Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: Y2EJXhH3gCcLLNo6cQ36a3lxguJnVPSpsMFdYwn7H1s=
Subject key identifier: 42:5B:20:1A:73:4D:9C:2B:30:39:F8:4B:C3:66:F6:96:2C:74:B9:69
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019D32639B1351144F3B3FEA6425FA59A865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 11F3
Signing time: Sat 28 Mar 2026 03:01:21 +0000
Manifest this update: Sat 28 Mar 2026 03:01:21 +0000
Manifest next update: Sun 29 Mar 2026 03:01:21 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: dkttqngF2v4fMJ1CxBnBF2JTt2TBopwsawEPF0QkMdM=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:9b:13:51:14:4f:3b:3f:ea:64:25:fa:59:a8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Mar 28 03:01:21 2026 GMT
Not After : Mar 29 03:01:21 2026 GMT
Subject: CN=425b201a734d9c2b3039f84bc366f6962c74b969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:7d:1b:a9:7c:ec:4e:10:13:aa:aa:96:28:
6a:48:8e:29:ad:b6:06:46:50:a4:a4:17:f8:1d:94:
d7:f3:f6:0e:a7:3c:ff:ab:23:a9:35:43:86:a6:a9:
c1:18:5a:e7:3e:2c:ab:b2:95:c4:d7:a6:b8:f6:3d:
81:f5:47:27:2a:e0:97:99:5d:e3:21:5d:73:11:03:
a1:7c:41:15:a7:eb:3a:dd:a8:7a:1c:00:50:c3:4f:
a9:fe:4d:9e:36:b4:a1:bf:e4:7d:7e:da:0a:35:56:
cf:de:26:2a:a1:99:12:8f:9b:d2:82:98:f2:6f:fa:
77:dc:db:d2:25:a6:d8:0e:66:3a:5c:e7:aa:cb:ab:
f6:3a:fd:66:54:20:b5:30:05:b9:f8:56:88:aa:0a:
9c:f2:88:95:bc:3e:58:d6:b8:b1:6a:13:a1:d6:db:
bc:c0:76:2d:6d:f9:6b:ad:b8:0d:03:d6:7e:84:2b:
a4:82:6c:97:74:e9:26:e6:74:74:b2:08:c7:42:4e:
ef:f3:88:31:01:6d:fa:07:37:8e:01:a7:6c:c4:bb:
a8:8f:dc:7a:bc:1a:79:1b:16:b0:95:a2:33:e0:02:
80:43:da:df:78:71:38:8f:65:e7:1a:98:22:89:86:
f2:6b:cc:53:36:6e:39:9a:7f:5b:5f:ce:71:1a:74:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:20:1A:73:4D:9C:2B:30:39:F8:4B:C3:66:F6:96:2C:74:B9:69
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:0c:61:a5:9f:1a:b8:8d:47:2e:3a:fb:51:2e:0c:c3:ce:
6e:ef:4b:44:a6:55:8f:1e:98:fd:20:62:c9:6a:36:6e:85:3c:
a1:04:f2:87:f5:6f:92:72:80:79:d9:6b:10:d9:85:ba:04:05:
71:bc:44:0c:13:5e:0c:bf:73:43:7e:5e:e0:0c:3b:2e:76:6b:
59:b6:62:88:7b:ab:48:fa:17:c3:7f:ae:5d:f9:d2:7a:26:e7:
10:4f:23:c7:98:99:ef:6c:83:c3:c4:32:9c:9e:03:5b:f4:bd:
57:b7:70:98:5b:6c:4b:4d:00:42:b2:a9:78:e3:db:9b:65:ae:
61:18:c6:ae:66:9f:11:dd:ba:8e:8f:00:d3:5b:d6:43:a9:08:
09:e3:48:e5:cd:7a:cc:e2:a2:2f:d8:b0:0d:14:ef:20:0c:62:
84:53:ad:d5:e6:f1:24:8e:d4:cc:4b:a2:a6:50:79:c0:63:4d:
84:5b:da:bc:66:55:e5:23:36:61:ac:5f:00:c2:c2:5f:e9:80:
2d:cb:0a:89:94:dc:16:41:11:f5:66:9c:72:81:f0:26:5f:9e:
1a:a4:5d:39:ee:16:4e:07:33:86:ed:c8:3d:58:46:e0:72:4b:
27:e9:5c:a5:8d:7b:4d:62:16:fd:1e:06:43:ff:c0:ed:5e:74:
4b:a3:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:14 2026 by rpki-client