Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: HZTPOenfqssQQy6VRR7b60c2XXHRw+W2AXOIFaxhpkI=
Subject key identifier: 9D:CB:90:09:F5:F9:0B:EA:47:92:84:F5:CD:D4:31:E1:6E:3C:E6:6E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019CAB6BA86EA04F4F0B149966207F1682C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 09A4
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: pYlNo2cnPHROfH/4Mu9UgvlxsMltOH9uIl/Fhntrkbw=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a8:6e:a0:4f:4f:0b:14:99:66:20:7f:16:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=9dcb9009f5f90bea479284f5cdd431e16e3ce66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:7f:0a:07:eb:1d:5a:b5:e0:a1:c4:0d:7f:
29:89:13:b7:9c:6b:43:17:aa:0d:6d:de:18:9e:2c:
bf:d0:e6:b3:c5:19:3f:ae:e2:3c:2e:ec:a2:ef:94:
a9:16:07:04:e6:25:2e:98:7f:02:62:96:5f:25:2d:
fc:88:2e:99:65:46:3b:52:e4:12:64:c1:a3:8c:ec:
57:05:31:0d:f7:14:c2:8e:b7:3b:38:98:c4:84:47:
7f:43:44:04:1d:d3:3a:cc:91:7c:16:42:78:75:1c:
c8:ff:bb:af:08:b4:d8:93:cb:50:83:55:13:1c:ec:
ef:12:2c:00:3d:4d:09:25:20:5a:74:61:0e:7d:d6:
4e:78:7e:9f:1b:40:44:cf:86:28:b0:1d:52:25:5f:
c0:5b:11:a9:60:ef:14:e6:4d:b0:0a:36:8f:e8:6a:
44:4d:ff:a5:67:e9:d0:aa:cc:7e:85:b1:6d:8b:0c:
56:ba:fc:13:37:77:f0:c4:99:f3:aa:fd:30:fd:80:
15:97:80:32:78:20:12:03:5b:7c:b2:02:54:42:78:
dd:ca:cb:cd:eb:af:1c:0f:e6:ec:f6:97:ea:70:4d:
2f:ec:b8:5c:0e:24:d4:d3:03:e3:e0:e5:f9:8e:73:
79:32:96:93:b0:9f:e5:7d:12:8f:f9:54:ee:b1:76:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:90:09:F5:F9:0B:EA:47:92:84:F5:CD:D4:31:E1:6E:3C:E6:6E
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c6:41:97:0d:b8:23:77:7b:43:47:7a:da:92:43:ab:8b:a9:
87:c5:74:2e:8c:96:69:3b:80:a5:34:3e:aa:21:d7:65:4a:c8:
c1:31:8b:76:1a:03:2c:f6:03:04:63:f6:f4:b7:21:a2:88:b6:
35:36:ed:00:2f:1a:08:c4:0d:12:fc:7e:d8:61:a4:2c:b1:0c:
83:47:10:7a:7e:95:30:dd:7f:78:c5:41:d1:58:80:af:3f:11:
03:e2:32:14:61:87:cb:a1:d7:d5:9f:e2:7b:7b:40:2a:2c:23:
29:19:e6:98:18:d7:d8:35:01:cd:68:d5:c4:93:b1:b7:0c:dd:
38:13:a7:25:c7:37:62:e2:d0:d0:7f:81:8b:71:26:ee:7f:a0:
b2:da:9f:f0:4a:4d:a6:a8:54:18:bd:8b:e9:85:2c:82:bd:2b:
04:8c:d9:f0:41:a6:1b:2e:5c:76:3a:bb:81:5e:ad:9a:f0:9f:
8c:03:07:12:b4:1c:21:46:fb:3f:bc:a7:89:89:b1:d1:94:bf:
89:e7:50:62:ef:7b:c4:ab:1b:ef:fd:0e:b6:00:b8:49:a8:38:
d4:5a:4b:39:bb:86:6b:a4:80:47:e0:11:35:27:e9:ef:f6:70:
c4:c7:b2:ae:cd:1d:6b:aa:fd:5e:6e:63:8e:62:5f:b5:84:f6:
5a:90:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:14 2026 by rpki-client