Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: qAjJs6vDAVu9c2U1JA4aeUeglcugElBv+EJeT/dJAzc=
Subject key identifier: BA:C4:DD:B8:7A:7D:03:04:00:82:EC:10:01:22:98:CD:D2:2C:7E:D1
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019D284D95354F84C23F83E01004BC3EB33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: CyqmzPR2QspTHZJfepnFd47cAH9dz3gSPnwLG1CrHSw=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:95:35:4f:84:c2:3f:83:e0:10:04:bc:3e:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=bac4ddb87a7d03040082ec10012298cdd22c7ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:cc:06:88:a4:e1:ad:9f:5a:25:ef:64:84:
f8:7d:6e:f9:d3:30:c6:12:f0:00:19:0f:cb:d7:2a:
1f:ea:d0:b8:9d:b7:4e:d6:6f:af:4c:1e:86:8e:82:
95:78:26:c5:af:0e:93:e3:12:25:a9:c9:45:85:59:
cb:17:cc:62:5a:b6:98:eb:b1:8c:dc:e9:6e:80:ef:
d5:da:68:e5:44:69:de:4c:b7:c5:8e:3a:df:01:af:
3e:0e:ad:23:3d:b8:19:d9:f8:4f:6b:46:bc:88:fc:
35:86:3c:d7:90:51:b0:00:4f:b9:b7:13:2a:f5:38:
59:1c:93:31:27:5c:fd:c2:5a:ef:0f:a4:2a:c6:5d:
ae:fb:dc:eb:65:76:ff:0f:94:05:cc:01:b3:ce:03:
cc:76:8f:49:64:3f:7f:b7:99:5f:75:d9:a6:5f:cd:
7f:98:6c:fa:2d:87:1e:f8:a2:f7:32:56:83:59:ae:
14:b7:24:58:45:0b:12:79:b3:07:3e:3c:3c:7b:dd:
ad:bf:6b:cb:85:10:b2:80:4a:31:a0:cf:67:b0:01:
ae:52:48:cf:3a:f0:37:ab:9f:45:ec:be:2c:a0:96:
c8:56:89:81:0c:99:a7:38:33:21:37:d6:13:01:6a:
74:d4:34:c4:a5:48:0e:63:05:ad:74:71:88:ff:1e:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:DD:B8:7A:7D:03:04:00:82:EC:10:01:22:98:CD:D2:2C:7E:D1
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a9:35:fb:ca:fb:89:16:71:67:09:b0:4c:70:7f:78:6e:27:
22:72:fb:d8:c4:66:dc:59:e4:e7:b7:ca:6c:77:fb:4a:48:0f:
ab:e3:e1:4b:17:e8:eb:cf:3f:e4:44:77:e1:37:c9:27:e4:6e:
1f:1c:de:d4:e0:03:9e:05:ee:bd:57:da:ba:12:e8:4d:48:72:
db:5a:4d:97:62:99:75:4b:a9:92:fb:cd:cc:02:ed:f9:b4:99:
4c:37:8f:a0:b4:5c:7a:0b:fe:e9:d3:02:f5:84:00:0c:d0:79:
56:57:f1:af:3d:58:73:20:73:ff:f3:aa:74:84:bb:ca:61:2f:
29:9e:ba:f1:97:d9:bd:55:6f:73:d6:22:0f:23:c7:4e:e4:6a:
58:4f:91:10:6f:52:f5:c9:69:73:bf:67:b5:26:b3:9a:f0:f6:
7e:d1:30:25:1f:04:d6:f7:36:51:3a:fb:3f:8d:2c:31:24:67:
f8:4f:cb:8b:51:e3:36:dc:1f:50:aa:4c:0e:f1:eb:d4:96:a7:
d2:64:bc:5d:f6:4d:dd:74:07:1e:2c:6e:9a:8a:14:e0:ad:f8:
c2:cb:63:6d:7f:2e:57:b3:0f:f3:43:92:83:37:bf:44:8a:98:
d9:d4:3b:20:07:cc:34:a9:9f:91:16:79:ab:c6:a7:e2:fd:b1:
bc:38:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:16 2026 by rpki-client