Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: hU0fMyxzuOO1mPT9U5b7Wsm3cdPyuGAjqhvZvhypTgE=
Subject key identifier: CA:C6:74:77:F4:30:7B:B9:64:B6:BD:57:D6:58:FB:94:D8:33:F4:0F
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 019D382E19AF41122E3F450592DEF79C5AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: 025E
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=)
2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: BSGTrIXMnHTNXXI8kUsY3wftFCOy0ZmcrvN2H9dWBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:19:af:41:12:2e:3f:45:05:92:de:f7:9c:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=cac67477f4307bb964b6bd57d658fb94d833f40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:36:f3:ea:6c:c1:8f:9c:fe:c0:08:cf:f9:
6e:3f:06:98:08:5d:38:da:6b:75:92:05:cd:4a:58:
86:d5:ac:2b:36:b1:45:83:09:82:5c:d0:77:09:4c:
36:4a:ea:6c:3d:4b:67:c2:5e:0e:76:0d:16:53:9c:
50:95:40:c1:8d:a4:34:b5:11:6e:e5:f9:68:b3:33:
da:3e:21:98:6f:ef:c9:86:8f:39:02:17:4c:e1:06:
e0:7a:eb:06:4f:38:8e:86:9e:54:1d:de:7f:a2:33:
9e:6d:41:b7:c8:76:dd:c7:d7:8a:fe:a9:75:85:5f:
d4:2d:05:dc:9c:86:ea:1d:0e:ba:99:5e:1a:bb:83:
e2:b8:65:53:c1:41:bd:72:06:22:a2:b6:29:15:f8:
e5:82:89:a2:41:aa:c1:8c:ee:13:35:98:ad:cf:7c:
67:14:04:dd:48:d7:aa:63:6a:cd:86:96:dc:39:03:
21:1f:89:4e:15:a4:27:7b:d9:a3:65:cd:23:70:1e:
b4:23:69:fe:39:cd:0a:9e:eb:bc:b1:05:83:a9:d6:
ca:04:74:ca:e5:d4:7a:7c:a6:a6:c7:c2:8a:5d:91:
22:ed:3c:49:a8:bb:83:fb:f5:77:28:ad:e4:50:e1:
de:0a:c0:b2:cb:31:2c:6d:23:71:6d:c4:c0:67:84:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C6:74:77:F4:30:7B:B9:64:B6:BD:57:D6:58:FB:94:D8:33:F4:0F
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:72:3e:eb:53:ae:ec:eb:3c:91:28:19:63:57:6f:f6:77:
ab:bd:4d:88:27:73:14:a2:5f:07:0d:d7:76:31:0b:69:8b:13:
a3:d0:bb:69:22:20:f1:3f:41:0c:b8:7f:42:ae:6e:c9:b2:49:
a7:b8:f5:11:34:66:06:f6:76:3f:ba:df:80:77:1e:59:8d:ca:
5c:ab:92:e6:b1:7b:f9:fc:df:9a:2d:b7:d6:d4:c7:e3:03:d4:
b8:e9:d6:cd:96:0c:03:94:6f:fa:5d:a8:8d:b2:c1:99:c4:f6:
38:46:f8:9b:f4:eb:79:8c:4c:a2:2f:d1:12:b2:7d:71:fa:2f:
29:f2:db:f9:91:70:4f:01:97:4d:d1:d7:3f:25:43:0e:47:09:
27:cf:c1:bc:78:b3:b9:d8:46:ae:02:75:3c:98:76:4a:6b:b0:
30:a2:0f:c5:6a:a6:b6:17:1e:60:5a:aa:0b:05:40:73:74:e1:
59:82:0d:04:95:b4:1e:cb:73:c7:56:1c:30:86:29:f7:30:f3:
86:12:d0:fb:8c:e0:92:98:e2:6d:65:3b:db:6d:be:05:b3:79:
52:43:17:de:40:22:16:37:9b:e8:f4:04:46:30:3d:a1:38:ac:
8c:1c:6f:01:45:bd:5b:2c:cd:17:e5:e7:88:01:dc:32:17:19:
ac:0c:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:56 2026 by rpki-client