Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: IM/QTET3olhYP34ilLPmDsyOV01XEzvgGNJVXRNosJE=
Subject key identifier: E7:A1:FC:00:4C:18:86:73:72:A7:27:D7:95:66:AB:13:AC:DE:50:EB
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019D26CCC996F2BDC727F0630CFDDC78D15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 08A1
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: jP2ycExghufM8rtu9cHitorPRTF6agGnpkP2km6kwUg=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c9:96:f2:bd:c7:27:f0:63:0c:fd:dc:78:d1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=e7a1fc004c18867372a727d79566ab13acde50eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:e3:4d:65:b9:86:35:1b:2b:47:a5:98:98:
d0:fc:9e:fe:c8:89:f2:74:93:3e:91:ec:77:e8:78:
e5:58:d6:f5:1e:24:35:09:b9:8f:56:27:ec:06:82:
38:dc:88:bd:0a:7c:55:fd:a9:0f:45:a6:87:58:9e:
cf:5f:8e:e7:55:ae:57:42:2a:b3:fe:c6:97:b9:e4:
a2:18:65:a3:6a:5b:dd:40:03:f9:e4:2f:4f:f7:79:
96:98:c9:76:78:f5:55:b8:32:d5:dd:38:60:65:45:
a3:e5:5a:06:4b:14:b0:ba:79:cf:fc:4d:81:15:27:
20:a8:44:45:e3:ed:1f:88:41:5d:61:b3:12:03:14:
db:b2:4c:bd:51:b2:55:f3:11:24:45:23:13:39:9f:
df:7c:88:9f:0e:71:d2:14:e5:b3:58:c6:00:d6:38:
a4:91:e2:00:88:5a:2f:92:82:2c:a4:b9:15:d8:24:
7d:8f:29:2c:65:34:e7:60:5e:07:24:22:33:51:84:
72:ed:b2:4a:6c:18:6a:90:a4:f0:18:9d:1c:17:1b:
bd:9f:73:f6:69:94:e3:ee:cb:c4:29:cc:b2:8a:33:
59:15:a4:d5:00:5f:09:d6:99:28:cf:9b:bf:ae:ac:
e8:3c:c2:f6:ca:fb:54:ed:71:3a:fc:5e:e9:a1:57:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:FC:00:4C:18:86:73:72:A7:27:D7:95:66:AB:13:AC:DE:50:EB
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cd:91:9b:51:d4:94:0c:0d:db:4d:93:69:d6:d0:99:e6:ec:
b4:15:9f:54:68:6f:09:7b:2c:a9:ff:f4:54:db:12:e7:c0:f2:
a0:a6:e4:3f:fa:c8:3c:3e:a0:2f:00:cb:a1:58:08:1c:aa:0a:
6f:a6:37:53:1b:4e:63:ad:57:e1:fd:93:67:83:9c:cc:fa:43:
b5:77:2d:31:83:b1:11:d5:6f:de:4f:b9:e1:ef:e8:9c:19:2d:
75:ba:c6:f8:c1:1e:55:ad:86:a2:cf:b2:c3:39:8d:4e:8d:f1:
8d:9d:dd:f8:86:a5:16:06:45:0c:fd:ab:82:90:69:eb:e8:1f:
bc:94:ff:7e:a1:42:46:51:7e:8d:fd:31:9c:5e:96:c5:26:4e:
2c:00:14:fa:85:c2:25:f9:60:a8:f7:1f:60:b3:e4:ff:e0:24:
7f:bd:9c:c4:95:89:3a:fe:e0:7a:e8:3f:ca:cf:3a:c1:f5:52:
ec:87:8b:8b:11:ad:69:58:3b:20:f2:54:28:9e:76:a0:f2:73:
a0:47:eb:d2:86:14:0e:61:a7:07:6f:13:db:01:1a:43:49:1b:
2d:b0:4d:fc:6b:a2:25:7a:11:ef:f8:7c:53:06:71:98:c3:44:
fa:fc:e1:e6:44:ec:c7:98:cb:6b:ac:9d:f5:de:82:fb:d7:a1:
c6:8d:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:01 2026 by rpki-client