Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: OYftHt68oyXz9TRbV+Vt43wns9xaWyY6QKFnE2ZxU7w=
Subject key identifier: 3B:7E:87:5D:40:84:B9:F7:D1:1C:2B:B4:F3:D6:EC:58:F9:3F:9F:A6
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019D28F2CF9B5CCAA68AEAEEB609E6440339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 09E5
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 4Cgf/RqfkUbkcIRyrvp8z0PI4vsxHBlB+feXp9CnCSM=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cf:9b:5c:ca:a6:8a:ea:ee:b6:09:e6:44:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=3b7e875d4084b9f7d11c2bb4f3d6ec58f93f9fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:e8:87:01:a8:13:37:82:71:2e:ba:cf:5f:
7b:b6:1f:fe:d4:60:97:b6:a8:91:fb:86:bb:1e:25:
78:a0:09:2f:50:36:2e:fd:29:dd:f2:73:10:c5:f6:
83:3f:3d:8d:27:57:83:e7:f3:b6:15:e3:e3:ed:c5:
5e:5f:46:b9:4a:29:cb:0c:a9:bc:4c:de:9f:1c:d6:
a5:25:5d:33:b8:f8:74:1d:fb:88:cb:6e:06:86:a6:
43:59:f4:7a:5d:0c:6d:d3:ad:f6:71:c6:98:89:ab:
b8:95:03:02:fc:1a:44:40:71:3c:ae:7e:04:ee:ea:
31:9e:fd:6a:25:7e:6f:70:78:2a:c3:f4:e2:f6:9d:
c8:ff:19:5b:75:fd:8f:d9:bc:28:2f:f1:e0:19:48:
f9:85:5f:b6:90:19:4b:a5:55:be:12:24:3e:1c:8d:
2d:dc:d9:fd:06:3e:2e:89:f4:9c:3f:03:ce:b7:c8:
15:c5:62:c9:43:ee:cc:a3:70:de:4a:b6:00:48:a4:
16:35:2a:20:9c:76:1e:36:d1:25:19:69:13:ed:04:
2f:e9:a9:47:30:c8:27:46:b1:d8:75:65:79:2e:65:
80:4e:98:c7:be:bb:0a:02:46:85:88:b7:bf:c8:06:
76:6e:2a:a2:85:77:fc:cc:1c:16:fd:91:01:05:46:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:87:5D:40:84:B9:F7:D1:1C:2B:B4:F3:D6:EC:58:F9:3F:9F:A6
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:07:24:06:e2:4a:71:88:2e:1b:54:47:15:5f:69:53:0a:d9:
9b:59:4f:99:9a:07:72:51:a8:95:9b:75:78:d1:b8:c9:00:1c:
46:2f:a8:dd:d2:97:58:e6:60:a3:46:cc:24:f1:8b:bf:6c:01:
fb:d0:ec:ec:df:31:7f:5b:5f:90:33:0a:2f:71:38:af:1d:6a:
d9:78:88:d2:b6:81:32:b5:e2:12:f9:9a:2d:ca:07:9f:ee:97:
0a:64:47:3b:7c:fe:c0:14:5d:27:71:bc:b7:ba:58:3a:07:31:
38:2d:1b:8a:dd:ab:2d:cf:2c:39:eb:5c:0c:f6:b6:8c:66:19:
d2:30:30:31:95:b0:1a:6c:60:56:16:4b:03:e1:1a:16:ff:45:
5e:f3:c2:a0:98:86:02:16:53:06:61:b2:68:49:14:8f:6e:61:
84:8e:23:89:15:57:e3:54:68:a2:5c:84:86:d6:21:4b:bb:f2:
8e:68:f3:27:39:d2:f2:fa:78:0e:22:11:73:18:eb:fe:44:05:
2d:4e:f6:5b:13:13:91:2a:a0:26:dc:d9:b0:a8:df:2d:52:db:
e4:6a:c6:63:e5:7b:22:33:12:bb:c8:68:46:88:a7:75:33:1f:
08:21:12:b5:fb:c9:29:d3:ac:2c:22:9f:52:ad:08:70:21:33:
a7:6f:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:49 2026 by rpki-client