Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: oPts5bxiiXnsu5lZfl6N5vq2ciIfi23HUk4Z890qUv8=
Subject key identifier: 14:C9:5B:3B:92:91:DA:94:BA:15:D3:8B:CF:83:4C:F5:4E:5F:15:D7
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 019D2816C0E3953C1911CA65565FC9FBC2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 1302
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: rcRgWKKqL0Xcc2ai+1v5rd2XGCY9qvV1RcDPlsL4Y9M=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c0:e3:95:3c:19:11:ca:65:56:5f:c9:fb:c2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=14c95b3b9291da94ba15d38bcf834cf54e5f15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:d4:3b:a2:3b:d0:2d:18:33:2a:d4:3d:96:
b6:c2:a0:e0:fc:8e:7a:1f:e3:db:e1:36:e5:91:be:
91:22:01:17:8d:1e:c1:06:7f:22:b4:40:58:c8:06:
07:92:d7:00:33:8e:80:0e:10:e8:38:3f:c3:f6:4b:
dd:9f:70:65:c6:94:ea:6c:55:4b:47:44:b3:c4:de:
e2:31:fd:47:59:86:2a:cf:db:a1:ab:c3:72:f1:5a:
34:12:2d:bb:70:19:28:d1:05:1d:fc:54:5b:3f:cd:
67:7a:f3:ad:bc:d6:84:ff:4a:ac:35:20:40:14:d6:
5d:50:14:5c:2f:63:92:c2:ac:9b:98:86:be:85:55:
f0:c0:2d:41:f5:a3:1a:e5:65:a2:49:f0:81:ff:ed:
a0:09:3e:1c:f3:b8:60:98:79:95:f5:21:12:03:bb:
8e:3d:6c:ae:7d:35:16:f2:50:d8:72:db:1f:1b:5d:
8c:63:3c:b8:9f:ac:8a:3b:7b:ab:ec:fc:b1:42:48:
ba:5d:39:96:07:db:f3:36:f2:ea:95:c3:81:66:86:
0a:c5:e4:21:45:86:af:fb:24:03:93:50:06:12:b8:
4b:7a:9d:d9:15:fa:15:42:67:cf:9b:ad:d2:42:a0:
fb:0e:d2:6c:86:e4:e2:b1:cd:f4:61:6b:50:be:16:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C9:5B:3B:92:91:DA:94:BA:15:D3:8B:CF:83:4C:F5:4E:5F:15:D7
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:6c:e7:4d:c5:76:3f:14:63:f2:b3:58:71:71:48:db:e6:
5a:28:ef:93:f0:ca:a3:c2:e3:20:e6:32:7b:34:e0:90:4b:ca:
16:9f:7e:23:7a:2f:ec:03:45:58:3e:6d:2e:6e:de:2f:8d:6c:
29:23:72:59:4f:22:fc:00:e4:fa:a7:b8:bc:f6:f0:3c:e2:e5:
27:a6:a8:df:88:02:71:b3:22:77:c7:cb:69:1b:63:97:55:7d:
37:e5:cf:5d:d4:6a:38:cb:03:1a:7d:9d:e2:64:b0:2f:70:98:
d0:a1:f4:c7:04:0e:d2:bc:dd:de:ee:19:fd:d2:2f:f2:cc:0f:
a5:46:2a:4b:60:0e:8e:de:98:57:31:5f:54:a4:b5:d3:d4:f4:
39:75:e1:d3:4b:63:5f:7b:fd:be:4e:06:e5:5c:ae:01:58:5d:
e9:9d:d9:76:ee:e2:27:01:d0:44:a3:7c:14:cd:a9:c0:d1:6d:
12:92:c9:c2:68:0d:13:4c:cf:68:20:df:65:63:3a:59:5c:aa:
3c:83:34:d1:ff:32:5f:f9:83:aa:a5:1e:0e:0e:16:74:9f:c3:
3b:40:49:6f:f4:f2:44:c8:bd:67:bb:4a:50:a2:04:a0:20:f5:
80:89:40:6b:cd:85:4f:5f:fb:4b:bf:9f:d9:3f:e1:84:5e:c9:
8d:96:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:38 2026 by rpki-client