Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: a3EbL2qwyBbCZDdjMmLSShAVXKr0dwc1Db8o/gkOprs=
Subject key identifier: 1B:CB:82:D0:6A:D5:8C:4C:44:BF:61:E5:F0:4D:CD:9E:F6:7D:A6:CD
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 019CAAFD4D942A11E967EDABA6526541754C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: FyOfpI3FVuGJx6p0pW7XV7DYwmiiYrLYSYvaJfB0Rzo=)
2: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
3: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4d:94:2a:11:e9:67:ed:ab:a6:52:65:41:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=1bcb82d06ad58c4c44bf61e5f04dcd9ef67da6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:6a:fe:e4:32:91:17:00:fe:fc:f6:d3:bb:
a9:a0:a5:b1:5c:2e:63:b0:04:81:d7:d6:11:61:be:
dd:c1:55:3f:81:52:2d:84:24:f0:14:23:58:9a:7b:
41:f6:2d:53:f4:0a:c1:0c:5a:cb:ef:7c:9c:f4:c6:
90:80:c8:c8:14:aa:c7:eb:67:c3:7e:c0:2a:e9:a3:
90:30:af:d1:6b:97:87:4c:61:ae:ba:5a:fb:57:3a:
ea:fd:eb:89:79:b5:e2:c7:a1:c6:43:be:c1:15:fd:
5f:30:55:8f:eb:2e:b3:6e:5b:54:04:9e:eb:fd:37:
74:63:a3:7c:57:f3:1d:40:6b:9f:3e:52:cc:9e:10:
a0:4c:33:bf:00:1f:f3:1d:f5:13:d8:53:87:7c:3d:
4b:32:55:94:7b:93:3f:f4:7c:08:0c:3c:fb:10:6e:
c1:02:53:9f:88:26:65:d0:98:0c:b2:e1:94:e8:39:
56:62:ee:de:30:72:87:ae:22:13:1c:b8:5d:6e:53:
87:32:8f:e1:0b:9a:dc:e6:27:3f:b6:2f:76:39:6e:
66:c1:de:db:78:70:c6:39:f3:60:1f:13:a1:f3:58:
81:34:26:ef:8b:0a:78:55:d4:5f:a8:2d:ac:9d:10:
3d:75:f4:4a:10:c5:4a:b2:d7:f8:de:f8:c4:52:8e:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:82:D0:6A:D5:8C:4C:44:BF:61:E5:F0:4D:CD:9E:F6:7D:A6:CD
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:dd:e4:2d:f6:30:7b:51:d0:1e:ef:ce:91:db:2f:89:7d:
aa:30:ac:58:3d:32:8f:8c:35:d9:17:a2:c3:8a:83:2b:4d:7d:
a7:85:5c:79:70:65:4a:c3:5b:c9:66:67:ef:a5:4e:55:ff:c1:
ff:2c:ad:c1:4b:15:88:70:f5:b3:00:bd:13:23:2b:3d:4e:f9:
15:62:79:18:87:6c:45:c8:a0:b5:f2:d8:0d:a9:01:9c:47:6b:
c9:c0:46:98:d9:96:78:2e:5d:72:23:fe:5c:34:8e:9d:2a:8e:
5d:bd:b2:50:df:8a:28:07:2c:86:ae:9a:3a:e8:47:dd:e0:85:
df:94:98:8a:bb:8c:07:00:2a:0f:26:dd:fc:68:df:68:76:76:
84:10:aa:f8:0f:31:5a:fd:45:4b:f4:28:e2:64:51:2b:ae:9f:
9a:e7:8c:72:61:5a:da:59:74:0a:d7:d8:ca:33:62:4f:19:ed:
8e:e6:0a:8a:2b:72:b8:c1:15:b0:94:c4:92:30:25:51:e8:bd:
0d:67:aa:9f:52:cc:db:1a:ee:09:17:3f:21:e1:6c:4f:77:51:
9c:b3:28:83:5a:05:31:ad:15:1f:f4:6f:4d:cb:c3:63:67:20:
b0:68:66:1c:f1:d5:63:aa:68:bc:06:fc:10:b9:96:31:40:a3:
13:43:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:56 2026 by rpki-client