Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: iQH2AEd+xeDXuVp7DybJFbrJjOuhQ5oMYg0sgEYxDgQ=
Subject key identifier: BC:BC:FD:89:1B:66:F1:D0:DF:92:B5:AA:D4:DB:38:49:69:DF:1E:88
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019CAC4772BE29E277DBCAF31D8FE104084E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0B38
Signing time: Mon 02 Mar 2026 02:01:29 +0000
Manifest this update: Mon 02 Mar 2026 02:01:29 +0000
Manifest next update: Tue 03 Mar 2026 02:01:29 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: mnFkn2H7zh4ROmAsScfVG3H1Liba9Wy/j1mIuql3ffc=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:72:be:29:e2:77:db:ca:f3:1d:8f:e1:04:08:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Mar 2 02:01:29 2026 GMT
Not After : Mar 3 02:01:29 2026 GMT
Subject: CN=bcbcfd891b66f1d0df92b5aad4db384969df1e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:2b:06:91:6d:cc:b8:80:09:d6:13:b8:b4:
84:73:d7:e1:7d:03:04:45:29:ad:50:33:2a:89:2c:
73:ec:84:6b:f4:7c:5f:1c:de:2b:ff:76:89:94:86:
c8:f6:53:1c:cb:bc:96:bd:fd:c1:4d:57:dd:5c:5f:
c3:40:a4:03:3c:c6:7a:ff:52:7a:d2:8b:8f:73:2a:
b0:a2:56:82:17:ba:94:fc:68:ec:10:3b:8b:60:91:
52:05:44:76:65:84:8b:4b:c0:f4:c3:85:5f:3d:d7:
c4:8e:af:97:2c:2b:fa:9f:77:18:21:4a:95:c5:f2:
25:72:f1:af:b5:0c:89:91:3b:4b:a3:a3:bb:55:40:
8b:08:86:61:ee:8b:61:ee:72:ed:ac:1a:b1:18:07:
ec:7e:67:05:a0:17:5c:97:c4:ff:6d:dd:a8:2c:ee:
8e:0c:ab:9e:fe:eb:08:b8:e1:98:44:63:c2:31:e8:
47:33:74:b1:04:bc:8a:18:d1:c7:b1:97:c8:e2:5d:
48:b2:f2:06:1e:10:64:f2:2c:16:15:9f:32:c6:40:
40:50:77:dc:a6:29:b4:6b:9b:c4:3c:2a:ea:40:7f:
5a:c4:4b:06:47:a6:7a:cf:10:7f:86:28:ac:a2:74:
91:97:6f:69:e4:8b:65:8d:03:cc:67:19:a1:a5:6a:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:FD:89:1B:66:F1:D0:DF:92:B5:AA:D4:DB:38:49:69:DF:1E:88
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:46:7d:35:68:f0:2c:40:e8:08:a9:de:05:87:c6:00:ac:
ef:cd:95:4c:a6:90:9d:a7:4a:32:d7:4c:5f:e4:99:fa:25:fd:
c1:a4:49:24:d1:fb:cb:62:2a:de:df:36:60:0e:94:cd:13:97:
d2:c8:b8:a3:61:c9:83:aa:d2:f7:0d:fd:1d:03:b3:58:7e:91:
8a:fe:5b:b6:4f:63:8d:20:3d:26:e2:cd:90:f4:fa:9c:41:e2:
e3:0a:60:4e:d8:5f:b3:ab:a3:54:7d:0a:bb:1c:85:5a:f3:00:
df:08:4f:41:41:9e:a9:e3:dd:c0:ae:99:04:42:0d:fc:a4:d8:
17:cb:37:42:19:db:01:a3:9e:e1:c2:7f:9f:9a:6f:59:6f:e8:
cb:0a:4b:45:62:a3:a0:da:bc:e5:12:55:97:05:95:9a:0c:6e:
10:86:08:f6:ee:04:ec:80:db:26:e0:ec:da:39:ad:77:25:ae:
19:69:72:8b:85:12:92:62:99:48:26:83:89:df:0d:07:d4:73:
17:80:df:4c:9d:76:36:6e:10:0e:a6:12:cb:7c:82:90:ed:6b:
ff:83:3d:a8:d3:1d:3c:dc:47:0c:c0:09:34:09:f7:48:29:91:
7c:cb:d0:d1:ca:00:64:9c:92:a5:9d:86:db:20:2f:8a:42:73:
b7:f2:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:59 2026 by rpki-client