Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: ruKceP+suz6gGRTIGYQaE0b1iPwfodmpDv13Jby9RUM=
Subject key identifier: 2A:B3:71:35:32:7F:59:68:86:08:51:45:79:40:0E:E5:EB:AF:5D:10
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 019CAAFD5BCE3D48DFF88C351C7802A96A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: t7PToxtygAiWTBLyC7I9FeQfTbhxpg8DeJLgAUBEnx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5b:ce:3d:48:df:f8:8c:35:1c:78:02:a9:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=2ab37135327f59688608514579400ee5ebaf5d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:bd:d9:51:9a:a1:08:e1:25:8f:5f:86:d0:
e9:df:28:79:1c:e8:d9:f0:d4:ba:5f:76:e7:05:e7:
e5:f4:28:df:8d:25:2b:ad:ff:39:ac:37:b4:3e:e3:
82:85:0b:09:62:60:fe:37:1e:d0:82:4b:9f:6f:03:
c3:4e:67:4d:9e:b9:16:d1:7c:71:3c:0c:38:94:3d:
75:a9:2e:dd:e6:a7:38:11:f2:40:d6:99:a3:56:c7:
6c:a2:bc:a1:8e:e6:89:54:8f:9d:aa:76:c6:42:3d:
dc:f9:b2:87:8e:63:ae:2d:88:6c:49:f4:3f:d8:87:
72:3b:20:f5:a1:69:8a:55:47:90:fa:40:4d:61:8c:
45:c2:68:bd:7c:d6:39:45:49:bb:57:a1:f3:9c:51:
01:74:b3:00:48:67:ce:0b:e3:e7:19:6b:f3:b8:f8:
e7:bb:d6:91:6e:c0:6b:9b:d5:37:dc:ff:12:6a:e6:
30:ca:4f:af:29:41:4e:24:fb:c3:33:4c:ce:0a:3b:
61:c9:0c:89:38:80:e9:c3:d8:39:c4:82:fb:4f:05:
2a:aa:e0:d0:7c:12:86:b4:e6:0e:d0:8d:35:45:dd:
c0:82:db:09:3f:01:a5:7f:97:e6:5d:f4:5f:ae:5b:
88:29:29:ed:97:fc:c0:92:41:7a:bb:88:eb:e8:25:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:71:35:32:7F:59:68:86:08:51:45:79:40:0E:E5:EB:AF:5D:10
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:0a:9e:67:65:2f:f0:19:3b:86:b0:56:7f:2c:17:79:73:
3c:d1:07:db:16:3b:64:61:7c:84:2d:9b:53:5d:0d:59:19:50:
3e:fd:05:0b:d8:0a:d7:79:66:6e:d7:50:dd:90:25:e0:9d:98:
50:a9:d5:5a:1e:28:01:ee:2b:e6:b4:46:a5:e5:26:be:26:f7:
99:dd:ca:9c:e9:7e:49:73:64:41:49:fb:be:2f:35:4f:41:07:
ce:fb:7c:7d:14:4e:62:18:32:88:ac:0e:18:cb:61:0a:7e:80:
53:43:8f:12:10:37:50:14:88:ba:4c:27:20:49:d1:9a:d8:ad:
fc:e3:34:6d:36:09:7a:3f:95:a7:d5:47:d3:c3:5b:c3:fe:e0:
37:42:29:f1:eb:87:8d:00:5d:d2:05:e6:a9:4b:20:16:1c:26:
61:24:fc:5e:aa:9f:cd:36:16:b2:e9:9b:81:a6:fc:d6:34:c6:
5f:cf:e8:87:7a:7b:b6:2c:7f:c7:ec:a3:93:ee:01:8a:41:46:
09:21:d3:f8:0f:30:80:ce:13:92:dd:d4:60:af:75:23:24:fd:
06:b2:d8:03:4c:95:f3:f4:34:fd:03:18:99:b7:60:7d:24:ea:
53:30:c3:4c:a6:67:45:2e:56:95:08:15:09:8e:89:aa:12:f2:
a2:08:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:53 2026 by rpki-client