8f:a4:4e:55:
ac:46:2d:d5:f1:2b:15:3d:e6:d9:02:6d:46:4a:02:
45:76:8c:a4:7b:2b:a1:af:3c:ed:1c:ab:69:fb:c3:
38:58:db:0c:64:e0:4f:62:23:9d:b8:e9:01:04:16:
16:16:1a:dc:22:98:47:fc:87:f2:72:a4:f9:cc:86:
e8:7f:e4:7f:96:1d:79:80:5d:37:de:b8:4a:1d:8c:
e6:ff:31:d8:51:33:79:7d:a8:5a:31:ae:cd:6f:7b:
1b:11:6a:e2:9c:09:00:f8:51:10:82:8b:f6:33:7b:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:06:57:68:ED:8D:E0:96:8A:18:9C:B5:D3:66:DB:C3:1C:DA:5E
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:2a:a9:e1:b0:3a:21:d2:d8:95:e2:ca:dc:c2:71:c0:00:
18:d6:fa:68:09:90:bd:51:33:f5:39:29:d4:31:8b:a8:e7:ed:
a2:bb:a2:d0:ac:8c:5c:f5:d1:51:0e:3b:12:d6:1b:21:16:ca:
0b:04:d1:a3:6b:29:29:dc:2f:ae:db:22:1c:ce:16:e1:8b:f6:
27:78:66:53:19:50:ea:8e:af:18:d0:61:8c:d2:a4:90:c2:03:
c5:3c:19:03:f9:78:f5:5c:c4:26:33:32:85:68:b1:39:3d:62:
cd:26:7f:b6:0a:c0:a4:2a:cc:d6:c3:93:3e:81:c7:19:5a:e4:
fc:e0:71:3f:7a:9a:af:e6:53:4b:0f:a5:17:7b:fd:08:60:11:
ab:32:f9:a5:12:a8:45:78:bd:79:be:ad:53:b9:8a:d2:62:de:
7e:fc:ba:9e:4a:5b:54:87:bb:42:86:6e:b4:4f:7b:5b:dd:12:
0f:30:40:f3:44:01:dd:b6:00:9e:ad:35:ee:60:95:fd:62:2d:
cc:e7:65:01:fb:ec:8a:eb:d6:8f:7c:31:77:dd:60:98:df:ea:
f1:b0:f6:cc:6b:8b:23:12:ca:14:f9:c7:e9:c9:68:df:f7:e4:
23:72:aa:88:d7:cd:c2:bb:79:82:c6:16:d8:b9:77:2a:90:e3:
cc:c7:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:27 2026 by rpki-client