Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: O8s7LEP8NU5r4GRyaZmalEKGkfVzJgcDuC/jlWdHsVM=
Subject key identifier: 96:B2:1C:C3:14:8D:BD:11:EE:64:FA:24:F9:AA:05:65:BD:72:D6:44
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019D29295AA146F7CB2E4F3DF17691E6CC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 11C3
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: VbVkwUTm7z+HvoetaU2Knfiqs30g+Kmx16Y/q2XOeEg=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5a:a1:46:f7:cb:2e:4f:3d:f1:76:91:e6:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=96b21cc3148dbd11ee64fa24f9aa0565bd72d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:91:b2:84:bd:dd:d7:56:ab:6d:06:ff:ac:
6e:62:a5:10:fc:1d:ec:e5:cc:22:83:64:63:fd:fe:
a4:96:ab:1f:9b:53:bb:b5:b0:df:88:1d:d9:4e:36:
2d:f7:f2:e7:82:c5:84:c8:ba:fd:bc:a4:ab:9e:c8:
3f:c8:d6:33:9a:3c:d0:47:89:31:ec:cf:49:34:7d:
e8:9a:95:3a:b4:92:a8:89:0c:ad:85:b3:d5:78:5e:
38:88:39:fe:98:b1:0b:83:a6:96:b7:c6:be:14:f5:
90:ab:22:0d:74:6d:56:c6:97:99:50:51:2d:3f:c9:
aa:88:85:e3:b4:b1:1f:83:2c:af:56:98:1e:24:1f:
6b:52:4e:cc:b2:e1:32:fd:ab:12:8b:0a:16:d8:d0:
39:b6:77:e0:b1:ad:84:7e:f6:f5:cb:27:84:54:fe:
2f:20:27:d2:fc:8f:74:ca:62:ab:14:df:e2:30:f3:
49:5c:09:e1:fa:01:7b:f4:47:7d:b3:19:07:2d:7e:
4d:61:7b:ba:06:9d:12:fd:8c:0e:80:43:c8:c8:e6:
e0:69:c5:5a:5a:6b:ba:63:4a:bd:28:2b:ed:ed:43:
f0:5e:17:63:ea:7e:40:99:80:bb:2b:53:b1:5f:56:
29:ac:ae:10:09:3f:17:9f:64:ce:57:f2:0f:b2:56:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:1C:C3:14:8D:BD:11:EE:64:FA:24:F9:AA:05:65:BD:72:D6:44
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:36:9a:19:ee:8e:8c:fb:5d:27:6a:b1:25:20:b2:89:99:
80:bf:ce:34:c8:c8:98:90:13:ec:79:b7:f9:80:ab:b6:ad:1a:
a3:ee:a4:d4:5b:fc:4a:a4:68:c6:e8:18:a9:cb:c7:bc:cc:51:
6f:a6:d9:c3:75:14:7d:07:68:a6:5c:15:66:f0:7e:f2:b7:37:
f0:27:4e:ba:e4:91:fc:fb:7e:d4:04:90:f0:d4:ba:da:7e:fd:
74:ee:c3:d4:b9:3f:0f:63:fd:97:46:b8:39:90:8d:d2:74:40:
e9:98:c6:ae:b4:0b:b2:54:77:89:ea:5c:78:48:79:f3:0f:0a:
9b:63:c4:3c:bd:17:ff:ef:e7:d4:d8:19:d6:a5:4c:b8:fd:62:
1e:f3:5e:4b:c3:34:71:2a:a5:ef:52:a0:74:ba:ee:81:06:f0:
0c:0d:ce:8b:26:3c:07:6b:53:8e:ad:7d:ca:33:69:32:83:18:
40:d4:c4:da:0f:7d:b0:5c:19:67:89:c0:af:d0:e4:ce:fd:72:
47:7d:54:3d:6a:d0:d8:f8:67:14:0b:22:5a:d5:f7:67:8d:cf:
08:49:e9:63:e0:01:ee:70:17:12:a9:43:5e:fe:af:27:f6:4f:
90:35:5f:b8:e7:ba:24:e5:ac:50:19:c6:f5:3c:8e:f9:f4:84:
f4:1e:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:21 2026 by rpki-client