Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: jFQ4bVz77DSm/jPwMSxq4c3LfKlonSsXd9nu+giDOSI=
Subject key identifier: 81:AE:9F:9D:7D:0E:CF:FC:CA:AC:A8:29:56:F7:9F:4C:E8:41:F6:8C
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 019D27726E1E8AC7045A1B21FC48FABD4DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 07A5
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: BfpWv/kiX0oAtszYH7KlbTCtzcT4ayH4EGLD0vPRdF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6e:1e:8a:c7:04:5a:1b:21:fc:48:fa:bd:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=81ae9f9d7d0ecffccaaca82956f79f4ce841f68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:fb:5d:52:d9:dd:ee:d1:4f:96:a9:0e:8e:
8d:8c:a5:ed:3b:81:cb:d0:86:06:7d:b2:26:bc:f7:
73:b8:ea:32:4e:f8:ae:c0:17:e7:02:98:72:5c:fe:
2c:30:ad:77:0d:47:25:53:ce:ae:46:fa:8f:42:da:
43:7f:5f:69:8f:5c:0a:8a:53:5b:b9:e0:30:d6:dd:
75:f5:91:20:36:21:3d:ec:ad:34:73:d7:9a:30:ba:
c4:fb:8c:dc:b5:be:59:f0:34:74:13:d9:12:75:56:
14:6d:e7:93:c5:cf:ee:ab:59:ce:7a:1b:6b:d5:ae:
29:9d:78:34:72:87:68:cb:8c:d5:b0:21:9e:1d:35:
da:98:74:f5:b6:d4:b7:a2:1f:3b:36:78:5e:09:39:
65:51:82:ca:26:12:72:57:d6:77:b3:fb:be:69:ad:
1b:6a:75:b3:ca:c3:f6:c5:e3:d4:c1:e4:02:ba:59:
93:10:57:33:85:46:b6:a1:d3:1b:cb:9b:e6:65:b6:
76:67:5e:70:0d:17:35:c3:89:05:7c:4d:13:a4:7e:
c3:23:27:6f:c3:7d:d1:24:c7:1a:27:2a:c2:cb:c9:
97:37:cb:5f:a9:2b:63:0b:d4:a5:0e:36:1e:82:42:
ec:4d:2d:26:9f:bc:1f:9c:b3:89:2a:3f:9e:10:aa:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:9F:9D:7D:0E:CF:FC:CA:AC:A8:29:56:F7:9F:4C:E8:41:F6:8C
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:51:9f:4b:c2:33:90:3d:e5:cf:8c:61:b9:e0:0b:d8:2c:
52:2d:35:16:a1:c3:75:d7:34:80:fb:89:8b:53:ba:8e:52:18:
4c:ec:6a:6d:f5:d7:be:fd:c7:8d:0e:c0:0d:5b:9e:37:28:62:
09:e7:18:cd:2b:56:b7:82:27:ff:52:bb:f4:f7:ab:c9:e5:1f:
10:3e:b0:0b:59:ae:f4:19:a6:05:1f:57:de:ab:ff:c1:89:e7:
12:c3:36:8c:36:1a:81:fb:07:fa:a4:69:3b:0c:4d:a7:35:0b:
d0:5b:8e:9f:1b:d8:34:4c:25:30:4e:dc:54:d9:62:f8:dd:40:
d3:e9:f2:3b:70:5b:ea:52:0f:92:88:27:70:b6:18:b5:9a:35:
26:94:05:05:fe:06:35:61:02:e1:a7:80:01:f3:bb:d7:da:e2:
9b:3c:d8:0a:d0:f9:d4:ef:e3:76:fe:30:e4:dc:6c:99:6f:d9:
31:aa:af:76:e6:a3:06:70:85:e6:0d:31:49:9e:0f:29:f8:4a:
a1:ea:95:8c:b4:a4:80:4a:9f:1f:c4:e0:c5:c6:41:ae:56:dd:
a9:05:4b:64:5c:b2:52:6e:4b:69:eb:3a:4f:2d:87:98:a6:c5:
7a:b6:d1:15:f9:38:bb:dc:4b:60:8d:63:c2:0f:06:f7:38:f7:
c6:ac:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:05 2026 by rpki-client