Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: tlWfBd7I1b+VoHwSR8SYMAQts3ivO7Diw8Qze8CiaxE=
Subject key identifier: FC:0A:49:90:E1:29:8E:95:02:90:67:DC:58:9B:47:E1:26:7C:CC:89
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 019D37C0A87BDFE0C73EECE863C80556A415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0FAC
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 8XVZkZs9aTYgXhHak4NEd39uxJw.roa (hash: SCbWhvc5dAVlQf2Rm3aO7mw2DxqRyMlcWllDbPzS+Gk=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: IY70wMpFDO705PDizhnVnZCK/n3hbKsXbHpoRIp+5Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a8:7b:df:e0:c7:3e:ec:e8:63:c8:05:56:a4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=fc0a4990e1298e95029067dc589b47e1267ccc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:87:4c:3f:c8:3e:72:a9:a6:0f:51:59:f4:
9f:aa:2a:1a:a1:79:b2:0b:2c:48:73:24:d2:96:df:
5d:81:bf:27:2a:08:1e:78:a4:40:12:37:ae:1b:0c:
61:3d:be:b0:9b:24:d4:37:8a:1b:36:9d:bb:b2:ed:
f4:8a:e7:ec:32:fb:9c:09:5f:32:c6:4c:21:e0:5d:
cf:80:37:ce:12:e6:9a:59:16:68:3d:d9:4c:1a:6f:
5a:74:64:c1:4f:8d:7d:49:10:1f:1f:f6:f8:55:f8:
67:a5:da:a6:d5:06:de:52:d5:ce:4c:e5:ea:2d:bb:
80:6e:6c:18:27:62:ec:15:48:ed:95:64:46:ba:33:
e6:b9:d8:5f:db:74:22:f8:e8:2d:08:cf:c5:8c:b0:
59:6c:89:88:f8:53:be:a6:c1:09:cf:a9:36:9e:e3:
b0:de:d4:5a:0e:b9:7e:53:7a:01:28:77:dc:86:7c:
ff:48:b6:6c:9b:df:0c:a5:fd:26:8b:97:13:c0:15:
4e:0e:f8:bb:a9:5d:78:d6:52:9a:cd:6d:ef:94:30:
a7:16:a7:ef:76:ae:f0:c7:5a:21:db:4c:6f:c5:cc:
35:85:a6:37:ad:43:eb:4a:c9:88:0c:63:45:de:55:
4f:e4:1c:89:c2:53:62:06:b4:96:25:fd:93:84:c7:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:49:90:E1:29:8E:95:02:90:67:DC:58:9B:47:E1:26:7C:CC:89
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e6:1e:cc:93:b2:e6:c4:76:88:3e:4c:98:dd:7d:b3:63:56:
56:21:af:d7:b3:c4:f7:20:ab:76:fc:f4:d4:c7:11:79:a8:41:
84:74:ce:f5:40:38:35:37:ef:c4:a3:b5:b4:d5:78:fb:3b:36:
ff:6d:14:47:4b:e5:9b:b6:25:95:5a:55:ff:b9:d8:fe:76:d5:
3b:b1:42:2b:8f:c9:39:a8:97:62:63:b4:47:9c:d4:1f:25:8c:
64:d4:6c:25:d0:88:a9:b5:7f:91:fe:73:c4:1d:83:cd:d4:62:
ad:95:d0:fe:c6:05:09:8f:50:46:26:75:20:e8:d2:ba:06:8f:
ae:d5:80:95:43:9f:c1:bb:9a:2e:34:d0:b6:1e:a4:6a:21:90:
9b:25:c9:f0:2a:f5:fb:fe:34:76:98:71:47:85:3e:34:36:34:
f2:96:48:0e:b2:81:26:07:d6:9c:8f:f3:11:ca:dc:c8:a1:34:
85:ab:95:a2:c3:da:87:05:13:32:58:ad:85:54:6d:76:ab:8a:
d5:4d:1d:66:ad:c0:79:b8:1b:04:89:11:a9:17:58:ba:a4:a7:
c5:bd:7e:fb:8c:56:e6:8c:2e:3f:39:c2:fc:f7:10:6e:94:13:
c6:5e:de:96:88:86:4c:c9:3d:c5:32:03:ed:a6:27:8c:73:b5:
4d:a0:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client