Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier: Gn0px3imiq9m8gzoMCR8WkxW3kz3EDHJVcMSClP2IiY=
Subject key identifier: 4D:12:FB:7F:3E:39:10:A4:F6:50:71:33:42:18:46:7B:5A:82:89:CE
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 019D27DF77E919095EF7262E6C75737FAFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number: 0997
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: B37ZLKtj14cuD-pdJFeTxpgnlo4.roa (hash: RjHd8q/rrwWBUD1P2o4ZQ5H8oNxRkf+ZFtauIfVCi3Q=)
2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: KFo5dsgTfHz132oJdhbwcKuicjYbWsazLcLSYm6h2uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:77:e9:19:09:5e:f7:26:2e:6c:75:73:7f:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=4d12fb7f3e3910a4f65071334218467b5a8289ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:b7:2d:9d:24:a9:e7:72:d7:73:3a:76:7d:
4a:2d:b4:7e:57:c4:1c:f6:3b:e2:23:27:b4:df:ee:
b5:7d:f6:dc:9e:3c:4d:73:7e:c3:de:ec:81:1a:17:
82:72:24:5a:29:b7:9a:5c:09:4d:68:06:34:45:6b:
24:3d:b5:3b:c7:ab:d9:e7:3b:e0:c2:20:f1:7c:80:
2e:e9:4c:bc:7e:32:ec:0d:cd:c3:c6:be:df:4c:49:
8c:e5:17:da:23:55:9d:38:7f:b9:0f:d4:92:a9:b3:
b9:6b:69:f1:aa:15:a8:6a:be:33:c8:46:76:91:38:
26:94:88:57:e9:62:00:16:30:54:db:80:56:ba:86:
2c:03:9a:9e:22:bf:c2:8f:48:c7:89:12:79:d6:d9:
6b:2a:3b:d3:91:92:df:41:d8:74:d3:87:e1:54:40:
38:b3:44:31:03:a4:db:47:49:df:c7:59:f9:fc:ec:
3d:35:1d:ef:be:c4:58:a7:99:74:cb:dd:37:58:51:
13:2e:e1:31:e2:ad:0c:36:af:b7:96:ff:75:db:89:
17:61:bd:dc:ad:e3:00:cd:d1:f6:10:1e:e9:97:82:
32:5c:c3:a6:53:7a:a6:7c:0a:80:48:b2:6c:a8:20:
85:7d:8e:e6:6b:f7:d9:68:a9:51:9e:82:c8:b6:47:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:FB:7F:3E:39:10:A4:F6:50:71:33:42:18:46:7B:5A:82:89:CE
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:c3:0d:54:b2:3d:21:36:75:4d:2d:5f:ba:bb:ae:a8:4f:
f7:2b:14:4c:4a:f3:7f:56:ee:55:cf:af:bf:3e:0b:3a:ff:24:
58:91:21:af:f2:f4:db:90:d1:c2:ad:83:a7:87:5b:07:fa:04:
1d:6b:cd:33:57:9c:fb:03:d7:3d:36:22:3e:37:23:fb:79:4f:
3f:1b:02:82:df:69:b0:d7:0a:73:37:a7:73:55:e9:4d:b3:60:
59:9b:2a:c1:e5:39:0b:fb:e8:0c:ee:d3:95:b4:cf:2f:c0:ea:
d3:5c:4d:3b:c0:a1:c2:b5:34:d0:89:91:f0:e4:ad:b7:52:30:
25:a9:8e:b4:f0:f2:6a:88:bd:2a:a8:de:42:8e:43:61:76:2b:
1e:fc:3d:f1:15:59:75:92:0a:c0:e3:48:6f:0d:7c:1c:c2:92:
4e:db:24:23:fb:50:51:da:d5:55:81:4d:97:1d:28:1a:33:19:
0a:83:23:9b:5c:f4:6a:5b:a5:b4:87:e1:82:28:dc:0c:43:89:
88:58:98:bc:cc:c0:d4:48:4a:0c:99:a3:50:bf:35:ef:eb:38:
e3:ef:dc:65:11:f4:d2:51:c7:e2:99:1a:a1:5a:2e:64:14:bd:
25:ac:50:bc:1c:6a:2d:72:4c:b5:3b:93:1c:07:1f:b2:ee:25:
0f:27:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:16 2026 by rpki-client