Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: z0GnHskNGQGqZv+EUHfupnxY6dZbAriW46mkPial/aE=
Subject key identifier: 3A:6B:F2:88:62:A0:CD:0D:A4:DD:FD:7C:81:00:FD:FA:D0:89:48:9B
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019D284DC00BDE5DACCD2D48542EECDAA20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: ku3hxoIiC2yp9M3JZjqsLh4KyvbNDLgNoNg5Pufgvuc=)
2: tzNhQBxVbG84fhnHI6FFgXnV1Ig.roa (hash: UFTyL6yRgFc0Xt2kdYNbyJU576nNW6IhohuerTzQsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c0:0b:de:5d:ac:cd:2d:48:54:2e:ec:da:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=3a6bf28862a0cd0da4ddfd7c8100fdfad089489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:c6:ae:d9:e3:45:8d:b4:f6:65:3b:0d:32:
2f:40:48:65:ea:ff:11:7a:8d:ec:ff:8c:6b:21:0e:
e5:30:ac:12:0a:c4:3a:51:b0:f9:c8:3b:b1:76:26:
d7:f2:31:1d:02:e2:1c:76:4d:96:a5:9d:2f:94:09:
4b:c1:28:52:06:87:31:2c:79:b2:24:2f:55:3c:0a:
35:48:89:96:e7:7a:dc:3b:17:8d:0c:a2:67:dc:94:
1c:67:82:0a:20:4b:9a:b6:c2:fb:56:c2:ad:84:ab:
dd:be:25:26:d4:bf:b3:85:73:53:5f:1f:ad:b9:ca:
8a:41:52:7f:4c:6c:8a:91:45:f1:f9:fd:bf:7a:62:
4f:9f:a8:32:17:fb:58:1f:ae:30:78:5e:24:95:42:
08:8e:c4:90:4c:d3:6b:10:13:f4:a5:18:9b:c5:fa:
60:db:ea:32:5e:aa:98:aa:d0:ec:91:8d:a4:7b:7b:
83:a2:fd:1d:83:bd:25:5f:e4:31:5a:1a:c3:e0:15:
70:c5:a6:07:2a:9a:58:97:c4:fb:1b:86:14:fb:18:
8a:0d:9f:fd:a0:dc:69:f9:86:58:77:e2:16:c5:b1:
ac:3f:dd:2e:78:f1:a8:c2:c0:65:d1:eb:83:48:ac:
c2:02:0c:4f:7e:5b:fd:d3:dc:9c:f1:d2:53:bd:be:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:F2:88:62:A0:CD:0D:A4:DD:FD:7C:81:00:FD:FA:D0:89:48:9B
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:08:52:54:93:2c:e9:37:79:fc:37:1d:3c:51:31:8d:fd:
72:9c:87:21:1e:4b:d2:44:8d:5b:29:2f:39:e6:14:7b:f3:20:
4d:5a:34:5b:ba:ff:42:6f:5e:89:ca:ba:b3:a5:3f:93:ca:da:
7a:e8:b6:ec:e1:d5:f8:82:55:75:fe:ca:9e:92:ba:4e:1d:9f:
eb:19:17:f1:0f:db:f1:7c:4d:17:70:af:bc:46:6d:3d:ba:d0:
3f:8d:fe:01:43:1e:e2:9c:19:b0:46:06:10:57:7c:88:68:a2:
f4:23:97:54:75:66:29:59:96:5a:d5:8f:f8:94:0a:bb:e7:8c:
5a:81:e6:a8:82:67:4e:9e:eb:90:f9:b1:f1:37:5f:10:46:a9:
94:84:98:e9:ff:2a:86:98:c4:e3:5b:d2:33:2e:c7:32:ff:10:
af:d5:13:59:6e:c0:91:0a:c5:08:86:c9:0d:c0:c4:af:cb:19:
75:64:b6:d4:11:7c:ce:d6:6f:ed:50:7b:99:c7:67:2d:1b:c9:
4b:c1:a6:e8:c0:b2:de:cb:e2:87:07:34:d3:a1:a6:b3:5f:7a:
b2:8a:38:af:5c:ff:45:8a:23:d7:2f:a4:b1:e2:fb:f2:c7:d5:
29:ad:98:5e:d9:33:dc:30:35:fd:59:c2:1d:bf:82:12:91:36:
99:b5:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:02 2026 by rpki-client