Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: Fv+gqTsYF2lzocVroxCY2YUP2FnJt/w2Qu6v2AScdeY=
Subject key identifier: 8E:55:89:A7:3B:03:8B:51:7B:12:A0:5C:6E:7A:E1:B3:AD:DD:89:A8
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019D27E001E77F3A66E6B6F632DA4A7F2D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0CF3
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (hash: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=)
2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 3Tcdp9uQhW3kPSpNLZrs6oaOLcmvtdIgmrCXb6J3bbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:01:e7:7f:3a:66:e6:b6:f6:32:da:4a:7f:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=8e5589a73b038b517b12a05c6e7ae1b3addd89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:89:77:6d:6c:49:ce:fc:36:e0:88:bd:c5:
9b:69:de:99:f3:24:e5:59:41:50:7e:88:ef:d8:99:
56:15:b6:54:1f:ff:c0:97:b9:9d:29:b1:bd:ec:72:
15:ef:3b:f5:c0:c0:0e:1a:b9:9d:c9:5c:65:70:a8:
29:f8:a5:57:af:68:b6:02:e5:4d:ba:44:93:b3:c9:
09:05:82:7b:a9:d4:f8:2b:80:32:e8:1c:ab:7a:a4:
0e:8d:65:82:6c:93:45:0b:e5:3f:27:d6:2a:84:01:
fa:7a:8e:21:93:ab:31:23:40:bc:e3:36:0e:b7:a2:
53:07:fd:77:e9:a0:68:0a:df:51:4e:11:a2:de:c7:
0f:53:e6:5b:bf:47:de:2f:11:ea:72:eb:54:fc:ab:
c5:31:47:64:9a:4a:77:71:29:9a:d5:da:9d:a7:58:
36:75:45:54:41:1d:01:1a:81:bc:c4:29:36:ec:d4:
9a:89:9e:45:8d:74:7d:28:98:f7:e0:6e:92:0e:3c:
7a:7e:e0:a4:03:6b:62:8a:5a:21:7a:fd:c4:4b:ab:
73:62:93:fb:67:f1:09:d3:97:11:53:82:75:56:6d:
c7:49:ca:5c:41:53:a0:48:1c:23:1e:a5:70:6e:90:
1e:bb:d8:4e:fd:25:df:85:33:1e:69:18:fd:35:b7:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:89:A7:3B:03:8B:51:7B:12:A0:5C:6E:7A:E1:B3:AD:DD:89:A8
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:19:fa:63:a2:6e:26:c9:c7:60:38:e6:3d:fb:35:86:ec:9d:
c9:90:6e:a9:55:81:c6:81:93:43:18:ab:73:a5:23:0b:cb:e8:
02:6b:20:31:8f:c8:85:04:d1:de:32:ae:98:ad:97:0e:e4:f5:
3d:78:3e:72:97:ba:d8:8e:50:c8:9d:f0:c3:1f:23:ad:8b:66:
76:18:8f:04:2e:03:e8:98:6b:e5:7d:95:be:fd:a0:b8:58:25:
32:91:2e:df:4a:b7:a7:5b:4a:2c:99:8b:64:50:44:90:17:06:
a3:ef:a0:3c:fc:2d:fc:be:e0:b0:03:f3:15:3d:f4:72:8c:e1:
60:bf:35:eb:33:79:7d:27:47:a0:44:1f:c7:4e:e6:48:10:e4:
fe:f9:35:9a:ae:11:20:ab:eb:04:22:9d:1b:92:fd:2a:14:51:
5c:9a:a1:6f:98:c2:7b:6c:41:b4:6d:d4:58:ca:0b:d8:07:c3:
69:64:6d:51:33:f2:70:b4:3a:05:a4:9d:e6:6a:52:99:43:bc:
84:c8:20:f8:07:06:32:46:3b:8b:07:14:5e:4a:a6:e2:31:3d:
3d:d4:f1:bf:9a:cf:3c:23:ee:8c:20:49:c8:7e:4c:07:c6:51:
b8:65:10:5d:bf:52:14:76:03:3b:02:55:68:34:a7:00:4e:27:
1c:06:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:53 2026 by rpki-client