Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: JbsiNjfX5JUQiRB6rgQJFcaLz2z/s0PkMuP/DWR7lIs=
Subject key identifier: F4:4C:5D:4C:79:74:CE:A5:59:1C:1C:A8:83:91:B2:BB:CF:9E:1F:0A
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019D2960E36AC3739A6B99B345521944467A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0DFD
Signing time: Thu 26 Mar 2026 09:01:48 +0000
Manifest this update: Thu 26 Mar 2026 09:01:48 +0000
Manifest next update: Fri 27 Mar 2026 09:01:48 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: LJdWVTsp+pobbdbzNbgM9tY3O2iqBYXcP2jK/WV+syI=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e3:6a:c3:73:9a:6b:99:b3:45:52:19:44:46:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Mar 26 09:01:48 2026 GMT
Not After : Mar 27 09:01:48 2026 GMT
Subject: CN=f44c5d4c7974cea5591c1ca88391b2bbcf9e1f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:f4:ea:7c:71:d4:de:db:f7:99:c1:58:37:
a0:1d:56:f8:df:5c:31:1b:97:22:f0:ed:84:6f:4f:
72:ca:2c:b9:23:39:98:c5:1d:47:37:b7:e9:98:8e:
b0:b2:81:19:1c:38:a9:41:80:bc:0f:44:80:ae:72:
bf:ad:0e:86:30:bc:b5:2c:7c:4f:75:ef:28:90:57:
a2:3f:0f:d5:06:98:01:4a:73:9b:ad:33:de:21:09:
d6:d4:17:b5:86:bb:a7:ef:3d:34:ae:9f:b3:15:b3:
67:a7:af:c6:cd:6d:68:24:92:4b:cf:6a:4e:d6:cb:
af:5f:d9:6b:aa:b9:84:66:84:e5:e1:24:fb:a8:ec:
11:4a:6d:6d:75:80:2a:6d:bb:bf:45:97:b1:48:91:
14:0b:34:9b:94:68:9a:f3:ab:d1:c0:0a:ba:16:ad:
58:ca:24:7e:7e:d0:51:3d:ef:f1:da:4d:db:4f:46:
e9:3c:75:21:6e:ec:15:73:f6:8b:e8:bd:42:f2:cf:
a9:48:54:b4:38:e5:e6:2e:41:c8:89:a7:5b:b7:fa:
27:89:d7:64:94:8f:e5:0b:01:8f:30:60:df:4d:af:
a9:03:b0:c8:93:b0:f4:02:40:be:2e:de:4e:bf:0b:
21:f4:6b:4b:eb:4e:43:f6:38:f6:72:c8:96:7b:a4:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:5D:4C:79:74:CE:A5:59:1C:1C:A8:83:91:B2:BB:CF:9E:1F:0A
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:44:8b:9d:ea:05:50:39:fe:30:2e:09:c1:46:ea:63:a7:f0:
f0:ca:d1:36:78:f7:34:cb:87:bf:fe:84:95:87:ca:1b:ca:3c:
bc:1b:4c:a0:63:20:b8:1e:73:2d:d9:89:63:1c:46:e1:fb:c7:
ff:e3:de:8b:5d:3f:f2:19:19:bb:19:5c:01:97:a5:0f:93:65:
2a:cf:59:eb:90:a9:0d:6c:b2:4a:1d:91:5e:81:cf:c4:7f:fe:
81:24:9f:0b:76:ad:f8:47:3d:48:e1:34:a1:70:5b:0c:69:77:
bb:65:e4:a6:04:e8:df:0d:1f:ae:3b:f2:03:ee:bd:69:5c:54:
7e:0d:36:d8:cc:27:ef:c0:5f:23:be:93:b5:7a:b3:f7:ba:82:
d5:e5:2a:22:0c:7a:d5:76:4d:ea:00:95:23:0d:32:bb:25:5e:
7b:d9:f4:65:49:14:8d:2e:0a:78:8f:3e:55:7e:56:fa:da:8d:
78:02:88:cc:b7:36:7f:9e:be:e5:42:1b:db:c5:99:0b:12:c8:
4b:93:82:7f:9f:98:a3:a3:59:ce:f5:77:f8:d4:b1:89:4c:6e:
f9:33:6a:97:52:34:a5:f0:e9:98:ae:44:ef:92:ba:de:99:54:
58:0e:56:3b:1f:06:0d:21:79:a1:27:df:2c:fa:c1:87:75:2c:
fe:f5:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:21 2026 by rpki-client