Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: 3cTaAf5/XvhoGfukD1CVQ+rZhOGPH2Nbiv03Iii0fwE=
Subject key identifier: 72:47:E8:4C:EF:78:D9:21:7E:30:D0:77:55:A4:C4:D9:71:0C:67:F9
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 01A0D5DEB15573DFBAB4C5EF3DCED46FC350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 00:02:16 +0000
Manifest this update: Fri 25 Sep 2026 00:02:16 +0000
Manifest next update: Sat 26 Sep 2026 00:02:16 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: h1lebzRPbntLcG4HYzdp6byAjGVgMuOcvjqcn8909qQ=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b1:55:73:df:ba:b4:c5:ef:3d:ce:d4:6f:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Sep 25 00:02:16 2026 GMT
Not After : Sep 26 00:02:16 2026 GMT
Subject: CN=7247e84cef78d9217e30d07755a4c4d9710c67f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:3a:5c:52:b4:e7:c6:2a:6d:84:59:0e:76:
5e:01:ce:55:c1:96:7e:12:93:bc:be:c2:35:a1:8d:
cf:20:ff:df:29:be:fb:50:c9:b4:6a:19:56:32:90:
f5:54:f6:08:b1:da:b4:53:95:05:90:e3:aa:4c:b5:
06:67:1a:73:df:ed:4f:67:1d:3b:76:8b:6b:ce:3c:
be:1b:d6:f4:fb:74:c1:c2:90:ba:11:0e:c9:21:92:
87:23:19:d7:2d:6d:3e:a5:43:f5:34:1f:46:4b:d0:
82:75:01:e7:57:4d:93:13:b2:ee:ca:ae:4a:59:93:
91:ac:bb:c4:3d:83:65:85:56:e1:b9:99:59:11:66:
9c:71:70:03:84:bd:e1:30:93:f2:75:2e:49:4d:1f:
49:bb:94:7a:c3:3b:da:bb:e3:6d:ce:d4:25:10:11:
9d:8d:01:b8:2d:8e:4b:53:9d:04:35:1b:6b:68:34:
d7:7f:07:6b:00:96:06:71:5c:d6:de:a7:63:3e:55:
f0:37:33:59:f4:3d:3c:0c:ce:b2:df:a4:bc:0a:be:
4b:f9:10:f8:1f:0e:65:85:43:63:48:cd:ad:ed:3e:
eb:76:f8:c4:1a:6b:d6:67:c3:cc:63:a8:af:70:0e:
73:16:d8:42:0f:a8:2f:f1:0b:41:b6:e8:4f:6b:4d:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:E8:4C:EF:78:D9:21:7E:30:D0:77:55:A4:C4:D9:71:0C:67:F9
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:48:3e:f2:38:55:e7:d6:03:76:b7:99:5a:5e:6b:ac:ee:89:
87:e2:8a:d9:c7:bc:5e:5d:df:72:95:8f:69:1b:10:af:00:17:
b0:49:82:52:6f:c1:89:18:12:ae:0f:72:48:91:01:ed:5a:6e:
1c:b8:1e:d7:50:6c:5d:af:1e:58:26:f2:90:8b:a0:d8:c1:7c:
fd:be:87:a4:65:ce:5a:93:b0:5d:a4:8b:a1:ee:a2:2a:19:d8:
e0:ce:3b:52:44:96:40:a0:03:df:96:4a:b5:97:b0:fd:00:7b:
8e:f5:5e:e0:61:ac:45:bc:f6:14:6f:ca:69:e9:33:cd:5b:6e:
c5:3f:69:ec:d7:a5:84:aa:db:1c:5c:46:6f:2f:63:1a:d7:ac:
1d:c7:ee:3c:89:04:84:cd:a1:cc:94:2b:f5:2b:73:f6:f5:72:
9d:72:80:7e:72:7e:41:5d:e8:23:b7:83:de:76:61:c7:28:01:
c6:0d:07:35:c9:85:e5:23:f7:29:7f:f0:78:3f:7f:b3:61:9e:
bc:ce:12:15:92:1a:e3:2f:77:c3:3f:32:47:97:cd:81:a3:16:
6e:48:7c:ac:00:f8:87:1c:8c:42:31:b8:91:d5:fc:4e:7f:de:
5d:0e:d1:ff:42:c2:4b:57:09:60:27:32:4f:41:ac:dc:79:1f:
a7:a5:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:48 2026 by rpki-client