Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: AN2fgpK9RjISVorD1vS1gaJajwMhfdyPqTeMMmOxep4=
Subject key identifier: 90:E6:E2:5D:EC:C1:3E:05:54:EA:3B:B8:C2:BF:B8:35:DC:A7:D9:FF
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 019D27A92D57461BF7D472B29871A11D781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 1535
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: WAnJVoRuXA8kF/QGjYSa53ndb08xXXq0xlvrDPyTMR8=)
2: cQSoOImIWHLQqvwma-mbQwTjc30.roa (hash: CvEfeGMhdPBsYF3CWWhLxK0Vg1UuXavAs76jMv4L1vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2d:57:46:1b:f7:d4:72:b2:98:71:a1:1d:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=90e6e25decc13e0554ea3bb8c2bfb835dca7d9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:6e:96:e8:1e:6b:0d:e0:08:e1:cb:c7:9b:
9f:3d:bd:51:39:e8:b0:75:cd:2e:85:1c:41:e2:a9:
0f:b3:23:cc:1c:b4:c3:a2:2c:33:a7:a8:fb:0e:19:
21:96:5e:04:21:76:10:37:28:3b:1b:e8:5a:00:3a:
bf:e8:0c:3e:04:9c:29:53:9a:5b:e7:a7:60:72:e1:
fe:f9:cd:16:70:71:10:2b:a7:3f:ad:f6:5c:6c:8e:
59:39:69:4b:c0:29:75:8d:7d:e9:a2:96:95:76:71:
6f:09:c3:5e:19:38:3a:71:dc:3d:1e:fa:26:d3:5b:
70:32:21:c2:5c:77:ce:a1:f6:b3:18:40:33:c7:9e:
ab:d3:24:b2:f2:a9:cc:8b:c7:33:45:3f:c6:08:46:
13:89:a6:62:34:d8:9b:02:db:a1:ee:26:8d:31:96:
d0:87:ec:ce:a6:a8:28:60:07:18:e9:e8:63:f4:fe:
32:e3:45:4b:f2:27:51:fe:a9:62:16:fc:cf:9a:48:
f2:3f:e8:3b:70:db:bc:e1:08:4b:ef:9e:a8:30:7f:
4f:0d:d9:34:18:31:2e:8c:00:83:79:b6:e8:85:25:
2f:5c:04:93:d0:0d:64:bf:64:77:74:4e:35:98:47:
f6:ff:d1:d2:16:ff:3a:5d:4f:28:78:59:d6:83:16:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:E2:5D:EC:C1:3E:05:54:EA:3B:B8:C2:BF:B8:35:DC:A7:D9:FF
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b5:9a:16:45:5f:cf:eb:e0:31:65:d4:ff:d5:c6:fe:21:30:
f4:ce:41:22:ac:97:fa:ff:6d:57:f0:6e:96:60:b7:d1:91:4b:
30:8b:b3:e4:bb:2f:d2:c6:ec:86:14:6d:ed:e9:b1:3b:ed:09:
26:36:2b:77:e9:be:4f:cd:87:3c:11:7e:58:b1:a4:2d:b6:83:
b3:42:ae:d4:36:05:7e:94:28:89:f6:76:6e:b0:ad:13:b3:97:
76:50:a7:fe:b7:f3:8b:30:e8:d5:1b:a1:27:f1:98:1f:a1:3a:
d5:7d:28:5f:80:e4:48:42:7e:48:04:7c:b8:cb:32:67:ca:89:
fe:06:b5:3c:c0:21:f9:54:9e:a5:be:9a:be:51:db:b3:3b:50:
05:d5:54:4c:79:08:94:5d:04:50:cc:f0:94:55:99:6c:e9:3c:
e5:8b:4d:0e:8d:40:a6:fb:0a:bd:74:e3:7f:76:d1:2e:56:73:
f9:96:b3:cc:df:c4:02:a4:e9:44:7c:4b:96:64:6d:10:d4:80:
c3:ff:4c:da:27:fa:ec:fe:45:60:b4:be:e9:37:73:24:3a:14:
39:85:49:fb:c4:a1:fe:60:25:af:29:ba:b9:46:ad:c9:f3:04:
5e:ed:e5:ed:01:56:30:6c:10:d2:6d:9b:66:2c:23:ec:a1:eb:
c0:00:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:29 2026 by rpki-client