Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: xDQCidMEUS4vEuMgQt1DBgfUuKAEXgJbV10+PuwOYKw=
Subject key identifier: 10:43:F4:F8:CE:68:01:86:77:92:49:8F:15:D5:81:97:02:AE:A4:DA
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 019CE36C1D91877E2EEB796236CBE0239438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 0204
Signing time: Thu 12 Mar 2026 19:00:39 +0000
Manifest this update: Thu 12 Mar 2026 19:00:39 +0000
Manifest next update: Fri 13 Mar 2026 19:00:39 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: zewhzWZJO8vMVt52mA9kUav0bNdvCbz3sOXT+pwQr3c=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:1d:91:87:7e:2e:eb:79:62:36:cb:e0:23:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Mar 12 19:00:39 2026 GMT
Not After : Mar 13 19:00:39 2026 GMT
Subject: CN=1043f4f8ce6801867792498f15d5819702aea4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:c6:01:f9:e8:bd:71:19:c4:99:34:69:4c:
55:7d:c3:53:0b:2c:6d:3d:1e:19:e6:15:9a:09:dd:
df:27:dd:44:68:e8:53:64:11:fb:fc:ae:64:8f:34:
f5:d6:af:9e:47:98:20:33:81:86:a7:4c:5c:a9:8a:
78:cd:4f:60:b6:cb:0f:a8:64:0a:24:8b:53:11:42:
35:80:e7:a7:d2:01:e8:10:31:d9:d5:0e:40:d8:d9:
ba:97:18:61:ab:34:b1:01:95:e2:37:cf:20:6a:46:
90:52:6f:f6:19:57:67:73:df:64:ba:45:a9:5d:de:
32:46:28:ee:f0:50:62:fb:55:f2:c1:a1:ce:13:ea:
e9:53:5b:12:a3:e6:b7:4f:a5:19:ab:47:71:10:19:
c1:00:49:f8:b4:9d:15:fb:6a:30:c2:cb:17:13:48:
7c:2f:d9:1c:9d:94:4e:1e:a7:17:0b:26:1d:cc:ba:
0e:a4:94:f9:97:4f:39:ec:72:37:b5:2d:61:04:71:
b7:a7:8c:2b:75:7c:17:72:e9:53:b3:de:51:6e:88:
61:bf:0c:13:ba:b7:a3:b6:9c:7a:75:f0:e3:a2:8c:
3c:39:0a:21:1a:b0:73:52:72:29:08:49:5a:b3:64:
d5:db:c3:6c:fc:e5:92:04:a7:08:aa:dc:75:34:62:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:F4:F8:CE:68:01:86:77:92:49:8F:15:D5:81:97:02:AE:A4:DA
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:f7:6b:41:2a:28:19:79:2a:97:a0:1f:c1:b0:76:b5:73:
38:c2:5f:fd:00:ca:1b:1b:05:31:74:67:40:f4:e4:75:b3:b3:
be:af:b7:06:81:e6:89:8d:de:a1:ce:d2:b8:e3:18:ce:df:f6:
dc:42:fd:53:91:cd:ee:7a:84:b0:9b:3a:42:42:64:9b:18:f6:
88:bf:41:23:8e:29:56:c8:60:70:ca:6f:04:fe:27:b7:5e:6a:
8d:c2:ac:31:24:98:86:63:53:36:93:44:9d:ce:64:6e:a4:24:
7a:de:f2:47:63:6d:ce:03:0e:cf:7c:1f:13:bc:bb:f3:78:6a:
2e:94:f1:f4:8f:76:10:46:9b:66:99:57:a3:31:50:9a:5f:82:
24:20:9a:5a:af:02:a9:df:be:61:7a:f5:75:73:d4:17:e4:c2:
b8:5c:0b:73:72:73:c6:ab:ac:f6:73:6e:11:01:c0:32:d6:ad:
08:ea:a0:e6:f6:c4:7d:42:89:e0:d7:ae:b6:4a:b9:e8:9e:ff:
36:70:9c:96:a1:44:09:33:f1:b8:27:9d:0c:6a:2d:0c:f5:c5:
7f:34:04:db:5e:5d:a4:df:6a:2e:c5:ca:53:f1:8a:d1:1f:da:
6b:ad:fe:4b:6f:fd:4a:d1:aa:c1:ee:7e:5e:12:7a:1c:38:5b:
10:b6:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:04 2026 by rpki-client