Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: o3GWAVgbUVRHorIxSdiwsOUt9YX3vpt2wusvojVTvfI=
Subject key identifier: A0:B3:CC:4E:E2:73:40:C2:35:8C:51:2F:36:AB:8C:56:D0:33:ED:01
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019D3865C4DCA6A8DB23977A5AF1F117C9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 02CD
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: KEev86svpAueO8veqiaCNQVfz30.roa (hash: RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: LBcLEe2DI2Muz+BE3uX53SjkvmSVHwK02uHunRssq18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c4:dc:a6:a8:db:23:97:7a:5a:f1:f1:17:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=a0b3cc4ee27340c2358c512f36ab8c56d033ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:cf:fa:6f:9f:d6:ac:81:55:0f:78:98:c0:
dd:a1:b2:b7:de:cd:91:7e:89:77:16:b8:be:0f:d2:
e2:9d:01:ee:3c:d5:80:f3:ef:5b:8f:d3:3e:ef:87:
c2:f9:bd:b7:a6:5b:7f:3b:77:46:ff:65:0a:18:33:
2c:69:18:42:71:51:8e:07:49:a3:33:38:fb:bd:37:
6b:e3:ab:08:cb:ff:17:2f:ea:6f:04:b0:4b:77:8b:
8e:23:06:0d:73:2b:2c:bf:04:5e:b2:2e:a9:12:4a:
51:04:f2:67:0d:57:f6:9e:db:59:06:9e:c4:c6:6d:
d4:63:2d:b9:e2:49:35:aa:11:72:a3:d7:b3:69:80:
0d:01:e4:e9:a2:68:88:1e:56:b0:95:65:a7:11:29:
ef:de:4c:03:77:9e:db:89:fc:3e:c3:73:02:7f:78:
f4:64:6c:c9:d7:35:cf:f8:ea:f2:d7:18:45:cc:15:
31:bc:8c:ac:39:56:ef:97:ec:fb:d0:2e:50:72:6a:
2a:e2:b0:11:ff:63:d4:30:77:38:c7:4d:18:f5:6a:
49:08:ce:64:82:36:44:e7:f5:1f:c9:b5:f9:45:85:
aa:2f:6b:65:f6:85:cc:25:c4:a2:6a:6b:f7:1e:f9:
cf:d9:7a:71:dc:96:67:5c:eb:f9:3c:54:d8:6d:af:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:CC:4E:E2:73:40:C2:35:8C:51:2F:36:AB:8C:56:D0:33:ED:01
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a7:c4:ae:25:2f:3a:96:6b:c1:0f:09:43:8a:6a:29:a3:f8:
a8:87:0c:8d:41:68:68:aa:cc:a9:d2:12:ea:b4:27:7a:2a:94:
e8:ee:6d:a5:07:62:c0:0e:ea:16:90:aa:49:73:8c:ef:3f:b9:
7f:4b:51:4f:14:8c:51:42:b5:03:47:47:9b:e2:eb:53:e3:bf:
db:8c:d3:37:aa:db:62:5c:27:43:75:5a:b5:85:b3:b5:72:58:
c2:9a:fd:a6:6e:be:4f:ff:e4:3b:82:e2:bb:de:c9:08:6d:08:
fa:47:04:71:bc:4d:7d:c1:27:8f:58:cc:24:af:05:41:cd:e6:
9e:ab:5d:bc:20:7f:f0:62:cb:e4:6a:9f:f4:30:c3:76:d9:8a:
1a:31:77:94:15:6d:d1:d5:47:f3:40:af:f1:72:fd:b4:b0:db:
d8:e0:c5:42:8a:45:1e:38:6e:d2:a6:4d:5f:b3:3f:76:92:d3:
ee:ba:0c:e6:c5:9b:33:35:9d:4e:c2:eb:5d:d2:dc:75:63:02:
06:a0:ee:08:cb:7b:88:62:c6:da:a7:86:c0:67:73:1b:4b:30:
79:50:09:ab:30:51:6d:b0:3c:60:6a:b3:94:e6:08:2a:16:78:
22:af:42:9c:fd:4c:58:a3:69:ae:15:b1:39:08:68:b9:86:1c:
8e:1a:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client