Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: PMVo1nUi0F7rZifwz6MQBnGvJccu2tYrzmQ1+h963WU=
Subject key identifier: 79:72:59:CC:A2:E4:B8:ED:37:D2:3A:4D:D1:B8:B1:0E:03:58:EA:B0
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019CE55AC647A879F7CC2FA011E41AB2976A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 09C2
Signing time: Fri 13 Mar 2026 04:00:57 +0000
Manifest this update: Fri 13 Mar 2026 04:00:57 +0000
Manifest next update: Sat 14 Mar 2026 04:00:57 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: qUtbq4M6NCjHHEPkruqDg7iJu7Ql/xiJDxQgPY//xYc=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:c6:47:a8:79:f7:cc:2f:a0:11:e4:1a:b2:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Mar 13 04:00:57 2026 GMT
Not After : Mar 14 04:00:57 2026 GMT
Subject: CN=797259cca2e4b8ed37d23a4dd1b8b10e0358eab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:81:2e:b4:e9:3d:c0:6a:13:20:80:36:9e:
de:4b:56:68:b1:c0:7a:70:fe:15:d9:4c:26:59:90:
bb:7b:77:d1:68:2a:6a:62:c4:a8:27:00:69:3e:32:
53:93:69:6c:82:a9:0f:e0:2c:10:4f:b1:8f:d7:1f:
6d:1a:15:5b:70:03:e3:50:4c:54:aa:23:e6:63:f9:
e3:dc:ea:31:27:2c:96:4d:bc:f8:ba:c7:d3:23:a8:
b7:2e:80:da:54:d1:6d:75:db:df:49:70:a9:de:56:
cf:46:7c:39:2f:8d:04:7a:a3:9e:36:2e:3d:80:7c:
f9:61:1a:2c:45:76:ff:05:42:98:bc:72:00:00:e5:
17:05:37:0c:18:b9:a9:16:f0:75:66:a0:12:2d:19:
da:1e:14:9f:6a:58:ee:9f:f6:07:e8:d7:eb:c4:ae:
4d:0e:c8:49:7e:9c:33:6a:81:93:9e:12:a7:74:9c:
83:81:bd:f4:4a:44:ba:6e:27:f5:b8:55:bb:80:24:
35:92:22:53:0a:fa:83:b3:da:ea:05:b5:81:43:46:
02:e7:2d:b1:c8:ca:d1:13:ee:4c:d3:33:2c:c2:ce:
61:02:03:af:47:44:3b:74:f6:93:cd:07:54:f5:46:
fc:1b:1c:93:e7:18:07:8f:1e:cd:41:28:24:35:5b:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:59:CC:A2:E4:B8:ED:37:D2:3A:4D:D1:B8:B1:0E:03:58:EA:B0
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:63:0f:80:cc:1e:e1:2d:b5:25:35:03:37:17:51:15:49:2b:
a4:66:1d:df:7c:ea:8b:17:34:fb:73:23:0b:db:d4:77:bc:4e:
11:ad:7a:95:32:f3:d9:07:60:94:ee:95:14:f6:00:61:ee:ee:
3d:52:fa:c7:a4:4b:76:40:83:a5:29:d3:7a:d2:e5:e9:f8:42:
6a:8a:e8:ff:25:7a:2c:17:a1:c8:3d:db:a3:b9:d3:cc:9b:0a:
5b:2c:19:40:6e:38:ae:a2:d6:9a:f1:b2:b1:e0:e0:9f:d8:60:
bc:d6:50:59:8b:d6:f9:01:75:40:e3:6c:79:1d:06:70:8b:0d:
41:25:89:2d:b2:2e:28:56:a0:c5:2a:92:91:fe:03:8f:12:96:
f0:da:8c:7d:14:0f:9a:3a:f0:ad:16:5e:d0:30:39:b1:63:28:
ba:bc:17:43:5a:cb:91:a8:23:94:ca:3d:b6:dd:cf:bb:91:97:
d5:af:c2:f1:bc:99:e2:bc:ef:d0:80:c3:36:35:f5:7f:83:66:
27:e1:a8:79:88:54:af:48:b9:0d:93:f5:4d:0c:45:5b:78:1c:
74:41:f1:41:fb:eb:db:60:d6:ac:cc:c0:12:7d:8c:51:2b:de:
97:a7:2e:ac:2c:8d:1d:8c:4b:95:63:03:40:1a:7b:46:43:ef:
3e:11:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:22 2026 by rpki-client