Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: +WRYM6kfiGE54i5Qp9NQIfdjCrLtLL4+fIJVMwPQ4s8=
Subject key identifier: 9E:05:5F:68:14:95:B5:FB:7F:15:1A:AF:F6:2F:79:40:B9:29:1C:DD
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019CACB4CDF225184FF961CA778A9608AC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 12A9
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: QeJJPO0dOC2w7i39/eisUUmcopp/WYDYLI6K93lKnwE=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cd:f2:25:18:4f:f9:61:ca:77:8a:96:08:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=9e055f681495b5fb7f151aaff62f7940b9291cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:2d:74:e7:e5:44:63:0a:1a:46:af:90:50:
f1:20:b3:2e:3c:15:ee:51:dc:bb:65:29:77:03:a2:
9b:3c:bd:8b:2b:68:98:2b:57:ed:33:85:e3:22:ad:
c4:d5:63:a0:31:c4:6d:9f:f1:e2:6d:bc:8b:18:fd:
08:a6:dc:de:56:75:eb:a7:e5:fd:74:a6:21:65:d4:
4a:57:79:5c:53:cd:6c:f2:50:8c:27:fe:b2:1b:67:
cd:ea:2f:66:88:f0:cb:cb:db:be:58:86:a7:e7:9b:
a1:84:e3:87:8f:72:69:7e:ee:4c:72:41:8b:6d:ab:
2f:ba:ee:c7:85:ac:ab:f9:62:0d:b2:ef:a1:cf:76:
e6:93:4d:7b:d5:8a:31:04:09:66:a4:3a:f7:ae:8e:
0d:db:88:16:72:b8:74:68:b0:d0:83:9d:7e:ca:00:
5b:cb:79:1a:38:77:dc:0e:1f:60:57:e8:1f:bd:bc:
55:1d:ac:45:c8:f5:6b:56:5b:70:3b:49:c6:d1:0e:
db:d9:c5:58:31:4c:45:c9:7c:74:af:d5:ec:7f:3d:
a7:3a:0f:d3:c3:96:09:8d:19:a2:c5:9f:bb:a2:0a:
04:ea:63:d1:c2:ac:e4:23:1c:b7:f5:04:2d:bc:8d:
b8:d3:10:16:3b:dc:7d:11:ec:c0:4b:da:04:5c:ab:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:5F:68:14:95:B5:FB:7F:15:1A:AF:F6:2F:79:40:B9:29:1C:DD
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:71:fa:52:1f:2d:46:27:6f:55:ba:6c:70:20:7b:19:c1:0a:
71:6a:af:01:24:ab:d7:c6:87:27:56:6a:c9:f5:d0:43:c2:93:
a3:96:25:7e:f8:a8:16:5d:e2:16:39:5d:b3:40:72:98:f0:84:
e9:70:fb:e9:7d:8c:4a:d1:e1:52:f3:77:80:4f:ce:c3:81:e9:
5f:2a:c9:9b:f0:85:98:96:a8:06:91:03:f6:57:68:36:46:97:
cf:90:86:08:f9:07:89:75:57:0b:4b:8d:44:6b:fa:ce:31:a0:
38:f0:6e:19:d9:af:62:a6:01:dd:c7:e0:24:0b:c9:2e:4a:e4:
6e:fd:32:e8:29:a6:c2:d7:3f:f1:12:7b:02:3c:a0:21:e7:c6:
15:97:32:89:09:2e:bb:ee:a8:4c:0c:2b:a0:52:b3:39:50:c3:
32:cc:e2:de:f5:38:9a:f1:50:b6:88:69:aa:1d:ab:dd:67:ef:
59:fd:e1:aa:3c:6e:41:f4:5d:35:4a:dd:db:d5:74:d8:ec:d7:
3d:1e:b4:4b:2c:14:ba:83:0b:ef:65:90:77:91:e9:57:d8:38:
77:73:29:32:f9:40:16:e1:b7:2b:8c:ed:11:ea:54:13:cf:20:
b8:36:9a:a4:5d:46:fe:d8:f8:71:28:6d:51:f6:ac:68:24:c9:
49:a0:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:08 2026 by rpki-client