Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
File: aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft (raw, json)
Hash identifier: Y9WYPIILLM70eWPKrxHudEZ0rZO6yJQsHa3vWkoHM2k=
Subject key identifier: D6:09:D4:0E:7E:27:A7:D6:AA:0E:CC:A6:27:AF:37:BC:E1:EF:7F:E2
Authority key identifier: 69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
Certificate issuer: /CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Certificate serial: 019CE2FE608A8ADDA83DCA0CC4136B44EA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
Manifest number: 4F
Signing time: Thu 12 Mar 2026 17:00:47 +0000
Manifest this update: Thu 12 Mar 2026 17:00:47 +0000
Manifest next update: Fri 13 Mar 2026 17:00:47 +0000
Files and hashes: 1: aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl (hash: LUJSu5pvwOicO+GTKDE5snVCrLxWhu/ST9fO1Dfyd9s=)
2: iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa (hash: A/Iygha2SGjwHmAbZm3zd/UIf3Y/PB7zRPxZUCvbMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:60:8a:8a:dd:a8:3d:ca:0c:c4:13:6b:44:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Validity
Not Before: Mar 12 17:00:47 2026 GMT
Not After : Mar 13 17:00:47 2026 GMT
Subject: CN=d609d40e7e27a7d6aa0ecca627af37bce1ef7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:30:7c:81:4e:1f:c2:ef:3f:3c:ba:4c:71:
76:9c:d5:ef:9f:d4:22:19:22:53:db:02:d8:15:55:
db:4e:8b:2f:e4:2d:8d:ba:f7:c1:3e:8d:59:bd:c9:
12:59:34:81:77:18:9f:19:9b:cf:8f:d9:97:92:ac:
fc:ee:13:df:a4:cc:5b:53:fe:04:6a:6d:c0:0c:21:
ec:03:1a:b7:e3:d3:6a:62:53:75:4e:7c:87:94:17:
39:7d:f8:be:7f:0a:92:38:82:28:a7:39:49:a1:85:
53:e3:1e:4d:d4:1c:d9:90:e6:a6:2c:e4:65:fb:ed:
eb:18:ce:79:b2:9d:fd:4f:44:27:9a:8f:a9:69:87:
34:80:22:ff:de:93:e7:43:37:b4:c4:77:7d:12:5c:
b3:ea:18:2e:f6:69:ae:d2:d3:7f:ad:4d:b9:2a:e6:
43:95:f1:bc:a5:46:29:4c:a0:25:9c:59:59:99:90:
e7:97:fc:18:93:d4:40:fd:18:38:aa:7a:0e:5e:e8:
52:c0:44:27:b6:56:c2:8f:fc:08:0e:e9:f3:01:bd:
c9:be:40:13:4b:23:f3:29:42:c2:ff:d8:c6:49:32:
52:1e:72:b9:16:46:56:52:c2:03:72:f7:93:ee:2b:
d2:68:3a:87:da:15:b4:75:0b:67:57:94:89:30:f1:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:D4:0E:7E:27:A7:D6:AA:0E:CC:A6:27:AF:37:BC:E1:EF:7F:E2
X509v3 Authority Key Identifier:
keyid:69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:87:95:17:fd:a3:94:31:2c:3c:2b:3a:bb:9a:20:9d:65:
52:ea:27:72:1b:0d:50:75:95:11:e4:cd:37:6d:a9:64:24:d9:
7e:1e:4b:2a:b8:f3:9e:0f:1a:c1:37:7e:85:22:b3:54:d0:9a:
8f:c1:fd:e3:cb:87:92:3b:c6:59:0e:c5:48:1f:7f:8a:5b:fc:
d7:2a:b2:ee:34:82:83:e3:09:c9:1e:2b:7b:a8:8d:8f:93:01:
d6:cf:5e:3c:92:48:2e:b2:63:76:c1:e7:92:bf:28:94:83:1d:
b6:07:7e:64:07:51:56:d2:6d:99:26:16:9a:b5:a6:6c:42:cd:
cc:6d:91:f1:43:db:03:fc:e7:8c:7b:9a:46:34:e8:cc:d1:fe:
29:f0:2f:98:4f:c4:c9:05:e1:5f:80:29:87:91:1c:ab:0e:2a:
de:b7:3e:a4:56:f3:27:6c:52:ea:8a:b1:d7:c8:4c:6f:20:c0:
fc:d7:3e:30:6d:a9:84:7d:1d:2f:4b:3a:c4:e3:0f:8a:94:f7:
2e:8b:84:0d:7b:75:c8:af:c7:9c:19:e1:78:56:08:65:e1:e8:
7d:0c:10:58:5c:80:f5:85:47:01:a0:e4:98:24:9d:9d:39:fe:
93:32:d0:5e:c1:ee:a8:ab:77:c1:88:45:f4:1c:68:ee:49:55:
2b:b6:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:32:44 2026 by rpki-client