Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: s2Yn6DH1sA1gUW920paczIZCi0Bq8nkzu2BDyHN4g08=
Subject key identifier: 7F:82:7D:AD:AF:FC:CE:13:06:0E:25:7D:C8:A9:5B:22:B2:4A:76:BB
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019CAD903DF2AF0539E5037978A0B72F4265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 1183
Signing time: Mon 02 Mar 2026 08:00:37 +0000
Manifest this update: Mon 02 Mar 2026 08:00:37 +0000
Manifest next update: Tue 03 Mar 2026 08:00:37 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: k9PhUPmIaYrHq8ntuP3iE0sbkBOMNUjT34SYCNnH9Jw=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3d:f2:af:05:39:e5:03:79:78:a0:b7:2f:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Mar 2 08:00:37 2026 GMT
Not After : Mar 3 08:00:37 2026 GMT
Subject: CN=7f827dadaffcce13060e257dc8a95b22b24a76bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:76:33:60:6b:4d:03:68:cd:53:6f:24:8b:
96:89:a4:e5:c9:bb:e0:af:13:2a:ee:54:1e:6e:f8:
37:9d:90:1f:59:c3:df:ff:29:64:07:4c:64:22:46:
65:43:0f:70:61:bc:de:f8:72:e5:cb:d9:5a:2f:21:
cb:ef:8c:dc:40:0c:55:69:5a:f3:a4:2a:b7:10:2a:
b0:3a:53:b3:44:3e:c6:ad:3e:64:23:af:cc:66:68:
74:67:f9:16:4a:73:a2:51:ad:7c:c8:ca:59:5a:3d:
15:d7:18:de:a6:c1:e3:33:d5:98:fc:51:28:16:07:
a5:22:35:90:3e:7f:34:51:60:bf:7f:0f:01:ad:bf:
ae:09:44:65:0e:ea:bc:7f:16:5d:dd:5c:5b:7d:53:
67:35:a9:b9:7f:76:58:46:b6:7c:ce:76:81:e0:99:
b6:98:53:3e:ec:f3:a3:ca:1a:c0:62:ff:bb:af:4b:
92:8b:9c:2c:56:14:5f:18:40:da:68:11:61:da:62:
c6:3e:96:69:1d:15:b6:85:ab:1a:0c:b9:8b:50:a6:
05:53:14:dc:a3:56:8e:cb:25:e6:73:bb:9e:1b:3f:
63:05:2c:1d:f0:64:b1:30:ad:ce:50:27:5a:2d:95:
f8:89:30:b8:21:9f:ff:45:41:f9:88:07:30:77:66:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:7D:AD:AF:FC:CE:13:06:0E:25:7D:C8:A9:5B:22:B2:4A:76:BB
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5d:4d:57:3e:3c:3b:a0:b6:6a:ca:8f:09:22:38:09:d6:b2:
b9:af:e0:98:c4:1b:fb:e2:b9:2f:27:9a:b5:db:b7:29:24:15:
16:73:cc:65:a4:18:30:8c:19:ae:61:ea:fb:f5:7b:5b:05:7b:
d7:80:b5:e8:b6:a7:52:61:1c:bd:e4:e2:f3:ed:a2:37:e3:e2:
a8:ce:82:a2:fc:5d:22:1b:00:96:fc:2b:f8:6a:89:29:c6:68:
87:a2:81:82:b8:e0:e2:f6:ed:79:22:d2:e2:4e:9c:f0:aa:a4:
37:27:24:86:b0:3e:a5:ac:fd:5d:76:fb:21:f7:9e:43:83:d9:
df:51:62:6f:d0:0f:e0:31:04:d5:dd:31:68:8b:8a:34:2b:8b:
1b:fb:ba:96:eb:67:d8:cc:e1:e2:d3:da:dc:2d:f1:e4:7d:b4:
01:fe:61:a9:fb:46:2c:fc:6e:de:eb:3c:b4:75:6d:4b:7a:04:
89:3f:ee:46:3a:52:c4:bc:24:b1:8c:37:3c:2c:19:62:b0:b9:
17:7a:a1:88:e1:58:64:35:4e:45:28:3a:32:b8:3c:af:d9:de:
e0:7e:cd:f1:df:2e:21:06:9e:28:cb:db:5b:c9:f2:44:e5:c1:
b9:fa:73:63:8d:46:66:98:57:4e:62:2b:8b:ed:8f:1b:64:10:
38:61:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:37 2026 by rpki-client