Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: x1opvOCYM7PaLgzuDd/5vPs2wz1lF2ygGijanRMToV8=
Subject key identifier: D1:E2:DE:8A:2F:FC:28:13:B0:D1:93:30:C0:71:20:93:B8:12:7B:67
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019D2771BC76906775A3E4D8D3050D8217F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 01mN2q4EO5IYIHzNaOePpbzd7ICPHfKbUQoGgLUvyLs=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bc:76:90:67:75:a3:e4:d8:d3:05:0d:82:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=d1e2de8a2ffc2813b0d19330c0712093b8127b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:9b:8f:16:08:5a:17:e9:23:e1:8e:13:80:
35:ab:60:e0:9c:70:91:0b:7c:b7:61:5f:4b:43:41:
a8:3e:6e:b8:95:22:d7:51:2c:7f:05:88:02:fd:6c:
25:b9:6c:bb:6d:8e:6f:19:89:07:81:84:ff:f8:d1:
6f:26:49:89:d5:da:3e:ad:a7:aa:4b:4c:79:11:38:
1a:91:bc:91:9d:ae:5c:09:23:0f:33:cf:a5:da:1a:
f5:51:56:1d:73:21:9e:a9:ec:7f:0d:e2:66:e6:e1:
f0:90:06:f7:30:2b:7e:b6:0a:75:0e:b2:c5:b1:0a:
12:61:f5:d1:e4:04:3d:12:a7:57:d5:d0:5a:04:6f:
70:d7:d2:b5:07:55:37:1d:6f:23:9b:f1:7c:f2:2a:
22:92:f3:9f:f6:bf:b1:37:6c:cd:1f:80:7e:d1:59:
34:ed:5e:42:39:92:09:73:57:66:ad:33:b6:18:59:
4c:49:da:be:b1:12:69:8e:02:4a:c8:19:9c:89:f8:
7e:95:8b:5c:8a:19:1a:b5:c8:08:d9:48:da:24:11:
0d:5e:40:e4:54:29:88:f8:4e:2a:c3:18:5c:d3:82:
1b:ea:e1:28:2c:de:b7:e5:2a:f7:4e:89:40:1b:ea:
2c:a3:f1:d5:2b:99:ab:4f:b7:ae:c0:29:67:61:0b:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:DE:8A:2F:FC:28:13:B0:D1:93:30:C0:71:20:93:B8:12:7B:67
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:47:5e:6f:cd:81:1a:df:49:8c:2c:8b:ee:1e:ab:83:39:
47:70:5a:f0:39:33:4c:48:c7:18:63:5f:95:77:a9:0d:bb:36:
16:d3:78:b1:c8:7b:72:5b:90:94:dc:d8:61:9b:72:f5:35:0c:
f6:0b:3b:03:42:df:89:87:6c:a2:42:ca:a9:ea:67:a5:da:52:
d8:f6:1a:70:87:8d:bd:0b:4e:2d:2d:13:0b:03:7b:2d:b6:5b:
f3:d6:7a:ea:ee:35:08:4a:dd:65:a9:75:92:9c:b7:58:95:1e:
1f:8e:ae:c3:e7:a0:11:04:ba:f5:69:ab:e4:ef:59:e3:db:58:
fb:ff:15:5b:d2:bc:8a:02:c7:50:22:39:e1:36:94:06:04:ea:
8d:57:d2:a6:12:e3:ce:be:cb:c4:a7:bf:90:ef:29:27:7a:41:
47:45:9f:d8:ca:c4:67:cf:0c:fe:cd:a3:c8:a2:b2:71:3b:0c:
d7:51:23:39:64:e7:5b:a5:ac:96:0d:05:3c:00:41:84:e1:7c:
30:15:46:e7:de:4f:53:6a:39:9b:9c:94:b0:aa:f2:38:5d:da:
4a:69:df:46:a5:19:e2:d1:e6:f5:c3:f8:4d:fe:a6:e1:3e:1c:
b0:7f:91:82:80:fc:25:a2:7b:62:47:b3:68:3e:3d:9d:b4:77:
20:04:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:29 2026 by rpki-client