Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: tOXvYIi1dlIVWceoBJPizalyME6trhRuLdttRb4fUW8=
Subject key identifier: 8C:FD:A9:05:9E:0F:62:C7:F6:D0:6D:98:7B:9B:1B:CD:DB:00:7C:44
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 019CE5FFB67E1C56896488B93B09B34017C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 07:01:06 +0000
Manifest this update: Fri 13 Mar 2026 07:01:06 +0000
Manifest next update: Sat 14 Mar 2026 07:01:06 +0000
Files and hashes: 1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: Sk8J38uXc2QcOcoGPTqVnpzcux5+Izs22818tZiprXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:b6:7e:1c:56:89:64:88:b9:3b:09:b3:40:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Mar 13 07:01:06 2026 GMT
Not After : Mar 14 07:01:06 2026 GMT
Subject: CN=8cfda9059e0f62c7f6d06d987b9b1bcddb007c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:c7:d5:14:90:2b:01:68:74:61:72:0b:e4:
70:f8:70:2d:d2:f7:df:1c:2f:34:f4:9d:4e:fb:96:
a4:b2:27:eb:25:da:c1:0f:47:0d:a6:a5:de:9c:d2:
8d:59:ba:90:11:95:af:31:aa:e9:8e:68:86:62:df:
22:c3:54:a0:59:47:0a:ec:46:a7:55:9e:9d:cc:0f:
b0:62:32:04:f4:40:ec:1b:1f:8b:e5:86:8c:72:ea:
2c:38:ba:36:56:9c:be:5e:6e:4f:d0:1c:2e:3a:81:
b4:49:d4:5b:49:e3:a0:b1:4b:6b:20:0d:73:18:b9:
4a:33:a4:15:1f:6b:8c:76:73:0a:bc:26:15:ae:c7:
31:c0:92:4c:de:72:57:96:d3:fc:57:82:7a:31:b8:
ae:c9:a3:9c:bb:c3:d5:64:0b:cc:39:f7:bf:82:9b:
cf:94:76:e2:55:7d:58:4f:96:b2:f5:25:4e:1f:50:
0f:4b:d2:e5:e3:51:20:a2:a1:e1:ac:81:9d:14:54:
42:2e:ee:0a:c8:6a:44:50:03:98:32:bc:1b:c3:64:
a6:fd:95:b3:b5:c6:82:23:88:66:a0:ec:5e:d6:1d:
88:ab:64:95:bf:c6:6a:d1:c3:2b:2c:df:b2:5d:08:
12:c1:2a:cf:48:63:a2:28:b2:cc:0b:7f:d7:d3:64:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:A9:05:9E:0F:62:C7:F6:D0:6D:98:7B:9B:1B:CD:DB:00:7C:44
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:47:47:f7:22:15:48:46:e8:b9:b6:50:5e:d4:31:1c:e8:
fa:d2:37:02:4e:62:4e:c3:e7:a6:57:53:41:5a:81:0f:90:39:
65:d1:42:fd:6b:6f:ca:c8:1d:c8:2f:8b:a1:1b:71:08:3e:e3:
90:84:a4:5e:d7:73:08:b0:fc:75:94:83:e8:33:24:36:eb:1d:
d0:49:b3:80:8e:e7:c3:11:bd:b2:11:f0:5d:d3:28:97:6c:75:
03:5c:21:91:6d:21:7f:7d:a1:9b:75:29:bd:41:cb:41:99:77:
4f:2b:9a:03:4b:e6:4a:d1:45:fa:71:a4:07:08:5e:2d:58:6b:
1e:67:04:3b:d0:10:8e:7c:41:aa:bf:2a:99:41:0a:c5:97:ee:
c9:e5:58:21:37:b1:9a:78:85:b6:ac:ea:db:62:21:2c:45:7b:
cf:bf:ad:44:5a:a5:d2:20:70:4e:ff:99:21:ba:f2:65:62:d5:
c5:ea:05:f0:a2:73:e8:45:bc:66:2a:d9:72:8d:67:0b:3e:f4:
3c:8c:f4:09:72:87:b9:2f:3f:fb:28:7a:89:73:5e:98:18:30:
e6:0d:fa:73:f0:d8:42:34:1d:ba:5b:31:eb:f5:f0:09:93:39:
40:2a:4c:a7:16:9f:4f:42:b1:9d:90:e1:c0:67:e5:5f:e3:f5:
53:68:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:26 2026 by rpki-client