Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: dFHwHWi7hlMicK6KJjajIOi5l+2YXw0/wXI5M+ACD5k=
Subject key identifier: B3:FB:38:B9:C5:8A:4E:8E:42:55:0A:1E:FF:E4:3C:46:2E:CD:6D:DB
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 01A147CE27D7751B535ED3E1C1B4996C600E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1AA8
Signing time: Sat 17 Oct 2026 03:00:55 +0000
Manifest this update: Sat 17 Oct 2026 03:00:55 +0000
Manifest next update: Sun 18 Oct 2026 03:00:55 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: owGxsflxc9w6hmKRERDYv8gY9nXKo8yhiGNjX2oUzso=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:27:d7:75:1b:53:5e:d3:e1:c1:b4:99:6c:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Oct 17 03:00:55 2026 GMT
Not After : Oct 18 03:00:55 2026 GMT
Subject: CN=b3fb38b9c58a4e8e42550a1effe43c462ecd6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:2b:e5:d9:54:8e:1a:c4:c7:b6:b1:ee:8e:
a3:e5:51:72:70:b1:4a:ed:fc:05:27:26:f9:cc:f4:
f1:f9:87:3f:3e:37:a5:85:ba:7a:ab:b7:f6:3d:b8:
9b:c2:e9:62:bf:8c:ac:c7:9a:ef:9b:98:8e:4f:ab:
60:7b:f4:ce:3e:07:95:f0:a4:4e:14:c9:50:c2:8f:
52:46:fe:a8:9c:a2:8f:81:58:e4:1a:99:0f:a6:b2:
ea:b1:e6:ff:b4:e1:39:69:5f:e2:7d:be:27:db:0a:
6b:40:ab:1c:f4:23:ba:50:a4:7f:28:5e:ab:ba:e0:
55:1c:96:cc:fa:cf:1f:31:6e:8a:7d:a2:f6:98:34:
bf:7d:ee:85:59:c5:17:d7:67:a4:06:69:e1:08:d7:
50:30:24:a6:bd:21:ad:75:06:89:60:bc:c9:06:53:
7d:2a:94:4f:55:eb:ae:3b:13:03:b0:f6:fc:8c:20:
2f:30:96:9c:12:a9:18:6e:0a:97:a6:c3:61:69:43:
a5:b0:79:d6:79:fe:09:a6:b6:9a:3d:e2:f2:94:91:
ab:89:2f:3c:85:64:09:bd:34:8a:01:3b:6e:09:20:
b0:21:58:f1:97:1b:24:e1:9a:e4:1b:ef:86:9c:11:
87:88:86:2c:96:78:96:f2:bb:17:d4:d2:cf:88:2e:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:38:B9:C5:8A:4E:8E:42:55:0A:1E:FF:E4:3C:46:2E:CD:6D:DB
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8b:fa:e8:86:80:a4:8a:15:17:db:0b:6f:fd:83:89:04:bf:
a6:f1:82:c1:8b:78:99:a5:47:a0:83:03:d9:9a:7e:2e:c3:f4:
36:93:40:4b:0b:91:ca:7c:07:ed:f8:06:bb:4e:6d:74:e6:01:
06:d6:62:f9:cb:97:f5:cc:1d:04:a0:76:bf:cf:ab:fc:5c:a8:
c1:60:25:21:33:c0:6f:37:b1:65:5d:b2:cf:1b:b9:78:0f:74:
34:18:24:ef:d0:94:60:c7:fa:23:6f:93:28:44:25:0e:df:b3:
54:fc:5f:0c:24:3a:73:35:84:de:4a:30:11:50:90:fa:70:47:
de:28:f3:fb:b2:52:9c:74:0b:46:0a:b9:b1:b4:9e:0a:c0:21:
ba:24:6d:29:4a:37:ed:05:46:fd:82:3c:83:72:56:23:f9:36:
33:59:96:5c:e5:18:d1:d3:db:e9:ee:2d:9f:24:1c:84:e5:f4:
c3:af:24:56:2f:04:49:c3:87:bb:ee:c0:01:e8:3e:b7:3f:62:
d1:c3:24:23:1c:e8:03:90:9c:50:1d:31:b2:6b:3b:7e:12:10:
96:cc:08:4f:8a:72:1f:cf:6f:cd:07:0d:4b:fd:21:a7:02:70:
ab:4f:37:99:d3:f7:72:79:22:d0:e9:7f:1f:1f:45:5b:6d:c2:
6b:93:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:38 2026 by rpki-client