Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: Nypvs1ya/eVYoqLkSxbBFmB6vMx5DvHQpMozYscjhRU=
Subject key identifier: 40:29:4F:D5:39:57:9E:9A:F5:E9:3B:85:F6:48:8C:F6:0D:D8:C9:EF
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019CA9EABDDA00F1C1D28BD26BDD52D37627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 15:00:59 +0000
Manifest this update: Sun 01 Mar 2026 15:00:59 +0000
Manifest next update: Mon 02 Mar 2026 15:00:59 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: iXKCEH/2ve0ZMwfdtmx+8wci0+ffaSD9icqAgpMNnRc=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:bd:da:00:f1:c1:d2:8b:d2:6b:dd:52:d3:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Mar 1 15:00:59 2026 GMT
Not After : Mar 2 15:00:59 2026 GMT
Subject: CN=40294fd539579e9af5e93b85f6488cf60dd8c9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:b7:ad:af:d3:f4:c9:e3:1b:e1:eb:22:46:
2d:60:dc:00:37:34:86:49:53:cd:c3:b3:4c:14:35:
16:81:df:12:06:48:8a:d6:9c:a4:a9:eb:15:d0:a9:
0f:0b:97:93:bc:f5:2e:21:c2:35:c2:85:7f:cd:67:
24:d7:cb:60:4f:26:ee:68:c3:15:5e:58:a8:d5:21:
ab:68:ef:74:b3:ae:b8:4b:2e:ce:5d:00:bf:41:a7:
70:a4:2e:49:69:36:ab:b6:74:65:77:2e:00:ce:7e:
02:c6:b7:5c:b0:7f:56:65:57:2c:9f:38:27:03:3b:
89:c9:e7:f2:e5:fe:78:b0:c2:9c:77:38:a6:85:d0:
40:b0:9b:48:c5:4a:96:c9:b4:53:f1:28:23:b6:67:
1e:df:50:ed:41:d2:aa:8e:ef:4c:9d:31:ff:ea:fa:
c9:3d:ab:2e:97:49:88:fb:fa:64:15:63:a8:e2:0f:
1b:d1:69:ea:bc:bc:53:13:f8:f0:1e:bc:eb:dd:63:
aa:ed:ed:24:de:ba:d2:22:a8:df:45:ae:83:db:62:
03:05:c3:ac:e3:fb:62:f5:66:d1:0b:26:f3:67:fb:
08:74:df:b2:33:fc:41:1d:52:d6:48:35:6f:e4:d0:
85:67:1f:c0:bb:05:26:20:70:bf:20:70:cf:38:56:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:4F:D5:39:57:9E:9A:F5:E9:3B:85:F6:48:8C:F6:0D:D8:C9:EF
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:60:ee:9d:25:fd:12:e4:f7:19:08:60:44:85:2a:1b:ac:
a1:50:c6:13:a9:fc:67:fd:b1:8b:7d:3d:f1:be:79:32:f4:00:
bb:12:e8:10:a4:62:45:c8:36:0b:dd:52:1c:8b:0c:97:c0:5c:
7d:81:00:3b:da:e4:17:2f:40:89:cd:73:68:e5:0f:11:9f:f5:
f5:e7:e4:48:8e:dc:8a:0d:ab:ea:10:53:18:48:8e:ab:f6:f5:
a5:42:d1:7a:66:75:7b:40:cd:0d:9d:29:3a:42:5c:27:7f:45:
50:af:0f:61:06:b3:2f:a8:98:d3:60:4c:a8:f1:e4:39:f2:7e:
b7:c2:e6:18:d3:05:77:db:98:37:1a:1b:e6:2e:a1:17:8f:fb:
2b:aa:a4:a2:3a:ae:f9:1a:5b:eb:cf:40:17:19:e9:a1:b7:ab:
e6:e1:39:58:0a:e5:cd:75:73:21:17:3f:2c:d9:54:4f:a1:e4:
59:22:af:ce:63:a2:bc:53:c1:c5:f7:90:1c:58:90:ce:a0:82:
9c:0e:a7:91:5e:06:f5:94:b9:bd:f5:00:85:a4:a4:14:bf:fe:
38:07:b6:e1:ce:9b:96:32:a7:e1:91:8a:15:cd:a9:fc:59:9a:
50:86:b3:8f:30:ec:9c:70:98:ff:29:8f:da:c1:4b:5b:82:16:
f6:2c:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:53 2026 by rpki-client