Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: OiaOruyykXmnI+nUCbem0ea2oTsFsM/JZIw6XxtttLA=
Subject key identifier: 71:C5:40:E3:FF:36:53:82:99:39:19:4E:15:83:37:89:53:AA:4C:4F
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019CC6749B04312163059BB255F207DF9FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1853
Signing time: Sat 07 Mar 2026 04:00:56 +0000
Manifest this update: Sat 07 Mar 2026 04:00:56 +0000
Manifest next update: Sun 08 Mar 2026 04:00:56 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: 6WdTKnupeOpw+coeE3BmlfbhfZbIeaQHCNFTAS99YZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:74:9b:04:31:21:63:05:9b:b2:55:f2:07:df:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Mar 7 04:00:56 2026 GMT
Not After : Mar 8 04:00:56 2026 GMT
Subject: CN=71c540e3ff3653829939194e1583378953aa4c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:3b:a7:a1:27:3a:1c:f1:2c:d7:b7:5c:bd:
c5:e3:4b:35:7f:25:a4:dc:5a:5d:23:27:94:aa:1c:
a2:0b:c0:4d:b8:95:d7:b2:71:fa:36:a2:b0:a8:b6:
0f:ba:b6:c2:88:69:95:43:2b:e4:d5:e9:35:a5:86:
6b:be:57:76:c8:ad:b9:42:bc:35:3d:fb:07:df:d9:
8e:8f:08:f7:9b:e1:8e:65:de:a8:53:e0:d3:61:8c:
f1:bd:9d:93:7e:09:a5:82:9b:b4:9e:50:af:5e:b5:
c1:86:43:a9:57:af:b1:35:64:af:b7:91:70:65:a5:
9e:34:80:a5:61:f5:65:20:78:e6:c1:02:86:51:9c:
37:8e:77:7d:1b:70:1c:7b:45:24:b2:26:71:d7:46:
d4:6c:96:2e:d4:27:d6:1b:04:e2:42:57:60:ad:e9:
40:67:42:84:ef:e4:6a:5b:29:9a:35:50:00:ac:b3:
f4:08:06:1a:59:5a:5b:b1:40:b9:51:1e:83:9a:5b:
88:c0:ce:5e:37:71:57:e0:93:bc:52:ae:07:1c:48:
69:07:ff:4e:b5:e9:f6:cd:ed:12:3f:72:f6:e8:bd:
05:b4:4d:91:6b:28:74:b8:ad:88:fc:6c:32:ad:a3:
63:99:d9:5b:f3:57:2b:1e:12:21:1c:9c:bc:99:38:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C5:40:E3:FF:36:53:82:99:39:19:4E:15:83:37:89:53:AA:4C:4F
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f3:83:f4:08:54:7c:8b:c0:a5:d3:f3:59:7d:d5:5d:aa:b4:
b8:6f:a7:1d:b8:cb:82:2d:f6:6b:0d:c5:d3:b1:95:97:c1:09:
03:31:43:50:f5:1f:07:79:79:98:98:6d:ae:bb:2b:5e:e1:ca:
47:83:c8:3c:5b:58:5d:47:41:0a:39:db:d2:f0:9b:22:5b:30:
87:f8:a5:ba:d1:65:65:25:79:46:9e:cd:fc:7e:83:5e:93:5a:
bd:b3:c8:6d:f2:09:b2:a7:94:b9:36:cc:71:66:c9:91:58:40:
af:fe:4f:f5:d4:96:e9:d9:1d:e8:c5:ee:ac:07:20:d5:11:1f:
8f:4d:84:f4:0d:d9:c6:85:f2:28:4d:de:a7:1d:91:fb:5c:f7:
fc:65:02:02:4a:04:43:f7:29:d0:7e:62:7d:97:29:36:54:00:
51:53:47:ad:3c:35:9c:e4:ac:92:a3:8a:c8:bc:2c:eb:42:6b:
60:52:43:6e:3d:b7:a8:1a:6c:16:80:e4:87:c2:92:0e:69:f1:
9c:05:46:b5:4a:8f:3c:8f:8c:3e:26:c0:b3:70:c3:56:25:1f:
03:ce:c1:4c:f5:2c:e4:f1:34:4f:ca:50:ce:c0:94:2e:e5:6d:
0a:81:82:88:51:2b:fb:b9:af:ba:bd:2f:c0:b9:09:7e:6b:d8:
e4:f9:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:30 2026 by rpki-client