Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: nYS6p6f1k4I4afgCUjfpDm+u6dw/hY2qTc6mpmPvveQ=
Subject key identifier: A2:E8:C1:41:1B:04:1F:B7:79:0C:7F:B1:D3:90:2E:7A:E2:B9:46:6F
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019D29294D26658CBC1A1106EEFE65F88040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 13C6
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: 652XQmYPyFAeh6RTEyQSQPX81tTnegF25aIFUI1Dx04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4d:26:65:8c:bc:1a:11:06:ee:fe:65:f8:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=a2e8c1411b041fb7790c7fb1d3902e7ae2b9466f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:34:be:8c:e2:7d:c5:c5:96:2d:65:99:53:22:
1d:c5:9d:35:e8:7b:f4:f4:e4:fe:85:c8:0f:a2:ce:
84:09:4d:2f:75:a7:cd:57:f0:74:11:a8:f8:60:88:
a5:90:65:87:43:de:99:08:cd:64:83:fe:79:08:47:
15:f0:5c:9e:c9:c5:9b:b1:62:f2:6f:9b:5e:0e:8e:
70:fa:73:fb:b2:83:e0:61:c0:d0:23:f3:fd:d2:f2:
ae:55:75:2d:da:b5:4e:38:b9:64:88:5c:97:c1:b8:
4f:42:f6:07:c9:b5:c9:3d:ab:8f:ec:9e:08:2f:94:
c9:1f:ea:cd:94:f7:4e:de:9f:01:34:c0:c4:5d:ee:
3d:65:0a:42:6c:93:2b:8e:af:b4:84:61:8a:0f:b5:
44:0e:e3:33:e1:d2:be:6a:31:9d:32:ec:5b:ba:43:
7c:d2:59:5e:44:0a:30:93:dd:aa:e7:8a:0a:bb:c9:
4c:f1:e4:22:00:64:4c:b0:cc:6e:fe:2d:5e:bf:52:
cc:a1:3b:c4:fe:29:92:91:e6:8d:a1:cf:aa:e5:3b:
a4:4d:9e:d2:93:d2:61:bc:11:a9:40:18:64:22:2b:
76:44:5f:ac:36:f7:22:8b:df:42:17:73:98:b8:a0:
b1:e6:f7:05:bd:a6:df:c9:13:a1:4f:6c:23:d1:6d:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:C1:41:1B:04:1F:B7:79:0C:7F:B1:D3:90:2E:7A:E2:B9:46:6F
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:0a:22:8d:d7:8e:4d:76:df:de:5c:94:da:e8:d2:70:dc:
3b:10:d9:69:54:11:b7:c1:49:18:57:ba:60:da:dd:53:55:ec:
e8:fa:2d:31:39:87:b4:60:96:08:0a:49:75:46:b1:5c:7b:6b:
e8:ff:0e:f6:89:6b:78:34:d7:09:2d:ae:07:1e:9a:a6:1f:26:
48:d8:f1:4a:66:28:56:d7:25:6e:94:2c:28:42:02:80:1f:e5:
8e:83:0a:cc:a3:9e:5c:a1:d3:28:2e:c6:04:39:e0:c5:7d:52:
27:23:76:30:66:52:29:1d:1f:e2:7f:98:01:43:28:b5:0c:19:
ea:65:a3:4e:4f:41:f3:db:97:d4:b9:b6:40:f7:b0:f8:32:4f:
ef:e9:52:bc:7a:37:be:27:9d:8d:67:80:c5:ef:f0:d0:ee:7f:
66:9f:cb:6b:11:c4:82:1f:6b:65:38:ac:c3:1b:31:9a:db:38:
fe:eb:2c:55:42:23:af:91:7b:87:63:11:39:c6:3e:4e:c6:11:
c5:86:c4:e9:91:aa:da:c3:1b:c9:8a:69:ca:46:f7:ea:37:3c:
f4:c9:86:4a:26:fd:e9:6d:3c:99:73:67:15:33:db:cd:f3:99:
54:9c:0f:80:d5:46:ff:8e:ed:9e:82:c5:4d:50:6b:bd:aa:0f:
aa:c3:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:20 2026 by rpki-client