Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: JMVrzh6o8bVPyHgkpSSIGaY0/P+pOIIRD+DfxFeRRXE=
Subject key identifier: DA:FA:32:91:C3:9A:7A:75:F0:CF:0B:C3:3E:05:99:74:73:49:68:DA
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019CAB3487A6DBBFA3AE0BAB8EA9FF1453B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0EE7
Signing time: Sun 01 Mar 2026 21:01:12 +0000
Manifest this update: Sun 01 Mar 2026 21:01:12 +0000
Manifest next update: Mon 02 Mar 2026 21:01:12 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: KyUlxrW+TkIvBohCLDPiTBVWK0coKOXGk6aSA9jtqWA=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:87:a6:db:bf:a3:ae:0b:ab:8e:a9:ff:14:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Mar 1 21:01:12 2026 GMT
Not After : Mar 2 21:01:12 2026 GMT
Subject: CN=dafa3291c39a7a75f0cf0bc33e059974734968da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:c4:66:08:48:5a:bc:55:d3:c2:8d:69:c8:
c5:d2:25:74:85:e1:da:30:1a:68:36:62:96:d8:91:
c7:1d:24:41:c9:60:f7:c5:a7:6f:3e:ae:e8:f8:03:
ce:b2:ce:d3:fc:a1:78:14:df:46:43:c9:7f:8e:74:
61:26:6e:3c:98:8d:e2:f9:04:26:7b:32:18:97:30:
1f:e2:7c:27:4b:e6:19:4b:21:63:28:b5:89:9c:e8:
72:d0:8a:7c:f6:e5:1a:4a:c4:2c:8f:4c:dc:1e:b6:
4a:15:06:50:67:2d:4a:19:f0:0a:8f:99:d7:a0:bd:
1a:d1:40:77:22:cc:bb:57:7a:fc:f2:46:b7:92:df:
6a:61:d1:4b:48:9c:78:83:8b:ae:81:96:15:d8:4f:
bd:83:26:9d:3c:2a:14:44:13:04:82:3c:d9:95:18:
9e:72:ab:f5:25:e7:39:33:4c:20:88:31:9f:3e:fe:
14:e0:1f:e4:6e:3d:61:40:14:61:d1:e2:43:28:8b:
4a:a0:fd:3b:b9:a6:ae:8a:ad:7b:b6:46:35:27:2e:
2b:ce:91:ec:79:52:1f:c8:8d:d2:c3:e5:e1:c8:ec:
de:47:08:a8:0b:57:21:c4:9b:f7:c0:f0:49:22:e0:
0e:4f:81:0c:4b:62:ad:9f:17:93:73:8a:2b:82:cc:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FA:32:91:C3:9A:7A:75:F0:CF:0B:C3:3E:05:99:74:73:49:68:DA
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:b8:49:a4:5f:be:26:50:f4:71:87:16:32:29:d2:6e:8f:
e9:6a:36:b1:e4:8e:18:19:ec:3e:b3:8c:26:8e:91:b5:3e:70:
44:e2:43:a4:b3:f9:35:ae:f1:47:2f:d4:65:34:eb:f6:09:50:
97:ed:4b:4c:4b:cc:82:fb:e3:73:bd:ac:26:11:fb:b3:ce:de:
9c:0e:a7:5d:61:ed:ec:6d:cf:d3:01:40:74:e5:d4:6a:2b:77:
b3:6f:c8:93:29:3b:d6:00:aa:67:a3:b3:9e:06:8d:c7:3a:71:
4a:cc:b4:c9:5c:a9:5f:22:1e:18:59:41:a7:b0:c9:82:5e:06:
56:6a:77:dc:1d:4d:2a:0d:b9:5c:e2:20:41:cd:c4:07:ae:d0:
4d:d0:62:91:35:6e:95:ce:12:7d:fe:a7:b3:ab:50:2e:3f:83:
db:81:73:cf:2c:3d:21:cd:9f:0c:97:38:6d:65:34:31:32:4e:
e1:4a:7a:2e:03:6e:4d:39:35:3f:4e:02:55:22:14:c5:43:dc:
1e:2d:12:1c:c1:e6:b4:ed:08:0c:0e:16:a2:5e:b0:bd:47:54:
73:f2:42:f2:d9:77:0c:8a:18:7a:68:29:1e:02:7c:80:dc:c8:
c4:60:00:e6:90:b8:e7:4f:01:56:d8:48:99:ca:52:5d:2e:02:
26:97:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:52 2026 by rpki-client