Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
File: AEUKhqpPfvd-WnXdluyzwqaPrRw.mft (raw, json)
Hash identifier: ZrBeUGHrm8fmubPogSKN6KEeYY/zJeseoPbPn1FbiUA=
Subject key identifier: FA:68:F4:39:45:F1:3A:09:E8:D5:6F:EE:58:2F:B4:4D:A2:A8:A5:B2
Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
Certificate issuer: /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Certificate serial: 019D382E85C3CEA8646905DBFE32290B7E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
Manifest number: 0175
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: AEUKhqpPfvd-WnXdluyzwqaPrRw.crl (hash: GS29NGTkypun0XgQpIJo3JzUuBwAn0AAIIO3/UHI4Mo=)
2: Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa (hash: fEVRmquaw1jZNFkmMKxarAcgeViD3yJxH62xy+zCJ+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:85:c3:ce:a8:64:69:05:db:fe:32:29:0b:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=fa68f43945f13a09e8d56fee582fb44da2a8a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:4d:8d:e5:56:b6:6b:35:20:01:b6:a6:92:
9e:89:58:a7:8f:70:13:b1:22:2d:ee:5d:83:f8:3d:
60:69:c5:f0:53:f2:af:3b:8f:29:f3:ab:2a:fb:22:
3b:b2:52:3b:04:2a:2b:ae:02:b4:aa:2f:be:2e:78:
a5:5c:79:df:3b:7f:6b:2d:f2:d1:25:3f:b2:7f:60:
60:9f:f3:f5:73:07:2c:7a:a7:09:86:1f:d8:3a:d9:
46:52:b6:96:f0:2f:9c:9c:f8:7a:f3:e3:03:b6:87:
41:de:d0:45:34:43:57:de:7d:7c:70:8a:ce:8a:bd:
20:ed:c6:5b:8d:d5:75:23:5a:59:48:55:17:38:5e:
8e:21:f6:ba:3b:f7:34:6f:b4:2f:84:4b:9f:d0:6e:
87:09:23:4a:13:28:e3:a2:72:95:2f:f1:4e:48:d4:
e8:b8:69:82:f0:69:1d:53:e5:21:fa:e5:9d:fc:db:
d9:ab:fe:67:d9:f0:b1:36:4b:20:03:87:2c:c7:1c:
cb:d4:7f:27:4b:f1:9a:4e:db:c5:33:07:fb:f6:4b:
f5:d1:9d:1c:70:d7:b6:d3:c1:80:7d:79:43:ed:4d:
a8:f1:fa:33:07:54:53:ac:46:98:2c:1c:0b:e7:d9:
ef:11:dd:0b:15:a7:d1:bf:23:eb:ff:54:6b:0e:44:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:F4:39:45:F1:3A:09:E8:D5:6F:EE:58:2F:B4:4D:A2:A8:A5:B2
X509v3 Authority Key Identifier:
keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:28:d2:7e:51:c5:be:3f:e5:16:2d:0c:ee:18:7b:b6:91:
e5:4e:85:e8:9c:1f:21:f2:f8:e2:bd:b0:31:35:61:06:0b:65:
db:62:cd:82:ea:ca:3b:d7:06:19:7c:af:ba:5b:ad:b8:fb:f5:
03:60:8b:d8:3b:42:bc:d5:58:4d:6e:34:98:6e:52:ce:1e:34:
71:91:62:4f:03:fd:1a:9c:a8:0d:01:ba:09:10:71:c4:ac:78:
c7:f1:49:c4:d1:87:6e:db:77:df:a7:01:8c:4d:a2:d5:cb:67:
46:4d:3f:60:22:d1:72:a7:87:84:d9:9b:12:34:4e:d4:82:39:
1e:7d:04:88:5f:17:4a:b7:6a:d3:0d:a5:2b:cc:61:01:02:78:
38:35:c7:60:cf:62:7c:80:db:0d:d6:2c:01:10:b0:e9:b4:71:
15:bf:e9:13:84:1e:8e:e3:82:93:29:4c:e7:6e:70:bf:d8:16:
0d:c7:73:ec:17:63:9e:2f:6f:05:78:c6:a0:2f:ff:b9:ad:00:
a5:6c:3f:28:53:a9:9c:ba:2a:d9:e6:cb:ab:db:45:28:40:d5:
f4:57:76:91:e1:ff:fc:5f:c4:d4:9d:15:71:99:5c:a3:93:63:
59:72:dc:d8:97:53:19:04:4d:46:42:d3:ac:8e:62:59:39:e0:
2b:28:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:20 2026 by rpki-client