Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: JeMwXqOwfECEWGRR9WTiO9aWu/VINp3r+PdFUAbYbfQ=
Subject key identifier: 57:A2:04:C0:2F:2F:E3:16:C4:80:42:C9:DF:3C:67:F1:B4:E0:D1:F5
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019CABD93F707FF203FCBB0BBED9F3494953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 0772
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: PuKMHQHhcI7r/VGbkNcdSqXtK9IM9Wam/jCvE/5A4ws=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3f:70:7f:f2:03:fc:bb:0b:be:d9:f3:49:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=57a204c02f2fe316c48042c9df3c67f1b4e0d1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:4a:b0:ab:64:ff:92:70:24:e7:1b:85:4e:
a8:1a:f1:18:bf:ef:fe:29:eb:90:3c:d0:c9:ab:83:
7f:c2:f7:79:72:b9:dd:e0:d2:7a:7d:66:70:4a:d2:
b5:39:98:fc:3c:01:50:bc:77:d6:e7:f2:d2:35:47:
83:7d:bd:fd:e0:08:39:02:cc:83:64:1b:9c:a2:1f:
5d:f0:67:57:36:26:ac:27:6e:5f:bc:8c:20:9d:8d:
91:e5:7b:be:7b:6a:25:a5:73:60:df:45:74:62:d9:
43:a4:d3:2a:2f:87:45:3d:ab:0a:2c:38:e5:db:b6:
83:01:95:fd:51:96:f2:2e:8a:e6:0e:e5:38:3c:6f:
46:c1:ee:b2:8b:c0:57:72:c9:58:cc:14:a2:b3:b5:
fc:8d:c8:10:23:7a:2b:17:c4:8e:37:17:84:6d:a2:
53:29:bf:25:a4:f2:4a:11:69:37:a3:96:92:00:e6:
5a:f3:d2:1a:09:55:86:80:5b:9e:b1:2f:c4:56:b8:
89:4c:cb:e8:db:5e:9b:95:71:06:03:83:05:32:5c:
8f:c4:66:a2:c5:4c:33:c0:32:1f:56:c8:ae:89:fc:
05:7e:7a:d7:ce:bf:db:78:19:ba:6e:52:32:91:c0:
af:a1:8b:77:05:21:1d:d7:27:8f:28:8d:e0:f0:07:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:04:C0:2F:2F:E3:16:C4:80:42:C9:DF:3C:67:F1:B4:E0:D1:F5
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:8c:41:5c:5e:aa:49:64:1f:06:c8:14:da:e3:60:45:15:
14:12:a4:6a:ae:25:56:0d:78:52:dd:70:35:7b:c9:dd:83:a5:
84:2c:42:80:dd:11:9b:68:5a:93:dc:27:a1:ee:f4:b1:d3:1f:
fb:27:e1:ac:0b:f3:37:0a:be:2f:9b:e6:ae:15:62:01:72:5e:
36:d2:50:d7:78:01:9b:7c:dd:ab:43:88:de:8f:60:42:ec:09:
cd:b2:eb:86:52:34:d0:4f:e0:99:b4:7d:6e:c6:52:95:e8:52:
98:44:81:bb:e3:c8:cc:16:c1:7f:74:da:60:e9:ab:16:2a:ca:
2b:af:28:54:b4:9f:be:fe:5c:f4:6b:c2:01:dd:f9:b4:c9:43:
92:8b:d0:ac:f4:c6:88:b2:09:7e:6c:cc:ab:23:e2:3f:9e:ef:
3a:e3:43:1c:a4:75:f5:1c:60:82:e6:42:57:38:b0:b9:4c:7c:
2c:5b:23:36:5a:22:20:61:c5:a9:57:7f:20:55:0f:2a:17:d9:
b6:45:ab:36:ad:31:e9:04:85:14:06:37:92:3e:0c:97:77:20:
b4:4a:af:c3:a6:f8:3c:0e:28:f3:99:fb:fc:c3:35:61:3b:5d:
32:94:09:98:2b:67:c8:1c:fa:c5:7d:96:7a:0a:d5:2c:d4:ac:
86:f5:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:21 2026 by rpki-client