Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: bG0awoVQTF0feMwPTqGPEwl0UCZNcXz2ZsgcZHiENAg=
Subject key identifier: EE:E4:9B:D0:2F:B9:9F:F0:12:03:5F:91:EE:1B:F7:DF:D0:63:77:EA
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019E3004CEA93D45C02E55896E12652A34E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0E85
Signing time: Sat 16 May 2026 09:01:21 +0000
Manifest this update: Sat 16 May 2026 09:01:21 +0000
Manifest next update: Sun 17 May 2026 09:01:21 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: pYEeHIkGSIonY4Hld5zRh9QZ6xLow6kuUfHwQauLqlI=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:ce:a9:3d:45:c0:2e:55:89:6e:12:65:2a:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: May 16 09:01:21 2026 GMT
Not After : May 17 09:01:21 2026 GMT
Subject: CN=eee49bd02fb99ff012035f91ee1bf7dfd06377ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:03:7a:e8:df:53:17:cd:eb:77:1d:59:ce:6e:
2f:68:29:13:0c:56:16:3d:ea:61:b0:cc:71:cf:3b:
c5:fd:01:c7:38:e3:59:70:09:19:48:54:3e:99:2a:
de:18:60:c1:88:aa:e0:9d:49:56:08:cc:f2:75:c8:
08:fa:c5:67:a9:76:95:a9:89:4b:b9:02:0c:b3:38:
1f:19:c2:ab:1a:a5:b4:79:fc:02:75:a5:ee:1d:65:
23:15:73:79:63:91:57:fc:5f:c6:2f:34:e7:38:67:
61:e3:03:81:3b:d8:16:9d:1d:27:6b:6f:b0:aa:4a:
88:05:ff:8b:39:90:24:c7:2c:ef:93:9e:cd:fa:6c:
88:37:18:47:ef:78:14:86:ce:55:c9:66:a3:19:12:
34:12:57:f5:6f:b3:9b:14:f1:87:dc:32:cc:2a:ae:
c9:05:81:51:5c:44:46:d4:c0:61:0c:ef:b3:5f:fc:
e1:0c:27:fa:2c:e4:3b:94:ad:35:6f:50:3b:32:65:
ba:f4:fb:db:63:2e:b6:d7:39:06:78:c1:92:34:51:
73:7a:68:bc:22:1b:b4:f8:52:13:fd:03:dd:13:da:
8c:e8:0a:ea:b2:10:f4:9a:ec:ad:75:18:e7:f9:dd:
44:4c:8c:4f:05:a7:09:be:df:52:e9:f2:92:20:9d:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:9B:D0:2F:B9:9F:F0:12:03:5F:91:EE:1B:F7:DF:D0:63:77:EA
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:2e:46:5d:cd:86:55:9f:b0:06:7e:5d:79:49:a9:8e:4a:
6e:13:33:be:b4:c0:0d:91:08:9b:ff:f1:33:b2:7e:b0:d6:5e:
4d:aa:09:fe:e3:42:fd:7f:71:ca:29:cb:0b:aa:68:8e:06:b4:
71:9d:14:5a:23:27:9a:fe:c4:f5:cf:e0:5f:cb:13:77:c6:82:
19:08:3c:58:da:dd:92:20:3a:d7:ba:16:5a:04:fa:1e:ce:9e:
96:53:cc:7f:88:d1:c7:28:24:5b:19:b4:d4:f8:c8:3e:c1:bf:
d3:e2:95:af:f2:7e:8a:d8:ee:55:53:92:ab:a9:c8:81:1c:21:
da:d2:b8:a2:28:5c:0e:da:db:c9:0f:b6:bc:1d:16:99:48:73:
f0:c0:53:c9:c2:8e:1a:d3:2a:3d:85:c1:fe:c1:b9:35:f1:fd:
59:64:dd:b4:11:9a:89:f5:44:10:63:41:d1:18:9d:66:5c:8e:
98:30:9a:4e:1a:19:63:8e:32:fa:4b:ca:22:41:a9:94:e6:6d:
b6:30:95:e6:f6:a7:63:37:0b:44:f4:2e:03:f3:ce:76:dc:ea:
1c:a4:8a:e3:2d:5f:23:47:01:74:42:ac:e5:36:59:1c:fc:66:
40:c6:9b:fc:bd:45:03:eb:1c:0f:6e:23:b5:a3:9f:24:1c:61:
be:74:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:28 2026 by rpki-client