Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: GyqZRv1ab2qD+x0hXEAx9A/6Gq+7dJIrHs9BgiGDZXM=
Subject key identifier: E8:11:41:12:4A:BB:B1:C4:24:FA:98:E3:EE:5A:6F:3D:ED:AA:2E:91
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019CAD5A35D922C2605CA45C6B0FCC5DE859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 0285
Signing time: Mon 02 Mar 2026 07:01:36 +0000
Manifest this update: Mon 02 Mar 2026 07:01:36 +0000
Manifest next update: Tue 03 Mar 2026 07:01:36 +0000
Files and hashes: 1: KEev86svpAueO8veqiaCNQVfz30.roa (hash: RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: z+j5LR8Ob4S9QsbCHYlddwGH6sGNR2HC84rGbMtPthQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:35:d9:22:c2:60:5c:a4:5c:6b:0f:cc:5d:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Mar 2 07:01:36 2026 GMT
Not After : Mar 3 07:01:36 2026 GMT
Subject: CN=e81141124abbb1c424fa98e3ee5a6f3dedaa2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:75:33:1d:f9:82:64:35:d0:53:33:0d:9c:
f9:af:66:f5:06:ee:f7:65:a7:78:1d:9f:bd:61:fc:
a1:b5:db:4c:5c:7f:51:bd:21:2c:be:a5:d3:1b:5b:
8d:ad:0b:1c:ea:7d:0d:9c:44:b9:0a:c1:9e:8d:72:
14:79:e9:be:3d:de:8a:32:91:d9:78:9c:41:56:08:
7f:3b:e1:c9:93:3a:14:06:be:87:a9:58:1d:9c:75:
e9:8c:66:76:c0:3d:f8:3e:a7:21:ee:2d:57:3b:26:
9c:7d:13:2c:67:1e:32:01:58:fb:58:81:95:4e:a3:
9a:37:02:b8:3c:83:03:54:59:f9:b1:da:0c:9b:da:
9c:77:db:12:bf:8c:8d:b0:3e:10:ff:5f:13:8a:a6:
7c:89:32:97:1b:0f:b6:6a:d2:3d:8d:b2:83:e6:c5:
1b:85:f6:a4:81:9e:e1:2f:0d:8f:3c:8d:41:fe:6f:
fd:13:07:31:1e:df:89:de:f3:15:a2:8a:df:56:a9:
38:b8:82:72:ec:2e:0c:94:89:7b:35:bc:3e:eb:8a:
31:49:41:79:77:7c:30:72:21:fa:d0:c4:ff:80:1e:
79:66:9c:42:59:9a:c1:3c:ef:73:6b:7b:ba:49:7d:
39:4a:13:b9:e4:54:27:ca:24:d2:45:be:ed:fd:a8:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:41:12:4A:BB:B1:C4:24:FA:98:E3:EE:5A:6F:3D:ED:AA:2E:91
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:00:29:51:b9:d6:87:ae:5a:a1:1d:88:4f:63:7c:d1:54:69:
ee:c8:9b:62:1e:06:d6:99:9a:cf:7d:ce:3f:a6:27:60:d7:ab:
63:f9:cc:39:b2:69:c2:38:db:02:0f:b0:40:4e:d5:b9:92:b0:
a9:e7:88:66:7d:39:24:f6:2d:83:b5:01:3c:7d:ed:80:c2:c9:
c3:a8:27:33:27:83:1a:45:ec:cf:e8:8c:a4:75:71:eb:2c:e4:
2f:bd:55:4a:49:80:6e:5e:b4:e4:d1:fc:61:e4:cc:df:0e:6e:
26:a7:c2:35:9b:a9:8b:33:06:23:a6:c7:eb:e1:74:f7:3e:41:
c0:9c:20:c3:41:11:3d:ce:20:68:5e:55:34:6f:7e:43:a8:82:
6e:30:a6:11:96:b4:6c:59:cf:7e:e5:55:14:ab:a9:26:55:f9:
ba:aa:33:db:fb:d6:c5:45:66:d3:6e:52:7d:4b:4a:56:69:6c:
17:3a:db:63:9e:72:ce:59:c4:d4:a9:e6:9d:26:e6:11:7f:4c:
06:ea:ff:65:2b:75:fc:3f:0d:f7:25:3e:5e:d4:c7:dd:87:a2:
b2:80:c9:04:f9:6a:ee:3d:54:0f:b8:31:82:c9:1f:2f:e5:5c:
f3:0b:24:a1:b7:43:50:1e:51:d5:18:ef:b1:45:b7:1c:31:2a:
3c:f2:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:45 2026 by rpki-client