Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: gqBu38JbMHFibKQ1CtQJ5Ic3Na5sdsNfiYCdyjfQT0o=
Subject key identifier: B4:1E:2C:01:2D:C4:08:A1:F4:B6:C8:8C:D0:EC:E0:16:CB:7E:F1:15
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 019D28845FC0719BCE687830F653D0AF7643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: HJPbCrSTv25cVgfcQs4zHMPjvUuu5VT688ixiBMOf14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5f:c0:71:9b:ce:68:78:30:f6:53:d0:af:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=b41e2c012dc408a1f4b6c88cd0ece016cb7ef115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:c4:c9:ef:ae:e5:dc:ea:c4:17:8a:6c:be:
95:2b:38:29:77:fa:00:22:6b:e6:a9:e9:97:29:7e:
3f:d9:1a:bb:be:c7:60:46:34:4b:4b:a2:85:b6:20:
e8:19:b8:bf:73:98:5b:d1:f5:8e:7c:e4:8d:2c:32:
cf:09:8d:77:78:54:7d:9f:59:69:a0:d7:aa:1c:ac:
e4:2e:4c:1c:23:f7:38:8d:b4:a7:b2:5d:93:9f:83:
17:ac:3a:05:d4:90:df:fe:39:46:05:a6:4a:82:a4:
1e:7c:85:07:f9:6d:18:6a:ef:66:84:8d:c4:69:3e:
b2:e8:22:77:46:08:f9:63:04:2e:f5:1a:7a:1f:0e:
c7:e0:90:e2:9e:d1:8e:bf:0d:4e:e4:8b:6f:ad:e7:
30:19:9c:5e:6e:33:b4:55:49:e7:ae:c0:cf:fa:22:
fd:11:07:6f:29:66:07:51:30:3a:08:42:26:fe:0b:
fd:6b:08:bd:bc:0e:0e:23:bf:f9:aa:01:63:8f:1e:
d5:81:8a:ca:a4:27:d6:4f:58:c8:bb:76:c4:9a:b0:
c4:44:d3:f4:7d:75:31:f0:52:7c:56:fe:a7:82:03:
37:51:4a:44:da:51:40:6d:6a:5e:85:e4:8f:7f:84:
5f:1d:e6:0f:c4:cf:3f:a4:a3:a0:33:d3:e8:7c:d3:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1E:2C:01:2D:C4:08:A1:F4:B6:C8:8C:D0:EC:E0:16:CB:7E:F1:15
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:98:cf:03:46:eb:da:6c:b9:cf:7b:b3:63:2e:b8:e5:06:
08:1c:fb:5f:1e:bb:17:a5:7a:19:99:c8:e1:e9:a7:4d:31:27:
40:05:2d:10:e5:1c:71:b1:92:4c:a3:af:2b:f4:6c:cd:1b:b6:
d0:65:c6:19:45:99:f3:62:70:50:85:33:16:37:a0:a4:2e:8c:
ab:81:2a:a1:eb:dd:fe:f9:84:cc:27:3e:b6:05:0f:95:56:bd:
c4:37:26:e8:56:9c:02:ce:61:6d:a5:ee:81:56:e2:f2:ee:eb:
b3:d7:86:27:b8:ef:60:47:4b:ab:9a:7b:70:73:13:90:74:b5:
02:40:f5:16:27:7f:b1:02:aa:ad:3e:f5:45:82:17:5a:9d:2a:
8f:f8:40:8f:0f:4c:6e:94:be:f1:ce:21:39:bb:34:e2:45:62:
d5:e3:e5:43:ef:f5:ee:c8:d1:8a:05:be:56:9a:0b:9e:5a:e4:
19:b8:00:1a:a9:84:43:21:43:d2:23:f0:bf:cb:26:df:5b:e6:
0b:be:fa:58:cc:aa:da:7e:68:e6:0d:5e:c0:d3:5c:0b:b0:2c:
37:eb:e2:7d:7b:10:37:7f:66:1a:04:37:0a:8e:0a:bc:52:92:
d1:fe:e6:a8:84:01:9c:60:b4:e3:0a:52:7a:af:a9:00:c4:53:
71:87:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:52 2026 by rpki-client