Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: Y+EAOcgPiCepEZEpDO2DxouXUBWt0YGwtKzCz/kWI1w=
Subject key identifier: AE:01:F2:92:33:4F:6B:CD:53:03:36:E8:BB:01:8D:70:CA:0A:D8:04
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 019D333EC61330BC0C9F9006371B2A02C31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: 0132
Signing time: Sat 28 Mar 2026 07:00:44 +0000
Manifest this update: Sat 28 Mar 2026 07:00:44 +0000
Manifest next update: Sun 29 Mar 2026 07:00:44 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: RmjOmr/4epk+g2+AuCx9AiUia0xQ0qdoD/UD03a/Rxw=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:c6:13:30:bc:0c:9f:90:06:37:1b:2a:02:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: Mar 28 07:00:44 2026 GMT
Not After : Mar 29 07:00:44 2026 GMT
Subject: CN=ae01f292334f6bcd530336e8bb018d70ca0ad804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:f3:32:f8:8f:b1:a2:e2:cf:b1:bc:9d:24:
66:69:80:b1:a2:2f:8a:6e:46:db:9c:cd:1f:b7:2c:
79:c1:f7:d9:71:6c:13:f1:e2:87:63:46:71:22:c1:
a9:87:12:f3:10:e7:4c:19:0a:9c:cd:34:44:da:6a:
fd:cd:6a:5d:e3:7c:1b:9d:2f:a8:fa:94:47:7a:f9:
19:ea:18:8a:0a:9e:7c:dd:09:c2:52:12:fb:fe:c9:
69:27:0f:99:c4:f2:f8:13:5c:7a:ea:e2:2a:1a:dd:
fd:58:e9:18:7c:3c:bb:71:7c:2a:16:7a:4a:7e:27:
db:1a:94:e7:f1:64:3e:8b:03:1b:fe:c4:6c:cb:1f:
c3:f4:c8:6a:a6:d0:ff:ab:94:a7:2a:6b:82:e3:86:
b5:fb:13:d2:8a:ec:24:6f:3e:33:a4:ce:98:99:68:
aa:6d:9d:79:7a:7c:28:9a:b2:d5:47:f5:6a:26:2c:
18:cc:7c:4a:8b:5e:90:71:77:54:24:f7:82:7a:65:
9a:b5:8a:29:21:7e:1b:37:ee:27:70:6a:53:62:49:
0b:fe:63:e3:ec:3d:a5:12:31:a6:cf:da:3a:79:b4:
b1:ca:55:52:37:2d:57:6a:f9:99:ed:55:a2:d4:fa:
78:3a:49:7f:55:21:df:4c:a7:fb:cc:02:43:a4:be:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:F2:92:33:4F:6B:CD:53:03:36:E8:BB:01:8D:70:CA:0A:D8:04
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:50:99:81:e5:1e:c9:5a:6e:ae:5f:fd:9a:6e:54:d3:8d:d6:
68:dd:52:24:d3:6e:5f:71:e4:f5:f9:86:7b:57:77:af:cc:ae:
b0:bb:cb:bb:d7:0a:e8:06:30:48:af:85:6d:79:07:48:63:76:
ab:51:8a:34:03:b8:39:c5:c7:08:7f:83:3b:6c:83:ce:06:96:
0b:cb:78:48:9e:d2:75:15:f2:ec:a3:3a:7d:ae:3a:fe:c3:3e:
e8:94:ab:fc:a7:c9:4f:6c:1e:eb:26:59:c6:44:80:b3:dd:95:
63:2b:68:86:fc:9d:10:37:d5:70:0a:83:70:14:a5:5e:a4:2e:
9e:3b:49:e1:ba:f7:a3:a9:a9:c8:0c:75:c2:21:21:3f:1f:07:
74:48:9f:ad:4c:2e:f8:d4:3c:b0:6d:88:5a:8c:3f:f6:18:00:
07:3d:c7:08:7e:42:cf:e7:4d:c3:2c:29:f5:4a:f7:4a:32:58:
7b:68:8b:e5:7e:40:f3:3b:50:22:c3:09:bc:86:9e:50:21:43:
29:30:ab:a8:cb:ae:a0:8e:fd:77:90:1b:b2:ee:84:d3:5a:0e:
b1:9c:f9:c6:15:ef:cd:05:bd:1f:5a:ee:c2:ab:5c:b8:dd:5b:
e2:0b:30:15:5a:2f:20:86:b8:74:28:47:d0:fb:9f:5e:20:eb:
1e:f3:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:05 2026 by rpki-client