Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier: viLMROG0piJuV1PMkWPbCd2bFbH55E3Kfks7bWwpTE0=
Subject key identifier: FD:3F:5B:31:0D:7B:0F:0C:BC:6D:C4:86:31:9F:E1:FA:FF:6A:CE:CF
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial: 019D37C0C9D5B845CB63DB048DC17C26D2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number: 03CA
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: xxIEbCMKRAsp3J6YsrB13RtUxPQid+twekDlApEsG68=)
2: tFPfs4xpIocrr9F_alsNUwh6dNs.roa (hash: EmNlyy0F+FzqmqEZRdQGTBdexRs7cZ0YpJygNUDJNHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c9:d5:b8:45:cb:63:db:04:8d:c1:7c:26:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=fd3f5b310d7b0f0cbc6dc486319fe1faff6acecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:a2:ec:e8:b2:81:f9:59:bc:59:5a:de:5f:
25:f6:81:6e:2d:47:87:49:48:3f:0c:39:ac:af:58:
aa:0a:8d:72:fa:ed:f5:46:72:ec:57:c7:d2:98:1d:
db:45:1c:24:cf:d1:a5:49:eb:32:3b:e8:3f:72:60:
af:d0:2c:c8:1f:fb:78:89:05:b8:13:32:d9:60:ed:
27:7c:d6:0b:f8:80:dd:10:85:35:a4:f3:96:5e:ca:
af:f4:1c:b2:1b:99:b0:5d:84:62:c5:e0:d2:ff:6e:
6a:58:a5:06:5a:47:ae:17:a3:08:c1:c2:9a:5e:fe:
29:0c:ee:fc:50:30:60:b1:7c:5c:d3:9e:09:cd:5f:
7d:2b:52:94:91:97:95:87:48:d4:c3:ea:2d:45:7d:
64:cc:1b:0f:e9:4f:97:f4:fc:8d:0b:0f:c1:93:97:
c0:b7:a6:42:b7:9e:78:6e:72:ac:03:ef:b9:49:60:
5f:1f:d4:be:f0:b4:27:28:ae:ba:e1:f5:d4:a7:34:
74:d4:36:c7:9e:b4:18:7c:81:ab:35:30:cc:80:4d:
83:e8:92:78:84:ca:40:f5:df:39:5b:61:22:d4:42:
8f:1f:2a:d6:54:86:97:12:8b:e6:04:9f:da:e1:95:
c5:c2:86:ce:f6:e1:20:59:f6:01:e5:b0:29:17:ca:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:5B:31:0D:7B:0F:0C:BC:6D:C4:86:31:9F:E1:FA:FF:6A:CE:CF
X509v3 Authority Key Identifier:
keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:16:b6:77:ef:61:2a:e1:1d:f3:49:f0:5d:41:96:52:15:b5:
96:6d:a6:6d:fc:0a:22:20:c5:1b:27:7e:0e:5f:f9:a7:61:cd:
1c:7a:c1:41:56:65:b6:1f:d1:7d:89:c5:09:d2:bf:29:c1:62:
db:01:a5:cc:0f:94:67:2b:d3:cb:8b:cb:2c:b5:35:30:ba:a3:
8e:34:5e:13:b1:b4:8e:7d:7b:c3:a3:36:16:9b:12:dc:c2:21:
de:fa:6e:0b:2b:b0:02:e0:dc:0e:2a:66:97:52:20:bc:a6:44:
79:99:57:cd:3c:1a:fc:5b:cd:09:40:a3:5b:0d:fb:8f:48:4f:
67:45:7c:e6:7a:4c:88:4c:8e:37:c9:fb:98:da:3f:c4:e2:5e:
99:fa:ca:89:59:92:19:da:01:90:ef:0e:0f:13:74:ec:b0:80:
72:4a:96:ac:73:9e:62:14:03:1d:27:31:71:b6:3f:af:bb:6a:
d2:62:99:f0:13:a6:bc:5a:a5:84:a1:14:52:c5:d8:29:7f:69:
dd:ac:3e:8a:2e:af:2f:93:9a:af:9f:af:a9:58:2d:f1:d4:e6:
75:24:d4:65:d7:82:73:be:f6:cc:e3:17:94:c7:b4:97:01:3f:
d6:b8:64:c3:eb:20:78:8c:45:61:a1:7c:9d:97:7c:75:a5:fa:
f1:c3:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:38 2026 by rpki-client