Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File: aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier: QxYSDy/ZE9coj5ldLLkKNzvTQaViH09O9Kw2FWeP7pQ=
Subject key identifier: 2D:DA:4E:8E:79:04:14:82:F4:75:37:5B:07:13:61:70:8C:69:7C:DA
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 019CAAFD279E70C968319EC2BF3F74A2C16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number: 087F
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: tBM/52OyV62i69qL4t5zaRmtBFxkzXAxXqqSs13LOCw=)
2: mkJVv52KXzS0LGki_sJR1Wvh3lE.roa (hash: wCY7SDIJn73GbW1ubNf3mR9Y3+r8QLN2wbBS3yUgUpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:27:9e:70:c9:68:31:9e:c2:bf:3f:74:a2:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=2dda4e8e79041482f475375b071361708c697cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:e6:0c:5d:85:58:d8:2d:39:b9:d3:01:d5:
5f:56:0c:a2:0f:44:f8:7b:27:a9:84:c6:8f:1e:23:
3b:e2:20:74:fe:f0:14:d2:9e:0b:fd:a7:bb:bd:68:
28:07:46:75:c1:c4:27:f6:b8:45:37:4b:80:b8:6b:
99:07:7d:a6:5d:a6:29:24:16:73:3c:06:e2:de:8c:
a3:34:0c:4a:b7:c8:45:a8:c6:19:64:fb:01:01:f3:
26:1e:4f:c3:0a:7b:a7:f9:23:7f:59:0b:26:88:65:
f9:35:b7:28:b3:02:ae:c4:b0:a8:89:9f:1f:f9:c7:
23:c3:2a:c3:a8:fa:61:37:3e:5d:df:cb:3a:4e:f9:
97:3d:e6:c6:81:12:ee:11:da:60:82:90:6f:6b:79:
0e:47:55:82:aa:e2:77:c1:ae:36:4a:c3:17:35:02:
cd:c9:d9:f2:ff:e7:2c:e5:d0:1f:97:6c:5f:6f:72:
be:db:97:cf:63:98:4a:27:e3:32:9a:8c:a0:ac:f8:
6b:85:75:1f:b5:f1:c3:f8:4c:0a:b0:88:4f:81:dc:
1b:58:30:f5:41:ea:53:c0:6c:f5:53:95:77:e3:00:
74:7e:24:b8:63:6e:67:b8:76:be:9d:39:bd:ca:f5:
41:63:b0:e9:08:3b:f4:a9:4f:ba:38:2d:86:74:5d:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:4E:8E:79:04:14:82:F4:75:37:5B:07:13:61:70:8C:69:7C:DA
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:56:b9:68:41:d5:47:1a:8c:10:7b:f4:2d:48:96:54:3c:f3:
af:1d:17:3d:81:54:9f:44:08:d6:a6:86:9d:31:e7:20:a5:6d:
6c:01:3f:65:c8:a5:b6:d5:4f:63:f6:32:46:8b:2d:19:cf:0a:
74:a0:15:e0:6f:c3:0c:4d:50:59:11:a4:ed:01:e3:06:9c:13:
9e:13:63:53:72:81:e1:da:b1:63:7e:68:20:23:41:02:5a:c9:
5d:00:4f:7a:67:93:d3:0d:3d:e0:af:38:54:29:f4:17:58:da:
3a:f2:29:bc:04:55:99:0f:ae:80:ee:a2:8a:01:f6:20:3d:ac:
49:bb:bb:ca:c5:35:d8:22:f3:95:89:81:1e:7b:cd:66:2b:07:
43:22:23:a8:ea:5d:6d:9b:45:48:8f:39:fb:bb:de:e8:5f:c6:
05:df:a2:90:99:b1:98:ea:f0:f1:eb:51:79:e4:8b:25:95:04:
7e:ad:b0:7b:af:4f:b7:e7:80:f4:50:3b:af:e0:ac:84:63:07:
ee:50:70:9e:1e:96:3a:cc:96:7f:f9:8a:78:43:15:50:3c:06:
89:92:39:96:87:95:91:9e:c1:fc:27:19:89:b9:f8:e1:0a:26:
54:7b:2a:f6:ac:90:cc:95:b8:89:80:07:90:ff:f6:a2:41:b2:
a7:3a:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:48 2026 by rpki-client