Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: gQtn6eEDHiyhJnrcmn8HnuEQoT2clC+YSJmBqr/yQes=
Subject key identifier: AA:97:A3:08:83:76:5A:87:F0:9B:0D:F5:E2:BE:C6:B5:9C:FF:9B:78
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019D2960D809E7EA5AD31C68DCEE2AE43D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 05AE
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: wmIzdaRtfGEDNllmGdup2eTECeRUHOz+5bD8624tnDE=)
2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d8:09:e7:ea:5a:d3:1c:68:dc:ee:2a:e4:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=aa97a30883765a87f09b0df5e2bec6b59cff9b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:8c:87:48:41:b5:69:59:90:94:50:4e:cb:
b5:2f:20:4d:f2:b1:3c:71:f4:40:35:d8:fe:be:4f:
1e:f4:7b:27:b2:02:62:cb:01:61:19:79:ae:dc:c6:
88:a6:55:f8:c1:c3:24:10:4d:88:f7:f9:d4:54:39:
bf:ce:ac:c5:71:8c:ea:5a:fe:ce:68:cd:b8:9c:b2:
c4:06:c0:4c:f6:ba:10:9b:42:d2:53:ad:5d:2c:15:
07:23:df:c2:5b:e6:67:6c:3d:fc:80:b6:75:82:a7:
2a:0f:47:d3:2a:22:be:a6:42:e0:a8:82:ab:50:44:
30:e3:48:ca:7b:84:af:87:82:68:5f:3c:79:4a:27:
b3:46:45:b3:d6:e6:33:1b:86:8e:f9:65:ef:ca:03:
a0:e9:38:55:f0:49:c5:0d:0f:89:a5:9c:22:75:0e:
78:fd:d6:39:23:85:98:ae:a1:c6:7e:53:47:f6:99:
b9:a9:72:74:5a:ab:24:fb:53:86:5f:0f:5f:ec:ec:
1a:42:10:a1:c2:58:61:b3:7a:72:8b:6b:5c:a8:5c:
9c:19:87:82:43:49:a6:54:05:8f:1e:44:6d:db:82:
53:49:14:71:88:1b:ab:15:9b:e2:43:46:7d:aa:fb:
10:db:89:3c:4c:01:0d:cb:9c:ab:cb:54:07:d9:33:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:A3:08:83:76:5A:87:F0:9B:0D:F5:E2:BE:C6:B5:9C:FF:9B:78
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:30:81:75:50:31:4d:91:ed:62:a2:75:19:1a:20:8f:30:
8e:2d:2a:a3:f7:bf:98:f5:d7:e4:97:6e:60:e7:50:d3:46:ae:
10:3a:fa:ec:41:8d:65:fb:16:a0:79:f2:ae:9e:1e:9c:40:24:
6b:b0:91:4e:d6:92:a1:6e:b9:75:0f:d2:0e:1d:04:6d:62:b8:
18:2d:7a:6c:77:38:7d:7f:04:f1:db:aa:c5:9f:c5:65:2c:81:
a2:39:d5:b6:ac:ec:c9:e5:b0:a9:66:70:de:92:b3:2f:22:bb:
2e:b9:d2:0b:28:a3:da:9d:20:bf:f4:47:f5:d3:3c:ca:56:2c:
04:31:02:d1:9a:c0:f0:53:d3:39:1e:14:7a:29:16:45:33:b5:
68:db:54:b1:50:99:a5:d5:c0:67:dd:0e:bc:9c:a8:48:e0:4e:
3a:33:f2:e2:41:26:68:e4:2d:33:e5:07:c8:f7:cb:4d:16:b1:
c0:cb:dc:95:cc:d1:81:f1:85:ae:5d:69:a8:f5:78:f6:3b:94:
b7:0f:56:1d:62:ee:af:7e:dd:3f:42:c4:54:78:56:0a:05:61:
79:c6:f5:f1:49:ba:d8:2a:3d:bc:c9:a8:99:e1:3a:3b:4a:33:
29:86:fc:52:d2:11:50:cb:12:28:be:e3:70:69:84:f7:be:30:
70:f2:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:33 2026 by rpki-client