Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
File: rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft (raw, json)
Hash identifier: MHUvdnDi44btXLndcBKTh/n95T3VXpttUShD4un4nUw=
Subject key identifier: 7E:28:8A:B7:51:AF:86:9C:C3:9D:E6:AC:85:BC:EB:55:AC:36:5D:C9
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 019CACEBF5D9BBA62A6793897542DA7AF153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
Manifest number: 0C56
Signing time: Mon 02 Mar 2026 05:01:10 +0000
Manifest this update: Mon 02 Mar 2026 05:01:10 +0000
Manifest next update: Tue 03 Mar 2026 05:01:10 +0000
Files and hashes: 1: 24WxHxaeAmm5E1Q3Id3rg_qvvPY.roa (hash: cVrKb1vSqi82yPVZCgvu5xU3xXbeXHexmU9eyiwbU3E=)
2: rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl (hash: 99Wwso3BtK/vap65Y3vEt34HtYSO9fudjwz3EYvZOdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f5:d9:bb:a6:2a:67:93:89:75:42:da:7a:f1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Mar 2 05:01:10 2026 GMT
Not After : Mar 3 05:01:10 2026 GMT
Subject: CN=7e288ab751af869cc39de6ac85bceb55ac365dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:e9:3e:b1:00:33:f9:74:40:d6:5e:7c:c2:
08:f7:08:17:43:b9:6c:e9:7f:3b:58:a8:52:af:cc:
d7:f2:58:74:49:22:44:cd:9c:7a:b5:f3:81:75:56:
08:16:11:5a:0c:dd:6a:9c:1c:3d:02:89:20:be:50:
ce:26:d7:67:3a:f0:f1:1c:43:1d:16:d2:6e:e2:be:
0d:de:e4:6b:dc:46:ec:69:10:f3:4f:1a:a8:ea:b6:
da:8c:b6:0c:55:50:9e:f6:4d:53:58:d0:1f:93:86:
4a:6a:49:d3:f0:24:b0:c6:7b:10:74:d2:65:c2:9f:
82:ff:be:a8:de:17:c4:0f:55:3a:81:cd:02:53:27:
41:ac:fb:a0:a4:dc:0e:af:0f:5f:3a:90:2b:32:71:
ab:ae:6a:00:3d:ef:66:e3:29:4a:35:a4:86:14:7a:
d7:10:d8:f3:1d:2e:72:04:e1:4d:f2:8f:d3:75:8e:
68:03:b0:e8:ca:36:b5:fa:89:1b:da:ed:cf:f1:67:
07:2f:9e:52:bd:d2:03:9c:d4:1a:c3:b8:f7:82:1b:
b0:f5:c0:8b:97:c9:5a:28:39:70:f7:c3:9f:36:86:
da:d3:6c:3a:79:a6:46:f7:34:44:4b:ba:ea:59:f9:
09:d9:d4:31:9d:2d:95:8a:32:10:62:b7:50:68:b3:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:8A:B7:51:AF:86:9C:C3:9D:E6:AC:85:BC:EB:55:AC:36:5D:C9
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b8:e2:38:77:39:1f:f0:a6:23:a7:c2:cc:1d:af:e4:af:11:
86:23:06:cb:1f:c6:10:08:df:26:0c:11:d7:78:de:0c:d5:c7:
b8:87:d4:c3:27:6f:5f:2f:93:06:9f:36:7f:05:cb:f2:26:cd:
8b:de:04:82:ba:6d:64:c6:b3:1f:92:e4:51:f5:7e:f6:61:f9:
c8:c2:96:d2:4b:8c:21:1d:95:7c:50:31:61:9f:5b:37:11:e9:
fa:d1:1c:ae:63:ed:d9:96:a4:a8:1d:18:8f:6b:c2:ae:e3:54:
0d:24:d8:e8:f1:e5:b8:34:da:f7:88:1f:4c:0c:f8:7f:f1:95:
04:20:6d:16:21:d9:54:52:b1:72:c8:38:d1:46:d0:45:86:87:
49:cc:b4:ae:7b:9f:3d:49:a7:ee:36:a5:7d:90:0b:db:87:54:
ca:8f:2d:3f:f2:5b:c0:77:f6:6a:df:1c:cc:72:52:7a:35:12:
0f:9f:c1:81:52:36:23:7b:9f:af:05:5a:04:97:5b:8d:54:af:
65:e6:99:32:af:26:d3:d4:a1:d7:36:d1:a0:53:c7:33:77:26:
2f:51:bd:3e:e8:7d:d7:a8:2a:65:b3:f6:08:18:03:8e:aa:8f:
e9:f4:44:29:e3:7c:3b:a1:58:7f:15:66:3f:d9:6b:71:39:98:
2b:50:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:41 2026 by rpki-client