Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: bA6f91SuEeq/sudacnNNQFoHo82x6BeLWGsDiFIHens=
Subject key identifier: 07:1C:72:66:AD:0F:58:46:48:32:66:D3:B6:0D:C0:8D:C3:B9:EA:1F
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 019CACB4A37FD476C51F1ADDF074ABE83382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 140A
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: MPseg0RcrtCqAV2npnIvEHJXy797RBUp1n9r4poemoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a3:7f:d4:76:c5:1f:1a:dd:f0:74:ab:e8:33:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=071c7266ad0f5846483266d3b60dc08dc3b9ea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:41:ac:41:e5:43:c7:78:0e:06:52:7b:6b:
68:8d:62:42:42:f4:77:2b:f5:45:ad:2d:bb:59:1f:
33:34:eb:c3:83:21:a5:b0:54:dd:a6:5b:32:0e:84:
d3:96:a2:6a:9c:00:73:bf:fa:f6:f8:c4:c8:4f:4e:
71:25:3f:45:57:9c:5a:f9:11:b0:11:91:28:f3:70:
a3:8d:66:68:3f:80:49:40:f4:f2:49:9c:94:aa:0b:
ab:7e:b3:96:00:b1:41:e6:be:ce:a0:80:be:4e:eb:
59:ca:38:4f:07:b4:40:d2:6f:0e:29:c0:35:d8:e1:
37:d9:66:20:48:04:cb:c5:23:0b:df:0d:a8:9e:f1:
df:79:4b:c4:de:45:c0:29:f1:0e:99:74:c4:4c:9f:
3e:e6:e1:fe:50:d4:30:f9:5a:2d:79:dc:38:91:87:
93:76:d0:7f:96:20:ec:12:c1:f7:47:fe:b0:6d:92:
d3:7c:68:db:71:d5:8c:b3:e4:54:06:18:70:18:1f:
c6:40:e8:47:a8:37:f5:29:eb:3b:f7:66:d9:6a:f5:
f3:7a:02:38:0c:ab:92:b5:6d:82:4a:18:46:72:56:
2b:fc:aa:a9:9a:df:2d:d9:47:61:06:5a:5d:5d:d7:
da:17:75:84:75:d4:6d:56:1f:18:57:b0:ab:b3:81:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:72:66:AD:0F:58:46:48:32:66:D3:B6:0D:C0:8D:C3:B9:EA:1F
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:04:d5:e1:ce:9e:cc:f9:78:96:25:07:bf:0f:23:d3:2a:
cf:8c:42:c7:7d:b8:36:10:44:e0:ff:ef:8e:18:ce:0a:ac:19:
4f:d7:23:71:87:31:c5:07:d4:ca:46:bd:39:ce:28:d9:ae:19:
d9:b2:5c:fb:57:59:32:53:2a:5b:95:b3:8f:e9:9b:d4:1f:c9:
34:fa:7e:9d:be:63:b8:18:14:ee:bb:f5:84:57:d9:b6:23:75:
87:2d:34:94:03:7c:8d:0f:2c:25:e4:0e:c0:75:a8:53:1e:ed:
c9:4d:aa:d8:c0:ec:ad:16:da:15:c5:62:71:37:7e:92:b9:93:
9a:22:49:dd:80:7c:aa:0e:e6:98:5e:e0:24:05:90:ff:08:e1:
00:fc:fa:45:0b:f1:c0:3c:b8:a7:d1:0a:33:75:9e:c2:f4:99:
ec:b2:46:c3:8f:41:c8:10:16:d1:56:82:06:1b:e0:5c:09:88:
ce:05:5d:19:5e:b0:1c:27:04:87:03:07:95:3b:d9:14:b9:1f:
37:c5:76:d3:6c:a2:38:67:b3:50:37:5a:d4:47:c5:98:b2:60:
e6:5f:1e:0f:f3:88:88:e8:71:a0:ff:bd:e7:92:0f:6b:dd:5f:
68:97:9c:78:dc:b6:a0:df:e3:54:0b:2f:90:0b:02:7e:77:a3:
aa:4d:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:36 2026 by rpki-client