Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: udf0dXd7D7KKvmGTvO5O1BJhYCwRUJ0xpp83P6Zl1gM=
Subject key identifier: 0D:C9:5A:23:E4:FC:0B:36:92:27:F4:37:68:34:08:F4:A6:F0:A1:7A
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019CA9EB8639F5FEC5232A3DD1E2C4DA3647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:50 +0000
Manifest this update: Sun 01 Mar 2026 15:01:50 +0000
Manifest next update: Mon 02 Mar 2026 15:01:50 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: Tq0HaatpoP9Woc7tk2n72X3vJ0+2s/XMHdxGKCJQVrY=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:86:39:f5:fe:c5:23:2a:3d:d1:e2:c4:da:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Mar 1 15:01:50 2026 GMT
Not After : Mar 2 15:01:50 2026 GMT
Subject: CN=0dc95a23e4fc0b369227f437683408f4a6f0a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:1b:96:d5:8b:b8:fe:92:31:b3:95:e2:12:
f0:c5:fa:bc:c7:d6:61:82:6d:b5:66:c5:0d:4a:0d:
a5:e1:83:7b:0f:b5:6e:40:17:5d:3b:9b:41:61:4f:
91:c6:e6:ea:1f:3e:fb:1d:90:58:51:68:7c:42:75:
be:17:a2:17:44:f2:4e:fb:6f:4b:23:fc:a0:f4:74:
ef:69:3e:67:1a:23:23:51:93:45:3b:5b:2f:db:40:
9a:57:62:00:68:97:a4:38:1a:10:ab:9e:d9:bc:cf:
ca:84:0c:e9:90:1b:4f:5a:a0:b0:2c:c6:ed:ad:47:
aa:5f:49:69:f4:bd:c8:7f:c3:6c:f3:7c:b0:5a:7c:
68:32:38:8e:a2:66:40:99:07:fa:6f:73:51:09:97:
74:a8:f0:29:69:8f:36:41:6f:c4:fb:eb:01:45:4d:
5e:9a:44:54:62:38:35:75:8c:a2:7b:0c:32:dd:13:
ee:1b:fb:3b:8f:47:70:f0:7c:71:ba:1b:18:bb:71:
68:7d:1c:27:d6:7e:0f:b4:ad:22:a8:86:a0:52:ac:
b4:3c:a0:e1:cb:bf:15:0c:3e:05:8e:bd:26:9d:39:
65:68:5b:54:73:81:c9:3b:ae:c1:5f:78:81:9d:c0:
93:02:74:63:74:59:88:02:c6:90:35:f9:a0:a2:5d:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C9:5A:23:E4:FC:0B:36:92:27:F4:37:68:34:08:F4:A6:F0:A1:7A
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:60:d0:c3:5c:9e:b6:2d:2a:5f:5d:48:4f:49:da:c8:78:25:
30:1f:18:a8:77:c9:9b:a0:f9:9b:30:5e:ab:15:3b:fe:ec:fc:
88:7d:18:0c:bb:8a:bd:02:52:08:97:1d:16:11:31:67:94:56:
4e:c0:44:1e:e5:8a:89:dd:90:bc:27:b5:99:14:09:b9:77:30:
f4:31:01:50:cf:96:f8:af:8f:95:9c:42:3d:11:77:ee:0f:06:
d4:db:b8:b7:48:13:d1:f5:be:c6:ca:62:03:a4:3e:e1:80:c8:
09:38:80:9e:6f:e4:f4:90:4f:0a:91:40:4a:b5:bb:c8:a1:8d:
a8:3a:8a:9a:a9:5d:94:6d:f4:0d:de:81:3b:05:78:53:74:97:
03:5c:94:24:43:c4:a9:66:ab:98:10:07:9d:8a:65:f7:09:cf:
4c:9d:2b:cf:9a:9a:fe:5e:89:bd:a3:4d:68:9b:66:5f:a1:e8:
fa:b1:9b:fd:a6:00:0f:c9:36:79:96:ba:5e:af:d5:88:c3:1f:
e0:0e:12:e6:2f:68:00:58:aa:6f:b9:8c:26:ad:76:e5:32:7e:
8c:b0:20:a6:04:80:92:bb:ee:6d:f9:b5:36:f2:84:55:f1:46:
2e:7b:51:01:76:aa:76:18:8a:55:86:94:a7:85:7f:a3:83:81:
ba:42:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:26 2026 by rpki-client