Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: 8FrQehRWUkX/2qCTOHcASgenYkSTShLehgJRFiQUj+g=
Subject key identifier: 74:2F:93:49:8C:F8:A4:7A:7B:9C:1F:93:5A:77:93:DC:FE:29:34:5B
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019CA9EADB5D18642A048FA5D24619C7FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:06 +0000
Manifest this update: Sun 01 Mar 2026 15:01:06 +0000
Manifest next update: Mon 02 Mar 2026 15:01:06 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: Wssz8Ol8Tan37WY8xGJKAWEcxY0xZRY3rCdQ2mlrFD4=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:db:5d:18:64:2a:04:8f:a5:d2:46:19:c7:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Mar 1 15:01:06 2026 GMT
Not After : Mar 2 15:01:06 2026 GMT
Subject: CN=742f93498cf8a47a7b9c1f935a7793dcfe29345b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:45:d3:35:5a:bf:b7:9f:d9:d6:a1:18:db:
8f:64:4e:65:04:44:8e:0a:a3:e0:89:fb:03:a3:1b:
e1:2d:4e:aa:ac:27:04:ff:b4:a1:48:aa:e7:fb:47:
de:ba:bd:61:fb:38:fa:99:f2:6a:96:4c:9d:17:31:
11:65:e7:29:33:37:79:2f:e6:3c:cb:c7:6f:97:9d:
11:6e:d3:62:62:8b:bb:4d:57:b2:9f:6d:1f:7f:07:
c6:2e:a3:9f:06:70:e4:3e:f7:bb:f1:ad:68:ce:18:
b4:f9:13:2a:44:6e:f4:fa:db:27:31:a3:f1:f3:41:
8c:cc:d7:0c:7e:43:fd:cc:69:e9:8a:66:3e:c1:42:
7e:89:3e:a3:35:61:7e:64:2b:db:e0:06:e1:26:71:
10:44:7c:77:90:ac:b3:8a:73:0c:bf:a8:dd:6f:8d:
b3:51:83:f2:53:b7:a4:57:a3:fc:f1:59:c9:6f:dd:
6e:fa:ee:bd:99:95:8a:15:5b:76:25:cc:cf:f8:ab:
35:0c:62:d5:55:7b:68:62:de:ab:a4:3a:b5:91:9d:
6e:4e:e6:86:51:3f:94:7d:ea:06:3b:ce:fa:a1:71:
6f:ff:02:b0:ba:bd:35:57:9b:c1:63:2e:28:6a:14:
07:70:3a:ef:2d:00:d9:45:41:39:5e:63:fe:61:da:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:93:49:8C:F8:A4:7A:7B:9C:1F:93:5A:77:93:DC:FE:29:34:5B
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:86:da:a4:a6:9f:70:b0:30:1d:17:d9:fc:6d:78:76:71:77:
a6:21:2e:70:b0:bd:2c:3e:84:97:86:95:17:d7:bf:aa:de:3e:
5d:a7:f8:8f:2a:b2:3d:e7:41:56:1c:8e:56:c3:08:cc:8d:47:
67:69:76:17:1a:b7:c9:2a:59:f7:67:67:7c:ad:24:1c:04:3b:
49:48:fb:86:ea:85:2a:3a:bf:c5:1c:bc:39:89:c8:5f:e7:43:
fc:f9:0d:de:f8:f4:8a:85:af:e5:4c:76:b6:7d:03:a7:c0:ae:
49:68:55:32:46:e1:85:46:91:62:41:2c:14:cf:11:0e:25:d0:
87:fc:ab:65:97:8c:7a:4c:f7:8a:83:ec:f6:26:1f:97:12:88:
bf:cd:16:dd:68:9d:f3:ea:54:6e:41:3b:60:50:35:4e:2a:ce:
7f:18:1a:9c:06:51:9b:b8:e9:a5:24:4c:a1:a6:86:bb:7b:05:
08:b2:0e:4b:9b:82:6a:b7:71:f2:88:2e:69:5e:35:70:18:29:
20:84:a1:06:5b:94:ab:a8:9a:94:cc:4b:31:ac:e0:44:d2:4e:
cd:e1:7e:1e:66:0e:36:a7:9e:78:34:29:38:95:51:e2:5b:4a:
54:36:57:b0:e7:0d:cb:2b:46:21:2e:25:5e:b7:27:f8:5d:81:
dd:8c:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:36 2026 by rpki-client