Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: 4orh12KPGk1nWlpxibBm2nfDdZz1uXEq4i0gci7HENg=
Subject key identifier: FA:10:73:CD:86:83:31:A5:AC:1A:D7:9A:7F:9F:95:D9:91:CD:B7:67
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019CA9EA919445B7F9B0D3F72D40BE28789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 15:00:48 +0000
Manifest this update: Sun 01 Mar 2026 15:00:48 +0000
Manifest next update: Mon 02 Mar 2026 15:00:48 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 8L7K63ugSDz1LNFfYkDIiDZCVFeiorlhYt7Fbdi6mfg=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:91:94:45:b7:f9:b0:d3:f7:2d:40:be:28:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Mar 1 15:00:48 2026 GMT
Not After : Mar 2 15:00:48 2026 GMT
Subject: CN=fa1073cd868331a5ac1ad79a7f9f95d991cdb767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:cd:57:3f:cc:fe:73:c3:70:3d:ef:b8:53:
f0:39:ea:43:7e:1c:f1:6d:44:9d:dc:86:4c:fe:74:
73:47:18:4f:c9:4c:53:fd:d1:3e:e9:b7:13:ff:e1:
5c:54:83:07:f5:53:ad:d9:13:37:85:92:ab:59:cf:
94:ae:84:dd:c7:67:e5:d0:ca:ee:a6:73:df:13:15:
6a:9d:46:c8:b3:61:7a:b5:6d:30:90:44:eb:5f:c5:
3f:97:81:0f:9d:87:10:bf:5b:ab:cd:3b:19:41:af:
60:39:73:5c:d2:53:00:24:36:fe:da:a0:80:fb:64:
e8:d8:1c:e5:bb:ff:49:f1:d3:a4:25:4d:9a:00:d6:
2a:d0:78:98:7b:0e:99:f9:5d:4c:35:e0:c9:a2:0c:
93:d3:c2:dc:4b:05:db:6a:5f:a2:29:a5:e4:15:3f:
50:2e:e0:51:7e:39:ec:fd:90:f9:98:ef:e6:0c:c2:
b6:af:db:2f:10:2a:89:05:88:56:88:7c:20:67:0a:
95:20:bc:2e:1a:48:31:0b:86:e5:b2:27:6d:e1:de:
fc:99:c1:1c:44:ca:da:70:9c:02:0a:b5:32:2d:95:
cc:e0:66:d4:f3:ee:45:a6:4b:92:37:ca:a4:fe:99:
0a:cc:e7:1f:d7:90:a3:89:fd:4e:37:2b:3b:2b:9a:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:73:CD:86:83:31:A5:AC:1A:D7:9A:7F:9F:95:D9:91:CD:B7:67
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:49:60:a5:8e:3f:7c:42:c2:5a:cd:94:2d:59:fc:35:3a:ae:
e2:11:ba:94:ee:d8:45:aa:50:ed:63:e9:1f:14:6d:63:98:71:
4b:b6:8d:9f:4a:65:f2:1a:01:f8:00:46:cd:82:56:fe:95:ba:
4c:5e:7e:41:b6:21:db:47:39:7d:31:30:51:4b:e1:e6:b0:88:
89:5b:c5:3c:01:1c:7d:b7:3f:80:66:8a:b9:89:2b:9b:3b:27:
3a:11:40:ad:5e:0f:93:b7:b3:fa:2d:08:33:11:55:10:09:21:
78:0b:39:8e:69:7d:08:c7:b5:ce:9c:80:cf:ca:da:42:56:8d:
92:de:51:28:b8:cb:5c:f3:eb:df:af:8b:af:53:9e:26:5a:ee:
79:3a:41:33:c4:b5:74:94:ce:91:71:5b:5a:8a:fd:00:f9:b2:
a3:44:1b:5d:d0:b7:96:be:60:fd:e7:4a:df:7f:b6:9c:b4:e6:
4c:a3:86:73:a6:f4:55:6a:2a:b6:fd:81:4b:35:42:c9:a6:2f:
2e:5e:65:3d:93:95:d8:f9:d5:7e:37:11:f4:1b:a1:a2:f1:84:
ff:39:b6:7b:19:29:a5:7d:d1:8d:19:15:a4:09:19:6c:ee:c7:
c0:99:ef:ae:68:48:02:89:da:64:85:fc:9d:cf:c0:2f:f1:be:
5d:5f:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:32 2026 by rpki-client