Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: YbZZBHIUKeciNqGeUonQ+kXiZVpVexNYRuToY1YXmX0=
Subject key identifier: 03:16:43:52:03:F1:2B:B2:A7:ED:D4:52:64:F9:C0:E3:B6:10:23:5D
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019CAAC6A88B8FD28C68912D6D02CC663462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
2: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: cksDhv1babVl9jWWxuHgTHZKfggMm122ZEal/BprZnc=)
3: rXih05-yjhK1RRUZMN39mSUsOFU.roa (hash: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a8:8b:8f:d2:8c:68:91:2d:6d:02:cc:66:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=0316435203f12bb2a7edd45264f9c0e3b610235d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:e0:5e:3c:eb:43:b4:05:2d:63:e8:7f:be:
d2:c6:f8:04:6b:bb:ef:4b:56:da:f1:38:cb:77:59:
49:b3:05:d3:53:1b:0a:d5:5c:b2:c7:d1:90:7f:62:
cd:e0:89:e0:2e:d8:33:2b:b9:45:39:01:20:e9:c1:
d8:5a:19:e1:73:8e:fe:21:34:2f:91:89:23:18:3c:
79:2b:e9:f3:e6:43:89:fe:0f:a4:b9:3b:8a:53:e8:
f0:2e:ba:40:ee:8f:b9:9e:a7:c6:c9:b9:f5:b0:4c:
07:df:7e:77:f1:d9:d6:45:90:4a:fc:45:b7:98:0c:
2c:96:d3:f8:73:88:27:2f:4a:9f:d6:83:e9:6a:46:
27:1f:a2:a8:73:a3:e9:7f:a9:d6:c2:87:fc:22:a4:
58:90:2a:2d:aa:8f:e1:13:43:7c:08:6e:e6:9c:95:
f9:3d:db:af:70:4a:67:71:f0:1b:44:4e:09:c3:a2:
39:f2:23:65:b0:20:ac:48:ff:4d:0e:22:a6:27:23:
f3:7a:50:76:35:b6:f2:11:23:fb:39:fa:3a:98:46:
cb:be:d7:dd:8f:06:cb:65:82:47:e0:69:f9:bc:7f:
90:89:a4:7d:9e:28:61:72:f1:74:30:99:6b:74:fa:
f3:48:6c:f4:dd:b5:8c:1a:3b:86:fe:ee:00:de:e9:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:43:52:03:F1:2B:B2:A7:ED:D4:52:64:F9:C0:E3:B6:10:23:5D
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d0:72:35:12:86:ea:54:4a:b3:d2:f2:b1:4b:f9:75:e4:de:
41:1a:84:73:05:59:ac:ec:0d:ed:21:17:5f:be:d1:fc:9e:18:
e5:10:72:51:3d:f5:04:f3:14:ac:7f:9c:96:9d:74:93:13:d5:
d1:a8:1e:1d:7d:69:fc:7a:77:96:e0:58:ab:91:21:14:f6:e5:
61:d2:17:83:50:bd:b9:ee:82:3f:f4:7c:43:c9:f4:0c:15:9c:
7f:a3:b3:e1:c5:97:93:56:b7:15:b0:28:38:d7:1c:11:c3:15:
4c:f5:c8:6c:93:4a:60:ef:9e:46:bc:2f:43:8e:58:9d:3d:da:
f7:31:40:5a:38:a4:64:17:e8:0d:25:d1:1f:89:1b:e6:0c:48:
cf:e8:19:10:51:50:83:54:c0:d2:3d:74:25:08:14:05:3e:5c:
3d:44:b9:39:ca:74:13:26:ff:4c:1f:6b:d7:ad:81:72:54:84:
48:97:b0:b7:24:69:a7:5f:8a:cf:c5:ce:cc:82:5e:58:e1:37:
81:03:9d:e3:0f:7e:48:be:b3:c0:95:54:b3:57:89:e1:70:f8:
2c:3a:09:f1:ed:94:62:53:65:84:86:47:65:30:c4:3a:7d:1e:
c5:4d:d0:08:84:b9:cc:48:2b:b9:42:5e:31:5b:86:60:58:3b:
4a:8c:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:33 2026 by rpki-client