Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: cRjcw2W2GDCGI+qnhtOEElk375tm8JuLY7tnjFqHu4U=
Subject key identifier: 3F:D1:5D:30:59:A6:45:0A:EF:86:78:35:45:0E:14:C8:42:59:95:47
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019CAAC61D102E5023CFB54EDE219300931E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: gbCeRYCH0DrsQSGQjr914Te9JzTsF0/gDrMMHwfYXiE=)
2: tzNhQBxVbG84fhnHI6FFgXnV1Ig.roa (hash: UFTyL6yRgFc0Xt2kdYNbyJU576nNW6IhohuerTzQsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1d:10:2e:50:23:cf:b5:4e:de:21:93:00:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=3fd15d3059a6450aef867835450e14c842599547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:b7:e5:15:be:28:4e:e3:d7:8c:58:66:c6:
8c:bf:de:84:f8:f4:c0:f6:bd:55:b6:d6:43:22:61:
16:7c:8a:73:0c:f4:aa:65:c7:6e:88:7b:13:b1:ff:
52:f3:9a:53:02:fa:73:23:30:96:27:93:1e:81:67:
c1:84:b4:66:fe:59:9c:57:b4:fd:c5:cf:9c:21:a7:
91:dc:ae:01:fc:b0:a2:e2:54:1f:50:3c:d5:b7:16:
4f:af:dc:b1:c2:f9:f1:e1:a3:3c:62:ed:e4:7a:c5:
8e:1f:b1:7e:4e:ce:79:21:2b:a4:f0:bb:f1:01:ad:
9e:0c:36:63:de:8d:a4:4d:1e:c2:d0:68:0b:43:65:
14:13:6f:41:13:93:4d:e6:05:85:10:f2:e6:dd:f1:
00:71:dd:c7:5f:1b:64:23:1c:54:ed:ac:c7:db:1c:
21:6e:ec:d4:59:88:2a:9c:cc:6d:88:d8:a0:f3:8e:
b3:91:ed:9c:84:02:20:44:ac:56:ba:27:2d:28:be:
cf:73:e0:3f:7d:56:61:fc:20:95:4e:05:7f:c0:8e:
14:a7:9b:a4:fa:b4:1a:f4:18:0d:85:12:10:d8:ab:
e4:67:34:55:0f:cc:83:29:53:bb:b4:41:42:30:c0:
c0:bf:2c:fe:ff:c0:82:38:dc:98:87:a0:71:cf:c2:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:5D:30:59:A6:45:0A:EF:86:78:35:45:0E:14:C8:42:59:95:47
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:f7:2a:e0:90:e4:56:7f:f6:6e:4a:57:26:b1:78:95:a9:
e1:c2:57:76:6a:51:d1:9a:a5:80:63:21:19:b3:7f:b8:3b:ea:
90:8f:e9:16:85:25:9f:0a:fa:f9:80:36:2a:9d:cd:84:05:dc:
46:76:dd:de:83:51:40:14:25:5c:dc:21:c4:e6:f0:91:11:16:
86:4c:53:41:6e:32:f7:61:55:94:20:b5:33:fe:c8:c0:8a:5a:
6e:4a:d9:23:a5:f3:1e:8e:69:60:18:22:ec:2b:48:64:44:10:
35:9e:9c:a5:fd:e3:07:43:d8:11:4a:ed:ed:dc:a9:b6:e5:c4:
88:73:85:c3:5f:5e:6c:73:71:d8:4d:16:f4:e9:2e:6f:80:9c:
bb:08:2c:d6:61:a8:52:30:43:4a:24:2b:f8:b0:2a:ef:73:7a:
12:32:e4:f1:ce:a9:f8:85:1c:95:9b:11:bf:b4:c7:0f:57:3d:
be:0c:53:74:c8:c5:71:02:b3:cb:07:dd:6d:29:e4:41:20:77:
35:ed:de:ed:a8:2e:69:cd:9c:d3:4a:ab:d4:2a:9a:3d:fc:5d:
17:65:e4:88:ed:5d:91:1a:d8:c1:f2:a9:5f:57:6d:7a:68:82:
29:e1:74:1a:e1:0f:92:01:e0:bd:63:e6:6f:98:2b:c9:99:e9:
63:f5:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:49 2026 by rpki-client