Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File: aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier: rHHBEd869VKm1byBRxsPBaGjJpgBB39a5RQS0nX9MkU=
Subject key identifier: C7:13:78:2C:E1:C1:A5:6B:4E:2E:70:05:F8:06:5D:FF:8E:64:43:67
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial: 019D36E43795DC7B26CB30F573E311E153BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number: 07CC
Signing time: Sun 29 Mar 2026 00:00:19 +0000
Manifest this update: Sun 29 Mar 2026 00:00:19 +0000
Manifest next update: Mon 30 Mar 2026 00:00:19 +0000
Files and hashes: 1: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: PgG2W9uQUg6QlGM+ZpdRCJTxNcujzhcgojy7PzUqEzE=)
2: oJbVnfo8nfXDxx0xOHsViY24X4g.roa (hash: uemM8M2q02VORXRg6zfmvzJH/l3Oxb3V5/KirOrQjq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:37:95:dc:7b:26:cb:30:f5:73:e3:11:e1:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Validity
Not Before: Mar 29 00:00:19 2026 GMT
Not After : Mar 30 00:00:19 2026 GMT
Subject: CN=c713782ce1c1a56b4e2e7005f8065dff8e644367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:33:07:16:6f:af:d4:5a:f3:36:fd:f2:c9:
17:a0:15:06:1e:7c:ba:17:33:ed:dc:77:f2:bb:2f:
46:18:48:a2:db:11:18:09:79:89:f4:77:aa:2c:4d:
6e:2b:af:d9:ff:3e:12:53:84:02:57:61:42:68:8c:
d2:43:4e:34:91:8e:1a:e0:15:9d:3f:7d:9a:79:bc:
8c:71:a1:56:79:a6:1b:e0:22:61:05:4d:e5:ed:88:
22:02:76:9c:59:28:c3:4d:0f:94:c8:13:1a:a6:7d:
7d:fb:66:50:2e:31:c6:21:c2:db:4f:97:23:4b:12:
2b:a2:26:70:64:a1:13:40:50:f3:dc:6f:1d:81:d1:
8d:36:09:97:31:62:13:28:3a:27:cf:a4:b3:32:b7:
fa:ba:7d:20:b1:2f:88:cc:c0:2d:0a:ad:17:23:69:
a3:50:69:18:38:3c:dd:94:a8:9d:36:aa:f9:1a:05:
44:ed:64:18:cb:e7:69:01:a4:d9:e2:ac:e4:0a:d1:
f5:79:5c:eb:26:b2:ab:92:1d:db:0e:4b:dc:a5:75:
00:23:d3:a1:2b:e9:e0:d7:b0:d6:06:0e:23:9d:f1:
fb:3b:4c:1e:be:f5:86:a6:34:22:4e:87:78:5f:95:
ec:01:0b:98:93:2b:d0:7b:17:ea:07:30:3e:99:76:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:78:2C:E1:C1:A5:6B:4E:2E:70:05:F8:06:5D:FF:8E:64:43:67
X509v3 Authority Key Identifier:
keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ab:a9:19:58:1b:68:02:54:57:98:7b:0c:f2:88:35:a3:b4:
a8:45:eb:c2:af:fb:6d:de:b1:af:83:77:39:6f:87:4e:dc:a6:
e6:a9:2a:f0:aa:0a:53:7a:3e:17:b5:35:cf:cc:bf:e7:24:42:
a4:32:3d:b7:f9:70:8a:24:60:85:94:df:bb:6f:e2:9f:d1:75:
c2:6b:ca:1f:8d:3d:c8:74:34:f6:03:ec:36:5d:08:01:bb:78:
28:20:02:59:96:a7:37:54:ff:f0:1d:49:ad:85:93:33:28:7d:
1f:48:9e:2a:d8:5f:00:66:72:a2:1e:90:2e:af:16:aa:17:b7:
2f:53:27:51:42:e1:f6:97:81:0d:d0:df:66:05:3b:3d:96:9a:
47:c8:d2:19:14:28:45:63:25:62:fb:cd:65:2b:db:5f:26:77:
48:30:8e:42:68:af:f8:d3:66:c5:f4:3f:93:9e:c2:da:05:17:
de:80:21:ae:24:8b:c2:b6:ef:59:64:c7:2e:3d:02:68:13:fb:
d2:cf:f4:3a:7b:5c:80:61:56:57:ea:b7:2c:9c:dd:1f:96:30:
05:38:6e:13:e5:82:05:9b:f8:01:59:f0:25:8e:9a:37:0e:25:
44:68:36:c0:91:5d:9e:72:9a:48:40:5e:dd:5a:b8:7a:83:97:
55:34:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:27 2026 by rpki-client