Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: 3AmLkqZZtuosavHRXdFSjU4FkTWnyETKOf45HsL+GVc=
Subject key identifier: 47:78:81:B1:4F:81:42:49:72:83:77:57:E1:41:10:32:F8:09:FA:2E
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019D26285A0CF53E81EE04118CD8FE5873EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: +BKULQRy/odIuNiWVqwUZIKQ0DtS9ghkiyHIJoXoQ4k=)
2: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (hash: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY=)
3: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (hash: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE=)
4: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (hash: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5a:0c:f5:3e:81:ee:04:11:8c:d8:fe:58:73:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=477881b14f81424972837757e1411032f809fa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:fd:e4:c3:79:b9:39:85:1f:1f:11:2f:dd:
6e:83:10:76:07:90:eb:f1:a0:57:e6:92:a5:a4:35:
ba:87:2d:7a:ea:f5:be:6d:5d:07:c1:73:17:b5:38:
da:1e:4c:4c:df:c6:38:17:7f:83:a5:a9:2b:65:e1:
7f:a3:27:ff:d2:6f:2e:8e:10:63:ed:72:1d:a3:72:
a5:33:02:45:e0:ee:be:38:83:2e:ee:62:50:06:9c:
f5:26:18:89:de:b1:17:2c:c2:a7:90:da:a1:d1:9e:
5a:16:57:83:0e:97:68:bb:33:6d:d4:cc:bc:35:58:
22:ce:fb:63:cf:9d:93:fd:be:04:04:b0:56:83:1a:
40:b7:45:8b:01:e3:a5:5f:57:ed:7b:76:53:e4:7b:
94:d3:47:6e:00:a1:96:0e:77:8f:f7:05:40:cb:aa:
74:70:c0:79:4a:d3:08:e8:cd:22:a1:a0:1a:f8:67:
7f:b6:92:0a:66:13:ac:85:d7:ec:a7:da:5e:f6:03:
a2:9e:ef:67:76:f9:62:97:08:cf:5f:a8:53:52:9a:
c2:e9:e9:7c:8e:f8:77:fa:cd:75:89:ee:28:67:f6:
02:27:d3:34:e5:16:be:3b:81:4a:76:22:5c:e7:54:
d6:67:58:f1:d8:ee:ff:ac:b8:4d:f9:86:96:49:be:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:81:B1:4F:81:42:49:72:83:77:57:E1:41:10:32:F8:09:FA:2E
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b6:6c:8d:69:5f:b1:4f:a7:26:ee:98:76:5a:6c:df:c6:00:
e5:fc:49:ac:2d:dc:17:74:b8:39:cb:e6:1d:15:9b:ec:1d:5e:
db:a7:2c:f9:1d:09:a6:c1:9f:78:42:73:78:0f:8b:79:dd:c7:
c8:ce:c1:31:01:f6:50:d0:80:63:8c:b4:80:57:73:ee:e7:1f:
6c:81:ab:d7:07:5a:91:43:58:83:dd:08:c6:49:a1:d5:9f:16:
b9:19:44:59:9b:a2:0e:fd:48:fd:bd:d8:1f:0a:5f:4a:c4:8e:
46:5e:01:da:4f:f0:60:c0:8c:b1:87:95:a0:3a:6a:24:5b:c6:
56:48:ba:44:38:ee:a5:47:48:0b:91:4a:0d:ca:cb:0b:97:10:
1e:50:93:f9:4d:f5:b2:05:db:b0:50:e8:8a:c9:8f:32:d9:10:
e5:56:fe:61:cb:a4:39:01:6d:dc:f3:ac:68:f7:f1:c3:2f:fd:
8f:c4:a2:d0:04:30:21:da:52:03:6f:56:7a:81:2e:c8:85:82:
8b:98:79:ea:fe:3c:5f:5b:ba:00:bb:77:de:30:be:1b:ea:d0:
55:e0:8d:06:5a:a9:bc:4e:0f:89:8d:81:50:fb:83:d4:00:cb:
42:a6:12:b7:f2:32:6c:24:2c:58:14:55:b6:25:ce:fd:c7:b4:
06:77:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:24 2026 by rpki-client