Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: oMuW2Ty1hsqJzO5oDlqstE4M2JuXHqW0R/FLc+r2C+8=
Subject key identifier: 8C:85:E9:0E:0B:42:77:C3:E7:70:24:45:27:DB:CF:54:53:7A:1C:CC
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 019CAD59391B1B99F48B4485A8B58DC65788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 100C
Signing time: Mon 02 Mar 2026 07:00:31 +0000
Manifest this update: Mon 02 Mar 2026 07:00:31 +0000
Manifest next update: Tue 03 Mar 2026 07:00:31 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: YIhm5C2VSvNItOR0m2cK5tVAFsFt2c72f4rpmpxk0FE=)
2: hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa (hash: UNg1Ev3uL6ITTCViVHYmyV+MQPsqTHd5HHXqSXS8miA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:39:1b:1b:99:f4:8b:44:85:a8:b5:8d:c6:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Mar 2 07:00:31 2026 GMT
Not After : Mar 3 07:00:31 2026 GMT
Subject: CN=8c85e90e0b4277c3e770244527dbcf54537a1ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:b7:af:d9:22:00:59:8d:69:c6:38:de:c6:
97:e0:b0:eb:ff:ff:3e:00:39:08:3e:60:87:c6:f7:
c1:9b:5f:ae:c8:68:35:da:26:45:16:ab:a6:3b:fa:
fe:ec:5a:e8:62:cb:93:11:39:b8:3f:21:d7:e1:41:
15:5e:6e:ed:51:a0:fa:ed:22:6d:22:db:ca:17:be:
84:50:4c:44:46:3b:cc:77:f0:1e:30:46:d6:a5:9c:
5a:b2:7e:83:c0:ef:20:13:18:cd:f7:7a:23:f7:a7:
50:cc:49:99:a8:c9:a1:f5:c1:28:ba:e4:0a:2d:ec:
fc:04:9c:12:11:7a:aa:57:98:ce:7e:17:50:e8:4e:
8c:11:70:87:0e:ab:ba:a8:be:d5:8f:d1:67:c3:34:
8c:c2:70:e4:2c:a1:97:1c:76:ec:ca:4e:f1:c3:bb:
0e:4e:ab:01:c5:2e:7a:ba:55:9e:24:52:9b:1c:85:
56:c3:98:43:c2:3b:88:7f:fb:8e:bc:ad:b6:1c:86:
a9:ba:d8:df:f1:8e:00:1e:fa:4a:9a:59:76:7f:49:
ac:db:07:85:e0:2a:7d:6f:69:29:7d:a6:92:e7:86:
80:2d:77:df:82:61:37:61:c8:8f:96:37:cc:c2:d5:
eb:71:63:28:b0:11:ae:47:ea:2d:d8:a7:72:3d:7a:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:E9:0E:0B:42:77:C3:E7:70:24:45:27:DB:CF:54:53:7A:1C:CC
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:e3:27:01:b6:29:20:a6:69:ce:53:c7:b6:2c:a5:db:97:
6f:90:d1:22:04:98:f8:b1:52:f4:51:41:d9:3e:ee:49:2b:a0:
33:ff:ee:da:90:81:ac:a2:be:94:44:78:02:e0:18:72:49:7d:
52:67:fd:a0:1e:40:a6:3d:dc:0f:cc:ad:7f:c4:a4:33:db:46:
e4:00:f6:4b:3f:6f:49:af:14:dc:80:bd:fc:0f:4d:4a:89:44:
ae:bf:cd:62:b2:98:d9:81:24:9a:67:0d:5f:0a:1f:ea:55:a8:
fd:5a:d3:08:58:68:75:4c:66:28:82:27:1e:c7:bb:6d:cc:fa:
27:ac:3e:c3:dc:56:60:0d:d8:98:70:04:7d:88:6b:f1:ec:03:
1b:f7:53:d2:4b:78:59:52:51:c3:a1:d5:59:40:98:50:66:6c:
d9:6a:9d:d0:e1:bb:df:bc:6e:6d:7d:62:78:ce:66:ec:28:a2:
9f:ec:90:58:86:c4:45:ca:49:aa:e8:57:15:5c:8a:ee:be:20:
c3:25:cd:44:3f:f6:72:f6:6c:53:6f:14:c2:3a:99:2e:6d:c5:
5a:ac:bc:ff:d7:2f:3e:cc:e2:76:5d:55:c4:23:41:92:27:f4:
26:44:70:9d:3c:a6:4d:e1:9e:46:d4:85:96:6d:ec:71:16:b1:
b4:53:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:25 2026 by rpki-client