Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
File: aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft (raw, json)
Hash identifier: GYkKJBTXKjSJwt+Wel5MInMGYnTSYaVgILPal5ok/xs=
Subject key identifier: 73:A6:5C:9B:C7:B1:70:B7:3B:56:13:50:B6:B4:CF:5D:B8:A0:1D:F1
Authority key identifier: 69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
Certificate issuer: /CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Certificate serial: 019CB0C838472984DA2176720A5D8B131E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
Manifest number: 35
Signing time: Mon 02 Mar 2026 23:00:37 +0000
Manifest this update: Mon 02 Mar 2026 23:00:37 +0000
Manifest next update: Tue 03 Mar 2026 23:00:37 +0000
Files and hashes: 1: aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl (hash: 1nkODpk3Hh/DIZdzyDz5WiW8zypBjWtZZQdR2DqJpcw=)
2: iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa (hash: A/Iygha2SGjwHmAbZm3zd/UIf3Y/PB7zRPxZUCvbMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:38:47:29:84:da:21:76:72:0a:5d:8b:13:1e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Validity
Not Before: Mar 2 23:00:37 2026 GMT
Not After : Mar 3 23:00:37 2026 GMT
Subject: CN=73a65c9bc7b170b73b561350b6b4cf5db8a01df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:e2:17:af:40:06:26:3b:01:e7:4e:92:37:
ef:b6:69:87:ad:29:4c:fe:f0:57:a9:ab:aa:35:30:
36:f3:b6:27:c0:f8:90:b7:26:59:d3:38:28:24:65:
82:7b:7f:3e:8b:4b:7d:af:5b:99:be:6a:b2:d3:68:
bc:e6:a3:f3:f6:46:70:93:85:ba:cf:d2:91:5e:43:
34:4d:33:92:c5:97:74:de:96:6a:5a:78:82:78:0d:
04:f5:c1:1f:3f:dc:64:24:1d:59:4c:c6:2f:2c:e3:
03:86:2e:99:fc:4b:84:5e:68:48:0a:eb:26:2b:1b:
bb:dd:a9:5b:8d:b8:88:58:12:52:fe:5a:d6:73:d7:
5b:f8:00:bd:45:17:da:bd:bf:8a:8b:47:ba:48:42:
40:4e:c2:b3:96:31:a4:10:9a:3e:40:9f:c4:fa:45:
03:11:f8:a1:e8:73:47:bd:70:81:b2:9b:8a:b7:cc:
e4:e2:ed:7d:23:2f:77:b1:21:20:a5:65:c3:22:5a:
24:22:2f:0d:7b:d1:4d:25:17:53:ed:0a:ad:96:02:
09:c5:88:ad:04:2c:28:16:57:b5:d2:30:96:7b:3d:
47:ce:e4:b0:85:ea:dc:a8:66:b5:0f:c3:19:b1:17:
8e:94:16:45:9f:e9:f0:3b:30:9c:b6:30:1c:77:91:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:5C:9B:C7:B1:70:B7:3B:56:13:50:B6:B4:CF:5D:B8:A0:1D:F1
X509v3 Authority Key Identifier:
keyid:69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:ee:df:e3:15:6d:19:1c:8c:06:b0:5e:bc:eb:75:c4:85:
f9:2b:3d:ab:ba:bd:6e:d9:e6:3f:3f:45:c8:59:f7:3f:f0:6e:
15:af:7f:57:07:62:7f:ea:9b:a9:a2:2b:3e:1b:6a:8b:30:60:
1b:88:3e:cb:fd:82:1f:01:d8:b7:a7:f4:d2:a8:c1:1d:9d:10:
99:a9:5f:9e:d8:39:0a:4b:d6:e6:4f:d4:2b:43:47:ee:7a:bb:
6c:58:74:f3:a6:64:09:9c:8a:d8:39:9a:86:83:85:ec:cb:dd:
04:d3:e2:7c:f0:59:8a:2a:60:b7:05:f5:ba:b3:f5:b6:e9:1f:
41:e6:1d:30:6c:8b:21:e9:19:83:d5:0a:cd:04:82:6d:e8:e6:
0a:c4:94:f9:ce:21:de:cb:06:6f:fc:7d:1e:2e:be:0d:6e:7d:
f8:af:ea:ca:e1:ce:d3:ae:cf:b4:2e:85:c1:23:df:e7:a4:da:
32:b0:b5:9f:2f:aa:66:90:30:f0:31:7a:b3:3d:2a:b2:21:8d:
52:55:b6:92:67:20:af:d7:72:a8:d7:36:1d:89:f7:9b:1e:d8:
4f:98:ed:4e:8a:c6:38:0f:a6:15:c3:e9:7b:93:8b:70:d5:7c:
a0:5f:e7:55:0f:18:0f:fe:df:13:b1:4e:25:19:09:27:32:9a:
d1:ea:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:38:48 2026 by rpki-client