Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: 16vCeZA2dCwdEzs0mnVdMFlREG5vZCq89AXQluvtp8g=
Subject key identifier: 08:66:22:77:30:C7:40:4F:9A:73:31:1B:4D:27:D4:C6:70:3A:F5:83
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019CAAC664F754F574EA2CEA35FBACD47653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0DB2
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: jKxDywtaEsHMOw3t9XNXe5T2lGeg4pA7oJ+PpE04E/s=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:64:f7:54:f5:74:ea:2c:ea:35:fb:ac:d4:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=0866227730c7404f9a73311b4d27d4c6703af583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:3a:5a:d5:39:3e:25:74:57:c4:89:89:a6:
98:9a:bd:ff:cb:ac:27:79:37:a6:96:c6:0c:06:d2:
45:6a:ef:ad:20:9d:0f:28:17:f9:c7:ae:d1:dc:0d:
9f:ac:f0:74:6f:4d:1d:9b:f5:26:85:20:62:90:47:
6c:f4:70:85:bb:8b:4d:4b:9e:be:b4:e7:7d:a2:83:
7b:1f:06:46:e6:ef:e4:54:03:09:ea:3b:35:f7:9a:
69:66:a3:ed:a4:40:81:8f:54:6a:3c:12:ce:5b:2c:
d1:a4:a5:e4:0c:a1:69:4d:af:fc:f8:7b:d2:75:de:
c8:19:6c:4c:4c:7f:41:e8:5b:49:ca:fa:e0:8b:19:
d4:40:3f:b1:9a:35:ce:85:d1:8f:d8:b5:2d:96:2f:
b5:8d:0f:db:16:ba:cb:9d:42:93:a9:b9:75:f7:5b:
6f:a0:bd:0d:c4:83:2b:19:b4:2b:d3:78:3b:e8:85:
95:aa:3f:af:d4:a0:65:0d:0c:e2:b1:07:8a:f9:20:
0e:66:78:89:9b:79:f3:fc:78:cb:de:8b:8d:99:df:
d3:80:fe:f0:b1:aa:f3:78:8b:63:37:d2:21:76:ea:
7d:28:a2:06:ff:b0:7e:a5:76:f9:9f:7b:f2:c8:39:
ae:82:14:ed:71:f7:f7:b6:a6:0d:96:5f:71:80:f7:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:22:77:30:C7:40:4F:9A:73:31:1B:4D:27:D4:C6:70:3A:F5:83
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:a3:65:75:bd:e1:7e:fa:2b:54:93:45:a1:b0:f1:f4:d7:
17:64:65:3b:9c:05:ab:77:28:e7:35:02:3f:96:40:aa:4d:e6:
73:42:e4:bb:57:61:77:e0:ba:a4:6b:70:03:8d:98:61:02:c0:
2f:8b:93:57:72:63:7b:25:a2:af:a7:99:d0:41:ce:1e:38:08:
e2:d4:be:8d:36:50:e1:bc:a4:fd:5a:49:9c:10:d2:42:b1:8d:
4f:17:65:ff:26:b7:68:31:6f:cb:4f:02:9e:c1:f1:3b:e9:67:
e5:fb:3f:32:c5:3d:25:96:ce:d4:50:85:77:9d:de:96:c8:84:
b1:f1:9d:b4:86:9d:0e:55:f1:56:3f:97:91:43:0c:fe:6e:68:
05:aa:f0:b6:f1:79:e3:1e:2d:42:8c:67:67:30:25:be:fb:31:
9d:d7:5d:23:94:fd:a0:7d:c9:bf:ae:cf:dd:4c:2c:ec:c3:39:
1b:0d:0b:9d:b9:4a:d7:12:be:f4:35:22:66:55:92:63:dd:2e:
f3:e1:83:fd:a1:58:7b:57:e9:ff:68:04:78:4e:e0:1f:c0:ba:
3c:38:e0:bf:91:cf:9b:ef:bc:3d:06:a3:1d:f7:1c:e7:4f:45:
d9:9f:6d:46:67:4b:99:7f:5d:0e:92:e3:51:e2:c4:1c:8d:7e:
28:05:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client