Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: u0aieJXAkwGpOxhPLzoY9OnSxsT6or/a5VW5qb1dEMs=
Subject key identifier: 99:97:E8:F7:B4:F4:C6:99:AC:2F:A0:4F:63:46:3B:43:E9:67:B1:C4
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019D38D36001ECA829FCF2D2160CDD7D1C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: YrvaFc+W08xiRcOUbdQrOVOHDmCnmWKg1SX1m/KW+Hc=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:60:01:ec:a8:29:fc:f2:d2:16:0c:dd:7d:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=9997e8f7b4f4c699ac2fa04f63463b43e967b1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:f2:78:ac:33:1c:77:70:b8:db:7d:01:00:
db:be:9b:fb:45:97:0e:13:94:3c:a6:1f:df:7d:55:
2e:2a:aa:b6:52:4a:84:1a:85:ae:28:3b:08:c5:cc:
49:f4:d6:61:de:1a:92:24:29:c8:b2:18:29:5f:86:
4d:dc:df:73:c3:32:ba:7d:5d:d7:3c:76:01:a3:54:
0a:50:57:b8:45:aa:d9:c3:49:04:c5:b9:3e:69:7a:
ef:3c:3a:53:e7:92:e9:5e:3f:7b:12:1a:80:b3:e3:
18:db:b4:7e:d7:72:04:fa:9c:05:22:d3:42:36:e7:
3b:0e:fb:f3:10:95:c3:ef:77:1c:41:7a:dc:4e:e0:
69:3e:24:21:08:28:52:3c:c5:fa:b9:3d:12:92:94:
72:b1:50:fa:5d:6d:e8:fc:62:9b:ac:ca:cf:3f:4a:
a1:8a:3e:60:85:93:d1:b5:60:d4:9c:6f:dd:c5:81:
dc:56:96:b7:8b:10:d8:34:b7:cb:99:02:21:ab:ab:
b7:76:27:71:03:eb:9b:9b:cd:5e:45:d4:00:ab:65:
13:49:31:db:77:5a:43:02:75:45:c8:24:80:a6:59:
5a:5e:18:cc:ac:76:25:ed:94:f4:00:1c:5b:1e:ec:
a3:ff:2b:8a:5b:bc:10:fa:ec:91:3e:7f:ca:f1:a6:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:E8:F7:B4:F4:C6:99:AC:2F:A0:4F:63:46:3B:43:E9:67:B1:C4
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e1:b9:a6:c9:94:a3:0d:8b:fa:c2:78:60:09:0e:90:4d:13:
90:4e:69:a9:36:bc:7f:fc:9c:6e:d4:65:11:eb:18:87:b7:cf:
4a:1a:df:1a:48:47:23:b4:05:f2:41:6d:76:01:f0:49:ff:50:
93:76:2a:55:36:3d:63:fd:3e:98:be:60:ef:16:76:d3:23:cd:
e8:bf:8e:0f:b7:ee:26:a5:2a:d4:4a:51:11:51:83:0e:4b:30:
9b:eb:71:1e:3a:51:41:fa:5e:6d:6c:a9:cd:ab:26:e0:dc:af:
dc:e1:bb:9d:11:9b:cc:b5:5a:d0:d7:7d:32:ad:f0:81:e6:64:
78:3c:a7:a9:e8:4b:7b:f9:5d:13:4b:39:17:ed:d6:08:31:54:
da:34:d6:e8:d4:78:13:6b:c9:4a:f4:5c:58:fc:bc:71:69:64:
0b:9a:a7:49:4d:ae:0f:d0:7f:a3:f2:f4:e9:8d:68:c7:c1:ee:
65:15:f2:58:0a:d0:e2:15:57:5d:2a:66:ad:09:b3:cf:ba:59:
0b:48:86:a9:73:4e:4a:ea:b4:e2:f7:10:3d:2f:f3:12:a0:4e:
04:4c:2c:de:ef:fa:c2:95:01:13:13:cf:23:20:b5:76:09:b9:
81:a9:e7:4a:8a:b0:57:76:9f:49:1d:bc:9a:d9:cc:a7:74:f6:
50:62:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:23 2026 by rpki-client