Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier: AoD7y8m3A84tdy5jl52HrZSXXFjgxl/R1P07WK372oY=
Subject key identifier: CB:EA:F9:0A:10:7B:AD:DA:7C:06:A4:AC:3A:A9:5E:F6:21:EB:8B:B6
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 019D38D2F75BC6463A2DEFDCB8667196779F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (hash: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI=)
2: Prdw3L1Fwkc8ytRFu-oUK_xAQuU.roa (hash: doY6BOzth/370lmaa2UkKcv45HRXOMVWu34UaSPlsc8=)
3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: wHmBWD9Ol+QCUZzYbbvBobR+//bZW4v9oAyMo6P/V2A=)
4: mQRanHoIY0IoJuE4VcyHEcinjeo.roa (hash: fBz0EC50LChidWvY4MFa5hHhW36+s8IY+jpOw7hyIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f7:5b:c6:46:3a:2d:ef:dc:b8:66:71:96:77:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=cbeaf90a107badda7c06a4ac3aa95ef621eb8bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:f4:b9:14:1f:f9:c4:42:b5:87:18:58:70:
4a:20:b4:42:39:91:df:33:42:78:e7:c4:f7:34:bc:
0e:42:32:f4:0b:f5:31:0c:3a:e3:bd:e5:4f:a5:83:
7c:fe:e3:9b:63:40:a9:e6:fe:1a:3b:02:44:7b:19:
46:2a:22:d9:11:01:3f:e1:2f:74:46:e9:89:d3:3b:
ab:7d:85:ee:cf:9a:e8:b4:5b:83:e2:a8:28:f3:53:
12:6d:61:5c:6c:0c:64:13:84:52:d4:5c:0e:e9:e5:
37:26:19:5c:6c:6c:06:06:92:aa:eb:33:5a:a4:8b:
76:a3:60:44:5b:a6:19:df:79:ba:99:ea:8b:40:67:
24:d1:23:26:2f:f4:0d:c1:1f:84:6c:ae:4d:de:0a:
bf:d5:fd:20:96:eb:8a:f4:e6:11:28:0c:b8:e9:24:
d5:da:a6:ea:d0:29:2a:6c:4f:40:90:c9:ee:3c:81:
c0:dc:36:a3:58:70:8d:0d:c9:ac:83:c9:23:a6:a5:
7f:e7:b5:df:13:6d:b0:54:f9:72:65:0c:0d:b2:5a:
5d:d9:72:18:15:58:74:45:e7:ff:74:92:3a:9b:56:
fb:c5:86:15:66:d9:b5:62:af:86:ad:3b:29:75:6a:
71:6b:cb:5a:5f:85:24:81:0a:ae:ca:b8:d7:17:76:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:F9:0A:10:7B:AD:DA:7C:06:A4:AC:3A:A9:5E:F6:21:EB:8B:B6
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:db:4a:46:7f:58:70:46:0a:8a:e2:e8:a6:ad:90:6a:f1:5d:
77:d8:64:f8:4a:0e:c9:62:57:b9:80:48:82:db:f8:49:7b:e5:
e0:5b:72:d0:cd:7e:d2:7a:3d:15:41:9b:33:0f:64:9d:e5:b9:
01:55:e0:e3:4d:cd:e1:94:c6:6b:56:17:97:5f:c2:ce:81:d0:
43:72:52:28:ff:a3:ab:23:cf:51:de:c1:8f:eb:76:d2:52:eb:
11:24:25:91:13:d2:80:c9:47:43:8a:ed:72:75:28:4d:fa:1d:
ce:bd:36:3e:b0:a0:7d:6c:fd:2a:a2:85:9f:70:06:8a:b2:54:
f7:37:fc:17:69:d7:17:95:7e:47:15:3c:1c:83:6f:81:93:78:
0d:cf:47:b6:ca:c7:e4:51:45:3d:d4:dd:78:25:ae:08:3d:09:
ca:0c:c3:b2:2a:ac:e7:da:70:56:0d:16:17:a1:0d:20:d7:8b:
8a:02:18:e1:13:87:2f:a4:2b:76:61:61:cb:63:58:97:d4:bb:
65:43:cf:40:86:a1:3b:4e:d8:8e:7f:0a:75:1e:0a:0f:e2:4d:
96:0f:de:89:d9:cb:86:eb:fb:f0:fb:da:c0:fd:89:e1:24:11:
66:f0:25:da:f1:9e:01:31:47:99:95:12:8b:e9:1b:a6:fd:c2:
5d:f5:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:51 2026 by rpki-client