Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: 5HDSID4hdzSZepXkAiyBC6i/skrN0V5g+vy9C6NfIl4=
Subject key identifier: 9B:F3:F4:4A:ED:6D:F9:20:3F:1F:07:28:4F:09:B2:EE:C0:5B:F0:5F
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 019D37891DD429B91388C009B00CD48189FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 09CF
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: ab0dnrsW2YJiEsbiLaoZJnIPP2EZuYz4Th8WpmGNUME=)
2: aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa (hash: rT/Vj6/a6YnM9d3VVAjTqdJg4CGPx8A6IhEaB6Bvdck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:d4:29:b9:13:88:c0:09:b0:0c:d4:81:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=9bf3f44aed6df9203f1f07284f09b2eec05bf05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:bd:58:4a:81:30:70:2b:f1:ee:29:a1:2e:
0b:9d:e9:22:0d:a9:6a:fc:c5:d7:32:9e:1e:46:c4:
f3:16:dd:af:b0:af:33:94:7d:9b:f3:d9:88:ae:da:
c1:b1:a5:f6:eb:8b:0d:64:5d:8f:20:f5:0a:88:f9:
38:76:4b:17:88:f8:18:c3:06:b7:d5:71:21:98:28:
8d:96:05:36:5b:9d:49:bd:83:a9:47:1f:db:2c:5c:
e8:6e:2f:02:8f:5e:e8:08:ca:77:a0:81:cc:9f:78:
13:f4:a8:7e:02:5d:1e:cc:48:0b:a5:31:44:49:2b:
0c:8f:5e:52:3a:b5:e1:d9:7d:21:1a:1c:bd:55:55:
41:cf:97:e4:13:24:d3:56:0d:46:5c:16:52:86:e1:
2e:55:1d:de:de:6a:c3:32:48:73:cd:40:d7:b2:ee:
76:d5:bc:6b:81:a3:5c:43:14:20:a7:b5:96:57:41:
7d:81:c8:3c:11:7b:0d:22:c6:85:15:e6:f0:01:08:
cb:41:bd:3f:3d:43:81:81:d7:b4:55:8f:3b:11:e0:
de:41:29:5a:9f:6f:85:f2:f5:b0:50:7b:81:51:37:
5d:74:0f:ad:bb:61:b2:f4:58:7b:1c:fb:6e:8a:72:
77:b1:79:c9:e3:6b:8d:dc:2e:75:e7:e4:36:63:cc:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:F4:4A:ED:6D:F9:20:3F:1F:07:28:4F:09:B2:EE:C0:5B:F0:5F
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:87:f6:86:29:01:1d:06:77:a8:ae:16:ad:86:00:0a:c2:94:
b5:40:82:d2:4c:65:91:0d:76:1e:54:35:d8:24:c0:a7:13:49:
17:6b:06:fd:35:b3:c3:f9:46:ef:ee:bd:14:17:a5:00:37:92:
9f:e3:57:83:0c:d8:65:8c:0b:c2:fe:cd:5c:6e:62:29:ed:89:
22:a6:00:d2:9f:51:06:cc:ad:31:b4:eb:f9:0b:1a:cd:6f:76:
74:31:6e:34:b6:b9:fa:70:18:70:15:91:a8:50:ab:04:9a:bc:
f3:46:94:95:a8:e1:01:2f:f3:04:99:98:4e:4d:55:45:27:29:
c0:51:18:8e:a1:d4:87:f0:e8:c6:6f:99:ad:06:11:8f:60:83:
e1:46:74:43:b7:77:e7:43:31:a9:c7:11:4a:39:f5:01:94:f4:
8c:e2:2d:9c:90:6b:db:3c:92:dd:61:85:0b:43:3f:4c:a6:64:
07:a5:4f:9f:ae:9a:18:62:2d:6d:ed:9e:8d:b0:1e:93:1d:44:
38:6c:b8:2f:bc:a2:f2:70:fa:4a:49:48:cd:b5:fe:2c:7b:63:
6a:a1:2b:d1:91:c0:52:4a:75:45:de:01:3f:4f:7d:af:f1:33:
62:eb:5d:d8:18:f2:7a:54:c1:b6:bc:24:b9:4e:43:bc:27:5a:
0a:18:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client