Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: pBSzJkeTFGRflq9nRc1vqqi2KJk1G41wNFlGU1pIRUQ=
Subject key identifier: 6B:57:88:99:C1:CC:33:63:D2:9A:09:C5:0D:25:90:ED:B7:6C:AD:48
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019CAB34AF0C98B528CA73C7DEC13905F400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 1543
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: uIoW/XYG49gA0hLenB3y8Pcnpv6Q4NAZ+DS6FM/4MtE=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:af:0c:98:b5:28:ca:73:c7:de:c1:39:05:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=6b578899c1cc3363d29a09c50d2590edb76cad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:ce:7f:b1:df:38:81:95:61:22:4d:0e:97:
12:7a:95:45:be:aa:25:65:3a:30:06:f7:1c:74:cc:
40:a3:8b:5d:12:89:a8:77:5c:70:8c:fb:5e:42:82:
15:60:d6:09:e4:a4:e2:15:a7:74:24:49:13:31:79:
47:43:e0:36:cc:69:f0:5a:91:de:43:24:3b:e4:6b:
a2:ba:0f:2f:b0:79:b2:ed:fd:b8:d8:a3:66:19:fe:
c7:cd:d9:79:d9:bc:4d:38:e4:5a:e1:fb:db:9a:fd:
67:21:7e:96:0e:eb:ea:25:c9:6c:1c:59:f8:1b:c6:
ab:e2:fb:90:fc:c9:f3:b2:c2:55:c0:23:00:b6:09:
7c:4b:b8:d0:42:dc:6f:6c:87:d6:d4:a2:92:ef:ae:
f8:22:2c:7a:15:d7:ea:e8:d8:bf:99:2a:41:3c:12:
c0:45:7b:fa:d4:f3:3c:f7:90:24:7a:26:84:b5:df:
5f:e3:0b:0d:a2:00:93:83:3f:2f:19:de:a8:63:b6:
91:ee:29:10:8c:17:09:d8:06:7a:63:88:fa:27:0b:
2b:b1:b2:5c:de:c1:8e:33:e6:0c:ce:fe:5b:81:7b:
0a:f8:26:5d:2e:35:fd:51:0b:a2:61:c2:da:f4:a2:
a1:28:9f:3f:76:05:c3:84:3f:ff:0a:6c:55:6a:52:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:88:99:C1:CC:33:63:D2:9A:09:C5:0D:25:90:ED:B7:6C:AD:48
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:1b:fc:f6:9b:7a:6d:d6:15:07:e8:0b:19:d6:fd:5d:f1:
71:0f:23:2f:02:62:b2:56:a5:1c:d5:a0:28:b7:78:54:78:21:
7b:0a:a0:f1:84:f9:6b:ad:ca:75:63:34:84:49:99:bb:cc:a9:
f8:96:06:05:cb:04:85:1f:80:24:71:35:1d:5e:68:1b:61:2e:
34:38:c8:c1:b9:d9:0c:a4:cc:3e:bd:41:84:ea:6a:82:98:bb:
14:c1:a5:19:9e:f1:ac:a5:9f:7e:7f:0a:c5:da:99:7c:8e:d6:
d1:22:5e:17:c6:b9:e6:53:50:29:16:d8:50:50:ca:00:ea:4c:
c4:13:7a:97:07:b3:2b:fd:fc:06:aa:85:aa:28:f0:68:76:a9:
0e:b6:1c:6d:ab:1f:53:55:12:3b:1f:cb:d8:10:81:e8:02:86:
13:b9:ca:bd:03:5f:4c:fa:da:f8:6a:14:99:32:8a:15:87:44:
48:43:a3:f6:94:8c:20:f0:04:4b:40:91:22:1c:c6:a3:93:64:
8b:32:5c:b6:ac:8b:03:73:95:34:75:48:e6:f7:a8:ae:bd:ae:
54:ee:10:7c:0b:a7:30:15:35:b3:bb:03:5f:9b:d7:82:45:b5:
9d:b1:23:3a:c2:00:f5:a7:42:8e:ba:30:c3:74:62:c1:c1:82:
cd:c5:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:16 2026 by rpki-client