Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File: aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier: XtSFWBrimdHCBP+DY+bNOcQPjkWCzWlX+dpOhyYo0gA=
Subject key identifier: B7:BE:96:66:B6:D0:FB:61:84:D6:85:3C:C5:F8:3C:A4:9D:02:1C:CD
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 019CAA59292228367B9121792D8B57D5AAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number: 0BE9
Signing time: Sun 01 Mar 2026 17:01:35 +0000
Manifest this update: Sun 01 Mar 2026 17:01:35 +0000
Manifest next update: Mon 02 Mar 2026 17:01:35 +0000
Files and hashes: 1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
3: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: olbIpQjLDH3LUDUPfANB1xNWvfM3nQDOnVibfwmOk48=)
5: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:29:22:28:36:7b:91:21:79:2d:8b:57:d5:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Mar 1 17:01:35 2026 GMT
Not After : Mar 2 17:01:35 2026 GMT
Subject: CN=b7be9666b6d0fb6184d6853cc5f83ca49d021ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:0b:67:e7:bc:c4:00:98:9a:c1:90:4e:34:
ab:9d:da:aa:98:ff:9b:2c:95:17:75:9e:1c:90:8e:
b4:ba:48:0a:d0:a2:a3:ca:d9:da:45:1c:5a:7b:d3:
ab:d1:2f:31:a4:1f:33:59:7d:86:8a:b2:66:72:2a:
77:9d:a3:56:ae:a3:c0:c9:80:89:94:c6:ca:2f:7a:
f5:b6:5f:45:fe:01:9a:05:cc:ae:8e:7d:ec:43:41:
0f:b1:8f:b6:06:12:77:57:11:ca:1c:f6:21:ee:57:
7d:81:fb:cf:c5:0d:a6:a9:53:03:5f:74:ca:8c:8d:
53:5d:2c:f7:54:d7:21:47:96:b1:28:e8:33:6e:84:
0c:cb:3e:0e:34:e5:00:cb:49:ad:ad:cc:ee:b9:6c:
2f:ed:49:de:65:1e:84:4e:58:0d:92:92:e1:27:0d:
03:90:05:f8:8e:d1:21:1c:e2:01:e2:54:a0:6c:71:
31:83:88:65:ba:84:cd:41:ea:18:ff:7a:8d:36:72:
a0:04:62:62:b2:e8:f2:f3:e2:2e:d0:0b:38:a1:55:
12:ae:95:01:60:49:c2:16:72:01:93:65:f9:7c:6f:
c4:b3:68:bb:64:c6:30:ad:d9:85:9d:ff:6d:f9:34:
21:12:12:47:4b:f3:ab:c4:04:f1:35:d7:a2:89:4a:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:96:66:B6:D0:FB:61:84:D6:85:3C:C5:F8:3C:A4:9D:02:1C:CD
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:37:af:c6:0c:84:06:d0:8a:84:e0:e6:e5:4d:13:32:00:
96:ae:17:35:fa:17:fe:61:9c:7d:84:d4:63:ee:64:69:89:44:
ad:b5:36:c7:80:57:34:41:c5:a7:a0:c1:cc:d1:2d:fc:26:69:
47:49:1f:f9:67:1b:1f:aa:8c:61:9e:90:3c:b4:fb:dc:5a:4a:
15:17:b4:c9:5d:ac:ad:0e:cb:cc:76:d0:6d:a5:e2:60:cf:9c:
42:44:0b:ed:9b:6e:49:5c:3c:2e:fc:4c:1f:09:dc:15:3e:99:
4a:35:96:b1:84:87:a6:40:c0:1f:9d:16:4d:20:96:60:29:a2:
b8:8f:b8:a4:92:2d:ee:61:33:4a:97:fa:f2:67:5e:59:60:76:
8b:34:78:99:b6:d3:fe:25:ec:10:8c:69:ef:79:ad:28:82:ef:
40:92:61:14:02:76:5f:6a:67:a1:4d:54:08:d7:42:d7:8f:4b:
69:f9:b3:c7:8e:a1:30:63:6a:d6:26:8f:7f:c9:b8:76:59:f5:
bd:e6:4b:88:dd:53:8f:57:9b:93:3b:a4:80:93:0e:68:7d:cf:
bd:6d:fe:68:bc:1e:ad:8a:a3:99:da:3b:ad:9d:16:7c:93:0c:
5f:c8:23:e6:81:9b:78:c1:c2:09:4d:cd:1b:90:ac:35:0d:19:
1c:05:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:09 2026 by rpki-client