Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: WJ4KStG3jRmDZ8z5RZ5MAF5Kk5aC49mG1XS8YrY1pPk=
Subject key identifier: 72:DB:3B:7C:A5:46:DB:04:EE:8A:30:57:DB:AA:26:A9:BD:19:80:60
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019D389C5B36A85B696A485F8311451754B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 11CB
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: oJORYfhqLr27+0VFN1pbWcJhLb1fvcyA4434c9olX1E=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:36:a8:5b:69:6a:48:5f:83:11:45:17:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=72db3b7ca546db04ee8a3057dbaa26a9bd198060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:4f:67:86:7e:33:6f:0e:2a:d5:25:9e:d5:
a6:62:65:45:f2:c6:40:1f:72:01:d2:09:e6:b1:19:
3a:b4:79:f6:35:ca:da:88:0f:70:fc:25:fa:94:d1:
d7:b2:7f:cc:2c:37:41:29:73:23:31:8c:19:65:17:
40:de:7b:c1:0c:a0:45:77:c6:97:2e:61:e2:f2:77:
f2:52:a5:aa:3d:f9:1e:79:30:c2:53:91:02:0c:9d:
b4:8c:6b:ed:fb:d6:f9:4c:2d:06:d4:62:16:89:be:
44:32:26:23:13:71:5f:63:0b:d7:d2:e3:2c:ce:98:
1b:3a:d3:65:24:77:bd:fd:09:32:11:24:55:5b:ef:
c5:8a:dd:fc:df:8b:90:31:3a:9a:27:57:c7:1f:fd:
cd:e3:c9:61:a5:cc:1d:08:85:33:d5:ab:56:44:fb:
c9:29:cf:ca:29:f4:3a:bb:f3:cb:60:98:e3:a6:43:
1b:ce:d9:dc:f8:cd:a0:cb:5f:59:1f:b6:9d:65:1b:
1b:61:09:5b:0c:af:ff:e9:8a:5f:a3:59:0d:b0:95:
85:25:3e:1a:55:0a:b9:ae:fa:79:4a:b1:15:51:8a:
35:82:b3:86:1a:d8:4d:45:b2:38:1e:d9:09:ee:6a:
44:5c:b3:b3:26:7d:8a:83:89:1f:ac:37:27:2f:8e:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:3B:7C:A5:46:DB:04:EE:8A:30:57:DB:AA:26:A9:BD:19:80:60
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c8:15:9c:9f:d3:82:fd:d7:b4:8e:ec:f2:f4:d9:54:f5:61:
a0:db:f1:16:a1:40:77:27:d4:50:0a:3c:c8:85:fa:4c:b7:ba:
1e:83:fc:14:73:a4:c7:31:25:b4:84:40:bb:78:bc:f9:87:1b:
05:1a:b1:45:cf:0c:3d:24:d9:0b:93:26:81:49:aa:db:0e:a7:
59:7b:45:c9:49:3a:b7:d6:84:1a:03:67:4b:36:9f:22:ab:35:
d6:f1:ac:ba:8a:fc:b7:09:32:bd:af:b0:9d:83:b7:d2:57:3c:
39:10:67:22:fc:aa:8c:da:22:9c:20:b6:2d:b9:f7:20:dd:23:
63:c7:99:c8:c9:4e:1b:ab:2a:41:b8:af:f7:b1:ae:a5:1e:19:
51:52:00:14:ac:c0:14:aa:7b:30:3d:7a:a3:3d:95:31:f1:9b:
43:c3:ee:48:e6:af:c2:92:13:f9:33:08:ef:38:d5:c5:42:b6:
84:ad:22:33:1d:5a:cc:f2:b2:a9:51:db:cf:4d:f0:13:81:15:
50:bb:d8:39:be:f8:72:4d:9f:27:80:d1:cc:40:20:a2:78:4b:
e8:20:ff:ca:54:4a:5c:80:f2:51:c1:5f:8e:e8:ae:6e:d6:b8:
96:63:99:64:b1:2a:e1:73:1f:d4:16:0e:23:57:9b:5f:6f:9a:
3f:60:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client