Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: 1RWWfQmMrzJJ03mlzKGoJyMllA2qGjR1YSiiI3U6jeU=
Subject key identifier: B5:E1:22:1F:FE:27:D1:FE:71:4B:F6:5E:C3:F1:3A:BA:8E:6B:D5:D1
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019CAD907933178FFEF5B9F70CDE9FA5943C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 052B
Signing time: Mon 02 Mar 2026 08:00:52 +0000
Manifest this update: Mon 02 Mar 2026 08:00:52 +0000
Manifest next update: Tue 03 Mar 2026 08:00:52 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: LFRSlHal/5nh/DNqZBQ9Dnf/ue15G5rzx2JWgE7esB4=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:79:33:17:8f:fe:f5:b9:f7:0c:de:9f:a5:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Mar 2 08:00:52 2026 GMT
Not After : Mar 3 08:00:52 2026 GMT
Subject: CN=b5e1221ffe27d1fe714bf65ec3f13aba8e6bd5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:94:81:38:ef:72:21:8e:e9:3e:b7:7b:1f:
5b:94:ec:44:3a:99:56:72:3c:5b:d5:80:14:03:2a:
5b:2a:e7:8c:8e:e4:c9:ac:39:2c:47:80:4e:50:22:
03:42:47:a9:12:52:2c:2e:0a:87:6c:69:59:a9:71:
c9:24:20:a1:28:95:ae:2b:32:3c:77:52:ef:da:be:
31:a1:57:c7:e3:37:f3:6f:3f:6c:2e:7f:0f:57:b0:
d8:62:4a:0c:c6:29:5d:92:eb:27:ca:a0:23:3f:d9:
08:b3:09:16:78:23:23:c4:c9:49:67:8a:6b:06:93:
50:bb:17:f3:1c:8c:89:21:50:4b:aa:d2:a0:62:66:
87:8c:f8:5f:93:cb:ac:6f:7d:2d:eb:e5:0e:e4:c8:
fc:47:fe:fb:a1:10:99:42:4e:de:6b:45:13:71:61:
cc:4c:c3:32:93:2f:02:99:a0:d9:57:ac:b5:a2:2e:
4f:4b:c0:34:7d:f1:02:ea:88:93:74:0b:5f:55:30:
32:1b:94:3b:8d:20:d3:ce:52:1e:e3:ce:e6:8f:e7:
4c:35:d0:a6:17:89:9f:fd:8d:31:09:dc:e6:ee:31:
a2:31:c1:60:70:5d:3e:25:40:c1:78:37:e5:7c:82:
2d:4b:21:9e:1e:8d:f2:33:0d:87:98:8c:d6:00:c7:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:22:1F:FE:27:D1:FE:71:4B:F6:5E:C3:F1:3A:BA:8E:6B:D5:D1
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:dc:8c:69:e0:c6:ad:40:2a:7b:2a:79:f8:c0:f2:41:1b:bd:
78:ee:99:7d:d0:e3:0f:bd:21:bb:9f:86:77:ab:80:68:a0:fd:
8e:bd:28:52:97:94:64:76:63:ff:13:9a:01:57:a6:85:82:33:
c7:22:6a:c1:b0:1e:8f:bd:df:1a:04:ad:2c:fe:e3:d8:f1:44:
7f:36:ad:dd:ae:54:41:be:ff:c1:a6:71:1a:63:fe:b8:9c:b1:
18:ae:a8:0b:8f:e4:f5:ec:16:54:96:4e:32:bb:98:86:e7:16:
f1:33:90:00:03:d0:53:89:39:5f:15:64:14:a8:df:1e:9d:b8:
ad:df:a0:7c:7f:00:dc:43:dc:a2:13:8f:e9:fe:2a:d8:6c:ca:
56:b2:f9:0c:c3:2f:35:80:1a:c7:1e:c9:b8:2a:2b:b2:f9:c9:
ea:08:6d:c7:6c:9a:de:62:1c:24:0a:4b:dc:45:24:d6:42:f4:
59:28:1d:7a:bc:9c:47:97:53:34:b1:bb:bd:df:b1:e1:7a:82:
67:fe:1e:7f:d0:24:42:a0:58:48:e9:4a:37:ea:49:a2:50:d9:
19:f3:05:7f:13:a5:7f:d5:81:53:d6:c5:29:79:21:f0:7e:94:
54:ec:75:91:82:06:59:9e:9d:11:4e:4f:0d:4c:3e:2e:c4:fc:
48:e6:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:08 2026 by rpki-client