Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: c7MHw8tRFAcn38JGqw9hxQzSvSt8mhqHpwKvvu/E75Q=
Subject key identifier: B2:1F:B6:04:FE:3F:69:BD:44:69:54:6F:D3:FA:35:A5:18:58:2F:AB
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019D273AEA762B25EA1AB05AFF022A92759B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0AA7
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: DEhu+lQlWyN7kZXZZ9+owcxEwGhUfCEoTbxEYQQthIY=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ea:76:2b:25:ea:1a:b0:5a:ff:02:2a:92:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=b21fb604fe3f69bd4469546fd3fa35a518582fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:e3:41:65:a9:f8:28:84:88:f2:e8:8a:f9:
24:c6:7b:db:6d:1f:a2:e5:a7:6f:fd:c4:e8:7f:1d:
91:3e:3b:ab:a8:6b:9c:d8:87:be:99:bc:c2:f6:3b:
af:40:9b:0b:33:d5:67:00:cb:bc:85:58:76:2a:96:
de:1e:ab:4a:b7:7e:78:b4:39:bb:73:7d:f7:66:10:
07:33:da:0b:d7:48:db:ad:92:b0:6d:73:80:a0:e4:
c2:40:e3:e6:a9:8f:0e:2c:99:ec:a8:fb:b9:c8:1a:
7b:eb:4c:da:d7:c4:78:d7:f3:06:6c:cd:84:62:2f:
8e:77:d7:9d:e9:7f:ce:5b:43:c3:a4:bf:d5:de:d8:
f0:b7:e3:7e:65:b0:b1:f9:a1:27:d3:34:1a:80:25:
2b:b7:18:10:d0:ce:9e:bf:68:63:5b:4a:34:d4:53:
17:a1:34:c2:c9:2b:17:34:f2:c4:54:d2:1b:d8:57:
99:85:35:01:31:c5:05:30:bc:3a:89:a1:e9:bf:e0:
75:35:cb:19:e2:df:e6:eb:c6:dd:9b:42:60:01:6f:
36:1b:26:6c:81:7b:2e:43:7b:c7:a9:0c:6c:36:89:
0f:20:06:db:9f:6f:1d:d2:47:fe:e2:a6:6c:81:8e:
00:1e:21:3a:5f:30:97:01:94:72:1e:1d:b7:9b:62:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:B6:04:FE:3F:69:BD:44:69:54:6F:D3:FA:35:A5:18:58:2F:AB
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:1c:b8:3e:fe:6e:da:99:fe:2a:be:3c:98:a0:64:f0:4d:
d7:3e:9c:2a:50:4b:74:53:bc:de:ea:b2:09:68:85:ae:ef:50:
55:19:d1:6c:43:13:f0:ce:a4:72:21:61:f3:38:fb:a4:d6:99:
94:be:cf:f5:e0:86:a7:56:b9:5a:be:76:79:da:16:df:0b:3b:
0c:69:5d:1a:d8:a7:c2:24:61:e3:99:0b:ef:77:eb:4c:f0:b0:
94:00:1d:17:b6:39:ce:da:2f:59:52:f2:0b:de:bb:9c:f7:d7:
87:d3:2a:f2:b5:20:fa:e4:c0:6e:4e:ad:3d:6f:2c:6f:eb:ba:
1b:51:ab:23:c1:e1:3e:93:7a:29:6f:87:9a:d3:75:5a:b4:d5:
78:fa:d1:d1:9c:00:f0:31:d1:2e:1a:4c:cb:cb:82:4c:29:82:
07:57:54:86:70:01:41:d6:72:d6:06:4a:4a:41:2d:b4:8f:3f:
8d:65:df:86:d5:38:c1:0d:4f:ba:2d:42:69:53:c8:34:3d:13:
53:5c:5b:50:dc:f5:77:a7:a0:7d:b9:91:f2:45:9a:b7:42:db:
05:d4:ab:d1:78:6d:2b:2b:fd:95:e4:67:ac:39:d8:2b:61:71:
f1:57:72:81:26:1d:c3:74:f2:c3:7b:fc:d8:e1:30:37:c6:1c:
41:7f:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:24 2026 by rpki-client