Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: NFP0tqe9FwueAgNzd0BDKP5v4Cl455bq73Eo8pR0SG4=
Subject key identifier: 99:62:E0:DE:3C:D2:3B:F8:B9:CC:24:58:10:FC:94:B7:63:87:08:BC
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019CAA58A30238A3020B55497650E9F1A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 147A
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: UoN0uf25IRFEM48woXokXycuub553rFkhvoBy3vYvC0=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a3:02:38:a3:02:0b:55:49:76:50:e9:f1:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=9962e0de3cd23bf8b9cc245810fc94b7638708bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:83:83:ae:85:50:85:21:2a:d2:1f:a6:f8:
11:c1:29:67:07:c2:8f:c7:40:cf:27:f6:05:ae:5a:
23:e0:96:a5:3c:a6:0e:c2:75:6d:c6:09:17:8a:cc:
9a:33:dc:d6:17:0a:db:49:82:d8:e4:95:9b:cb:ea:
fb:fa:68:23:d3:d5:90:5a:35:08:d7:67:07:b5:3f:
b5:4c:99:e9:b4:10:f8:cc:18:db:24:bd:9e:ea:f7:
3c:22:1f:1b:13:56:03:55:46:f7:3e:4b:4c:54:e4:
55:de:3a:a3:a6:e4:87:5d:bc:c4:d6:6a:85:f7:58:
ce:03:4b:99:f9:fe:cf:59:3f:84:5d:08:15:7c:42:
1a:ca:8a:19:c1:84:d3:5b:95:5b:80:2d:2a:aa:17:
eb:12:ef:70:21:94:91:33:d5:ef:61:8a:09:81:43:
ac:1f:b2:2e:26:f5:f6:d7:86:a9:82:48:98:e0:e7:
38:cd:71:8a:bd:4e:77:a6:ff:b2:be:8d:82:42:4b:
fc:54:11:4a:29:2f:4d:cf:7b:97:6b:ae:38:06:48:
df:1b:4f:42:b6:b9:76:ef:f5:5e:d7:3c:cd:f7:6a:
04:3d:73:a7:e0:c6:bd:a9:b6:15:87:d0:f3:bb:a6:
9d:ba:3e:9e:91:86:7f:ff:ff:ab:4a:55:72:05:c6:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:E0:DE:3C:D2:3B:F8:B9:CC:24:58:10:FC:94:B7:63:87:08:BC
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:25:c2:9d:f1:d0:dc:11:5d:6e:f2:c6:fa:25:24:6a:4c:
48:c3:42:58:30:ff:4d:0f:b1:2a:cb:11:5f:69:7c:60:f4:47:
80:c3:2f:ea:b4:b9:85:ad:c7:19:61:64:76:ea:b9:f8:87:f5:
86:fa:1c:10:55:6a:5d:a8:3c:0d:08:f8:63:f4:f7:ce:84:b5:
b5:e6:eb:21:68:0e:b4:c8:0d:2e:2e:54:f9:a1:2e:5d:d9:88:
ab:49:a2:10:cc:87:4f:61:45:d4:8f:c9:6b:73:fc:ee:71:d6:
a6:c8:4a:5a:c3:78:7a:dc:99:39:ee:a7:7b:00:bf:e9:60:93:
b2:53:6e:d7:52:4d:fd:70:ca:f6:a8:33:8a:bc:4e:88:e9:ab:
0b:2f:c0:0e:78:b1:25:9f:58:55:f9:ff:a7:9f:f6:d9:2f:97:
92:1a:84:bb:ea:8a:25:36:b3:b8:5c:b7:d7:52:df:e3:c4:c3:
49:0c:2a:ac:db:5c:92:e6:eb:78:cc:88:a4:7b:da:cc:6f:63:
2f:55:dc:04:68:8d:e0:d4:54:1d:5b:5d:ab:62:ab:d5:12:69:
7f:df:e6:97:16:0a:47:73:0e:a9:1f:2f:14:8a:9e:ac:e1:30:
04:85:4a:b9:32:22:bf:39:18:b1:9e:f8:94:9f:da:d3:ba:41:
cc:95:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:50 2026 by rpki-client