Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: cviULgVrv51j03zIEyBu4i+AWb2k4Pl3RjwpmK1/Wp4=
Subject key identifier: B7:A8:58:61:7C:5A:B9:97:AC:C7:CF:15:A3:71:8A:61:5B:B8:00:0D
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019CAB6B4F4C1EB317AD23C71AFBA4E66592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0A1F
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: 27JDZtvs8xdihckpTjaw5mlGnPysmQPks/VdvXkFTdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4f:4c:1e:b3:17:ad:23:c7:1a:fb:a4:e6:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=b7a858617c5ab997acc7cf15a3718a615bb8000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:30:cd:29:fc:67:0d:bc:2e:2c:80:7e:34:
49:89:42:a6:d7:70:38:db:92:82:dc:5c:f5:48:03:
f3:6d:24:96:34:0b:6e:85:fb:1c:2b:fe:ce:5a:3a:
f4:6c:13:4c:02:c1:d3:fa:3f:4f:fb:59:0e:16:65:
74:04:cf:06:98:b5:9c:9f:95:8b:e5:40:3a:48:72:
59:a7:ca:ea:ac:65:b2:2a:0d:f3:71:5a:09:44:7c:
07:54:1b:06:3c:07:ab:84:d9:12:4f:f2:99:9f:0a:
cf:7a:f0:63:f0:e9:ec:51:63:fc:f5:45:0e:09:23:
03:6a:1d:38:e5:73:e0:b8:02:6f:fe:f6:f3:fd:ba:
cb:23:d5:90:84:41:23:81:1d:e1:00:e0:91:15:b9:
b0:3f:63:dc:bf:ef:45:46:22:96:ad:b8:f6:d0:c7:
5f:67:43:e6:01:e4:c4:d8:4c:4f:15:45:ca:84:af:
22:ab:46:48:c9:66:20:38:78:94:ec:d4:01:69:d5:
be:b4:0d:b1:07:2a:2e:c7:51:c7:5a:d3:e8:c3:7e:
5f:ce:30:c2:9e:bc:af:fd:ec:6b:86:b5:5b:27:f8:
1d:30:3a:03:43:64:b5:e8:f6:3e:8c:52:da:fe:58:
a7:c3:21:e1:7c:a7:b4:0a:72:db:7c:29:9d:87:e9:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:58:61:7C:5A:B9:97:AC:C7:CF:15:A3:71:8A:61:5B:B8:00:0D
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ba:d5:21:aa:81:be:f0:25:55:40:f6:9c:d3:bf:58:56:63:
47:96:b7:e7:6e:c2:db:3c:b5:f6:9c:e9:71:3f:eb:34:a9:28:
1e:3d:7b:af:4e:74:b7:eb:de:c2:ee:da:07:fe:01:48:ae:ee:
e6:8a:98:52:09:85:f5:34:a8:3f:37:ba:cf:cf:5e:f5:ab:33:
7d:41:3a:2c:ae:cd:70:5b:d8:2d:10:db:72:a9:84:71:92:d0:
d3:29:55:7a:4a:3f:0a:65:33:01:e8:be:a6:10:f5:c3:cd:5b:
b5:69:b6:37:16:70:7f:1e:45:8e:cc:19:58:0c:04:65:f6:2a:
7a:1c:ca:07:1b:4e:7e:05:9c:20:49:a3:7c:22:a7:23:d1:e3:
42:17:73:06:74:21:34:13:1a:3d:4b:32:89:8b:43:51:bd:54:
5f:be:91:f1:c9:14:72:18:fc:ab:37:c3:74:90:4e:b1:01:4d:
76:b3:57:8b:c8:0b:8c:0b:3b:e2:d1:3b:e5:e5:df:2a:44:18:
1a:5f:f8:7f:05:c0:e4:11:c1:e0:f8:bf:a0:69:d3:08:8e:a6:
67:b3:2f:01:0e:6f:98:cf:ff:80:1d:d2:da:6e:d1:5e:d1:67:
d8:ca:0b:0c:84:6f:80:45:82:d9:50:a0:76:8a:3b:4c:b9:28:
e0:77:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:05 2026 by rpki-client