Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
File: aZp2B5KFHh535Yh8bQPnwBGg4UI.mft (raw, json)
Hash identifier: PlO/ICrr/Ndtm7bhp/ULYRvievwyN8JBtK+/gE6i6B0=
Subject key identifier: 99:0D:EB:1F:11:53:97:E5:39:76:2B:00:EC:C7:02:1D:E9:BC:E5:A4
Authority key identifier: 69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42
Certificate issuer: /CN=699a760792851e1e77e5887c6d03e7c011a0e142
Certificate serial: 019D2A7294A5EC7F95CA4F9233603A56A212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
Manifest number: CF
Signing time: Thu 26 Mar 2026 14:00:45 +0000
Manifest this update: Thu 26 Mar 2026 14:00:45 +0000
Manifest next update: Fri 27 Mar 2026 14:00:45 +0000
Files and hashes: 1: aZp2B5KFHh535Yh8bQPnwBGg4UI.crl (hash: GChBXCLEOi0T2wS80JaGmzCb0H7g5xabW4CB5FHwW08=)
2: v6oU70HSaZm7ChbHXC90OpUzQj0.roa (hash: HL9qGgjJL2Z4Y+PfPmBcCOMraQco69+rsL+jpgTAVns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:94:a5:ec:7f:95:ca:4f:92:33:60:3a:56:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699a760792851e1e77e5887c6d03e7c011a0e142
Validity
Not Before: Mar 26 14:00:45 2026 GMT
Not After : Mar 27 14:00:45 2026 GMT
Subject: CN=990deb1f115397e539762b00ecc7021de9bce5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:6d:c9:6c:5e:bb:e9:10:81:cd:9d:60:6b:
a9:78:4d:dd:47:00:df:d5:b0:bd:42:de:f5:06:eb:
3f:70:ba:49:fe:28:63:5b:10:d1:ae:23:18:57:b6:
2b:7b:d2:ba:d2:ab:0c:72:a8:03:c1:4e:56:05:6f:
66:13:30:f1:97:16:03:40:00:92:e6:4d:67:e1:cc:
a9:37:fb:89:43:5b:b7:e7:dd:39:2a:ef:ed:bd:02:
1a:b3:8b:d8:d9:43:d8:e7:4d:05:9c:e6:56:c0:3b:
73:50:88:e8:ee:53:fc:37:31:a3:f6:e2:78:b9:27:
37:c2:33:66:fc:a8:e7:a4:28:98:63:d0:44:b0:9f:
68:42:d8:b3:74:64:9a:ef:05:f1:f9:e6:ef:8b:ff:
4a:07:dc:e6:c0:82:ca:aa:70:71:eb:77:11:10:c6:
a2:f1:ae:02:72:e3:7f:12:28:ea:b7:88:98:0a:86:
3b:4e:29:db:52:26:6e:0a:2a:92:2e:cc:b9:da:63:
d5:4b:87:2a:1b:e0:52:37:18:1b:05:1f:e9:09:4b:
9d:1e:a2:b7:e7:00:ac:3c:60:83:2b:bb:ca:6f:63:
7c:bd:00:f3:bd:11:43:d8:f6:37:47:c0:86:d2:11:
2c:6d:d8:ee:41:d9:8b:72:8d:0d:13:83:29:1e:14:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:EB:1F:11:53:97:E5:39:76:2B:00:EC:C7:02:1D:E9:BC:E5:A4
X509v3 Authority Key Identifier:
keyid:69:9A:76:07:92:85:1E:1E:77:E5:88:7C:6D:03:E7:C0:11:A0:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZp2B5KFHh535Yh8bQPnwBGg4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/bed99c-6c22-4497-a4d7-ce0962b26b8a/1/aZp2B5KFHh535Yh8bQPnwBGg4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:90:7a:59:58:81:50:4c:4e:f2:fc:1e:47:f2:fc:9c:8f:84:
12:62:c9:b8:b9:2e:9c:69:ac:52:4a:fc:09:48:2f:d2:58:0d:
ac:5a:2e:0d:82:83:59:40:fa:19:ba:9e:d7:52:4c:24:8c:34:
60:75:4f:2c:e7:37:fc:e6:66:2c:4a:a7:05:c8:be:70:e9:cb:
19:25:9a:88:96:93:2b:5f:55:9e:b6:54:da:ce:4b:fd:e2:bc:
af:2d:77:ec:f1:c2:04:dd:14:60:1f:8e:38:2e:47:8c:8a:e1:
b8:e8:67:2e:10:9c:15:01:d0:e6:87:9f:c8:95:3d:d8:94:c9:
57:ef:06:75:35:7d:32:38:08:ed:ab:76:2f:44:ae:f5:c0:cd:
3c:d9:8d:23:7c:92:ae:c6:eb:97:3c:e1:9e:1b:58:2e:ef:72:
f6:3f:9d:32:59:87:e9:6f:52:f6:53:da:14:28:f4:1b:bc:2a:
83:c9:53:8b:89:f0:60:7f:80:46:02:9f:22:b5:b6:c6:6b:c4:
a3:2e:2e:e2:d6:49:d8:a2:e0:e2:41:27:6d:a1:df:f6:16:a8:
dc:0d:c5:ab:a0:ad:66:37:72:5c:50:fe:42:ba:2c:0b:73:bf:
65:ac:5f:19:be:07:98:0e:3a:0d:a8:21:d4:2e:63:21:b3:36:
d1:d9:1a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:49 2026 by rpki-client