Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: t9GKEyz+uqdtO6xYbdUAbWREpVUXW8+WqCKYQ56FRy0=
Subject key identifier: 29:FA:41:AB:EA:4C:20:59:5A:C7:F7:F5:74:CA:38:FA:E6:6A:B1:39
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019D38D32F881A903DF6D0025E842A1ED4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: dAmYKUcXFsIcdheqWr5QpCUVV5hBdtqF/Skv45K+c4s=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2f:88:1a:90:3d:f6:d0:02:5e:84:2a:1e:d4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=29fa41abea4c20595ac7f7f574ca38fae66ab139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:95:54:4c:2c:ad:71:f1:c6:cd:70:64:e8:
86:be:63:1c:21:03:75:a8:5f:41:df:75:9e:c4:6a:
8f:ee:81:59:98:e8:7e:a9:1c:00:6b:f2:bf:a3:8c:
5f:d7:c5:db:c0:82:1c:29:52:68:c6:be:3b:30:b7:
d3:09:7c:2f:07:9a:e7:43:eb:83:d1:45:85:3d:82:
4f:bd:56:7b:3c:23:ba:09:bf:c0:cf:df:63:08:78:
8c:24:7a:ca:15:71:3b:a6:60:05:a7:83:35:d9:b9:
ae:99:ff:32:d0:c7:91:dd:06:fe:29:77:17:1d:56:
42:25:5c:5f:1b:11:0d:17:ec:cc:89:58:d8:2b:a3:
e1:38:f3:2e:60:55:e0:8d:75:09:f1:f1:bf:32:d1:
4f:3b:0f:ac:b2:47:fd:9f:95:18:c7:be:e5:80:e6:
11:e5:d5:8f:2d:57:f2:f7:4a:2c:47:17:fd:58:f4:
fd:6d:2a:e5:65:ae:0d:b0:10:46:4e:dc:b2:58:7b:
a0:3f:22:8e:42:85:18:f6:8a:55:29:28:fc:47:52:
38:23:65:7f:fe:2a:00:66:40:e8:a5:8e:cd:86:82:
3e:99:a6:14:75:e5:a3:68:96:4a:f1:41:fa:2a:8d:
63:d6:3b:42:f2:a6:ba:79:b2:cf:0f:94:99:58:7b:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:41:AB:EA:4C:20:59:5A:C7:F7:F5:74:CA:38:FA:E6:6A:B1:39
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:76:4b:79:cc:6c:33:0d:41:88:d4:66:22:65:3a:8e:60:73:
9b:ea:80:28:5d:3c:9e:6e:01:3b:0a:05:f3:5c:cc:1d:2d:26:
b3:39:ee:c2:38:21:3c:6e:33:a1:4d:d0:75:df:f1:94:76:2a:
60:29:f3:23:dc:02:dc:05:2e:68:37:71:2f:42:22:50:40:be:
e3:e8:3f:63:69:8a:0d:09:e5:00:0d:12:7a:15:7a:fa:d0:71:
0c:df:c4:02:47:d8:bb:96:29:ac:c5:b6:6a:d5:02:46:ad:2d:
98:8e:20:07:5d:bc:81:8a:6d:f1:a4:59:4a:eb:8e:26:0a:1f:
56:8c:35:ad:65:b3:bb:ff:0c:ec:ed:55:fb:92:18:15:b0:54:
43:1e:40:a9:69:70:72:a7:0b:f7:ff:ca:94:86:05:18:de:68:
d8:c6:c0:b6:2b:d7:7a:72:01:06:a8:59:07:74:ff:f5:bf:4d:
ed:7b:fd:eb:bb:9f:0b:a7:1b:10:ba:1b:83:07:d9:fb:af:9d:
e7:b3:fe:1b:2a:c4:ff:aa:3f:dd:2c:df:1e:9e:86:33:77:85:
c1:21:08:50:a6:15:0f:76:93:ee:a5:a5:47:67:58:31:15:20:
1b:69:f0:e9:73:d7:86:a2:16:70:27:fb:7a:ff:5d:54:ae:7c:
3b:68:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:10 2026 by rpki-client