Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: iyTiNC/KDbynDQGQD2ui51Iz/qd0bTg73UUTCk/r0QM=
Subject key identifier: 87:32:7E:95:85:A3:99:F3:A6:BD:00:B3:B4:A3:6F:B6:0C:43:0D:B6
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019D27E00EB3E44D6FA9D98069BB70A14845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0B78
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: SMOu5MDDvwqX6fnDv5MpwtDvQRiDYJKN4R9221mJJA0=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0e:b3:e4:4d:6f:a9:d9:80:69:bb:70:a1:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=87327e9585a399f3a6bd00b3b4a36fb60c430db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:9a:b6:5d:91:ab:70:7f:5c:e1:df:c7:58:
9a:6d:1a:bc:fd:0e:70:f5:dc:de:04:df:3d:41:a8:
72:40:11:c3:0a:5c:88:be:ed:2b:92:95:7d:41:13:
77:a1:af:c0:fa:0e:3c:4e:e3:df:14:b6:55:66:dc:
c0:12:15:2a:ad:de:c7:53:6b:d5:a5:5d:f3:c0:c8:
ac:db:07:e3:e4:f8:cf:20:98:76:da:71:be:c0:6e:
0e:19:31:83:28:2f:22:6e:c4:02:08:7c:09:15:64:
55:98:62:4b:b6:65:cd:47:0e:43:44:0b:0a:d2:41:
37:58:1e:4f:cd:3e:2c:d3:a7:cf:32:55:6b:50:eb:
30:37:05:d2:94:ed:8c:1d:ab:48:51:40:f4:c6:32:
5f:8c:a8:b5:53:89:0b:67:bc:a6:79:65:fd:7f:76:
4c:7e:19:64:15:e6:1a:7a:79:e9:48:5a:e3:1d:1f:
63:7c:22:0d:9e:3f:8f:62:d0:66:ef:98:a9:40:01:
90:c5:b7:48:c7:04:d4:8e:e7:0a:da:d7:85:e0:95:
9f:11:79:48:c4:5b:2d:ef:1c:6a:7e:bb:35:43:d0:
57:70:64:d1:4d:2f:60:29:54:17:fa:78:36:1b:6c:
fb:de:1d:ec:c0:32:cc:0f:8f:6c:0c:93:51:46:f9:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:7E:95:85:A3:99:F3:A6:BD:00:B3:B4:A3:6F:B6:0C:43:0D:B6
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:8e:e2:e6:4a:1c:f4:10:3f:e9:29:bc:41:2a:bb:77:5c:
79:d5:54:0e:60:34:a3:39:38:2f:92:1c:aa:2d:0d:3a:2e:24:
57:88:21:b4:4e:11:e4:06:77:f0:b4:cd:b6:d9:a5:96:6d:41:
aa:3f:ef:92:7b:45:dc:54:5d:80:60:32:c4:dc:e4:3d:2e:7c:
94:d9:8e:a0:7a:2d:9c:52:27:e0:c8:1c:61:81:d5:ca:34:87:
d0:c5:21:1a:82:a4:26:12:fb:80:42:ff:00:30:3c:5f:81:20:
99:8f:32:f4:d2:c9:85:21:4b:f1:e9:bc:ce:62:a5:d3:36:47:
dc:ed:da:93:dc:62:bf:ba:0a:bc:bc:cd:7a:14:a0:f5:c2:68:
4a:8c:8a:0c:7f:a7:7f:60:97:3b:3b:64:70:8a:c5:4f:2a:23:
e3:c0:78:80:20:86:fc:5e:bc:8b:69:d4:86:99:d3:f2:e1:9a:
f5:8a:96:3f:58:92:19:44:69:a2:20:80:3e:19:3d:95:d7:fc:
8f:ce:ff:3c:67:25:3d:74:32:ae:0a:09:ea:3b:c6:0a:02:2b:
d4:6e:ea:e0:4b:92:fb:0a:d9:f9:a1:dc:46:88:cd:3e:4e:69:
07:71:41:97:2e:27:f2:71:dc:73:f4:98:0c:e7:4a:fa:26:8b:
20:82:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:51 2026 by rpki-client