Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: 89d2rBTTbXssRTmayfRvE9C+QJMTrzxpSS9jTX+my6U=
Subject key identifier: D0:39:93:CA:2B:87:B2:44:16:FF:F0:33:59:2B:E5:12:45:39:C4:BE
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019D3A1C5E50131092A39FF8996C03C3999F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0F31
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: YgcrRmkY/SyeaH0U+PijA14WxnmpXopDJFXzgnLf/+o=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5e:50:13:10:92:a3:9f:f8:99:6c:03:c3:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=d03993ca2b87b24416fff033592be5124539c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:2c:9a:8f:85:d4:b5:42:04:23:8c:5f:17:
46:a5:bc:7f:6f:43:7c:be:f2:80:60:d2:83:c2:36:
88:f4:91:0d:f8:49:43:90:fb:70:72:71:14:cf:6a:
9c:c8:47:f3:75:f9:1a:e2:eb:b1:4f:a7:58:a2:4a:
9e:6b:9e:2e:76:c1:48:06:85:95:dc:3a:17:cd:f3:
9b:04:a1:4b:d8:07:1a:53:67:ab:10:eb:dc:6a:c0:
17:af:38:db:46:10:40:a6:4b:ef:09:1d:e6:b8:a6:
44:30:81:d8:8d:87:fc:49:fc:30:ea:ec:de:3a:b4:
49:59:d2:4d:af:ac:ea:f5:16:3d:22:86:bd:ff:df:
d5:ea:f0:7c:ac:28:64:bb:61:b5:bc:14:6a:3e:16:
d3:1e:64:d0:c7:4b:13:86:43:d6:47:30:60:66:99:
05:d9:ab:3a:3b:0e:41:56:08:ea:0c:64:3c:6f:49:
be:48:a8:57:ed:53:be:cc:10:62:fa:2a:f4:2a:b1:
e7:93:b0:35:5b:5b:f5:8e:80:5c:54:58:9a:8c:32:
7e:48:89:ec:7b:02:66:67:4d:63:e6:7a:62:90:cd:
2e:94:21:2a:d3:24:df:13:bb:f0:f6:3a:c5:c9:6c:
dd:fc:c7:4b:37:15:0c:ec:90:b2:0f:cb:1e:1d:2d:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:93:CA:2B:87:B2:44:16:FF:F0:33:59:2B:E5:12:45:39:C4:BE
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:73:7a:24:e8:0a:68:70:14:87:ac:f0:52:12:63:a8:10:
2d:2c:8a:d3:c1:e5:56:eb:aa:fa:da:c5:9a:9d:ec:57:79:e9:
49:05:c8:c0:2a:c3:d0:e9:11:ed:01:87:31:52:e9:90:e3:3e:
84:46:9c:f3:0b:4c:52:c1:d7:a6:bf:d1:d2:5a:40:c7:56:8c:
3f:40:8c:44:fb:1f:14:81:bc:d6:41:39:c1:d8:9c:48:b0:12:
9f:ca:2e:e9:54:64:36:fd:14:bf:5c:96:b3:fd:19:cf:b8:59:
1b:fb:f8:73:a1:14:d0:19:7d:23:f5:45:8c:d9:16:d7:4f:4a:
3c:cf:34:e1:f3:71:5d:7e:41:57:5d:73:71:9c:56:6e:9e:44:
19:7f:98:44:e5:93:01:12:6e:85:26:95:2b:68:84:d4:46:3a:
ae:66:6e:fa:d2:72:08:3e:b2:07:eb:fa:1d:ca:96:af:c0:6f:
87:9c:74:a7:e9:3c:f2:c2:fa:12:c6:3f:91:ff:f5:32:85:33:
1f:82:56:0f:e6:4a:ef:22:9a:2c:93:5f:54:67:43:2b:c6:72:
fc:d1:87:fe:9a:1f:04:98:bb:43:47:94:d4:da:74:d7:b8:b9:
80:c6:72:f3:13:ca:50:a8:52:63:ad:06:77:0a:b7:70:f3:23:
ef:29:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:05 2026 by rpki-client