Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: l6dapSaAUYzp58pMq+u+pBDA9wblrnN5iCe0W20DF9s=
Subject key identifier: 35:CE:BE:04:A3:BF:D7:CE:A2:20:17:29:4C:AF:36:D0:74:B5:DE:1D
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019CAD22F49C0EEE0552C08FE4F972D367D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0862
Signing time: Mon 02 Mar 2026 06:01:15 +0000
Manifest this update: Mon 02 Mar 2026 06:01:15 +0000
Manifest next update: Tue 03 Mar 2026 06:01:15 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: onjqu3ONz4ZCwv7ODICZRfdCV6bdgBTBzTaIRwOQy8Y=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f4:9c:0e:ee:05:52:c0:8f:e4:f9:72:d3:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Mar 2 06:01:15 2026 GMT
Not After : Mar 3 06:01:15 2026 GMT
Subject: CN=35cebe04a3bfd7cea22017294caf36d074b5de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:c8:a5:5b:4f:dd:d0:60:3b:57:22:c7:c2:
33:71:63:2e:37:2e:6c:15:d5:81:a4:91:83:c8:2e:
88:3b:6d:df:aa:63:50:47:74:78:a5:13:3c:1e:b2:
e9:a8:bb:38:e3:03:06:6b:b3:18:c3:cd:54:22:5a:
9e:8e:a8:8f:0c:21:f7:32:0a:44:b8:8c:13:e1:46:
06:75:61:9d:52:86:4b:ce:1d:78:18:0b:7e:3d:7e:
15:09:3d:1f:d5:40:78:e4:6d:df:3b:a6:e2:2d:6e:
ab:68:c0:92:6a:54:e0:0e:bb:9a:b4:12:c6:6f:e5:
69:96:8d:a1:29:15:3a:d5:c3:21:7a:62:e4:c3:8a:
86:e6:ec:b9:38:47:86:75:80:71:71:99:86:5a:3f:
1f:10:1b:6e:40:3f:e1:1f:ec:9f:32:10:50:d7:c4:
74:a2:15:16:b1:6d:cd:93:4f:3b:57:29:be:88:da:
bd:a1:dd:14:5b:e6:e0:1f:a0:b4:62:27:1d:63:30:
0f:61:dc:9e:d0:c4:99:80:9e:65:25:f2:bc:22:94:
96:8b:f9:4f:9a:32:18:ab:06:06:89:30:79:58:1b:
45:2b:36:1b:30:84:6e:3c:86:70:f8:fb:61:99:89:
c3:e2:04:19:f0:18:1b:fc:5d:4d:0f:fc:a9:71:2a:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:BE:04:A3:BF:D7:CE:A2:20:17:29:4C:AF:36:D0:74:B5:DE:1D
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:50:c6:c2:c5:0f:0c:fd:6d:b9:ee:83:ce:5f:67:27:5f:
a0:aa:bc:3e:c0:90:ca:b3:9a:dc:d8:22:4b:c5:9b:07:0a:11:
33:60:e7:ab:5f:de:6e:41:a9:cd:02:f9:13:3c:67:68:7c:d9:
38:65:42:50:e4:cd:32:ac:59:e2:c7:76:35:8c:5c:4c:d6:1f:
5b:eb:b7:c5:f1:a7:31:9e:73:27:3d:d7:43:66:10:d9:59:55:
57:01:bf:1c:cd:58:d3:60:5d:f1:d3:bd:eb:2e:37:6c:bf:a7:
c8:e4:31:e4:94:82:d9:08:d0:93:ac:9e:16:ca:b0:33:4f:cd:
f8:7c:27:c0:3c:80:ae:79:ae:a4:33:33:6c:9e:ae:a8:f2:f7:
01:f5:41:fa:d6:fa:ca:59:16:3f:5d:c1:9f:d3:6b:e1:5f:2a:
a9:4a:86:7d:38:58:eb:7a:e7:6e:f6:ad:b3:fe:bd:b8:d4:bb:
06:a6:23:ef:e2:74:76:59:3c:e9:3d:71:55:f5:e5:a7:96:a9:
68:a1:6b:42:2b:75:92:fc:df:b0:83:e1:fd:55:aa:50:a0:b9:
5a:d5:fe:e4:52:1f:7e:93:5a:7b:37:23:ad:88:f2:8b:3f:f9:
f0:94:9d:ee:f3:f8:e3:7e:f5:f3:2e:24:ed:74:1d:a5:cb:91:
96:19:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:51 2026 by rpki-client