Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: 8zCEEDzSF4guACfWlGG9xTTOKq4ey4V7FJb9bNbSTlc=
Subject key identifier: 01:39:26:DE:03:2A:D1:0D:55:9B:07:1A:69:70:AC:DF:49:4A:00:A3
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019CE1EB8E495A2167A452ABA906DB1C270B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0C90
Signing time: Thu 12 Mar 2026 12:00:36 +0000
Manifest this update: Thu 12 Mar 2026 12:00:36 +0000
Manifest next update: Fri 13 Mar 2026 12:00:36 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: o6976GfUYd8g+gbQMEQ0fgKlmnyHx9Ub6MBCWgSat0A=)
2: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (hash: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:8e:49:5a:21:67:a4:52:ab:a9:06:db:1c:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Mar 12 12:00:36 2026 GMT
Not After : Mar 13 12:00:36 2026 GMT
Subject: CN=013926de032ad10d559b071a6970acdf494a00a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:ee:f7:48:af:2b:57:66:e6:83:36:37:52:
04:0a:f7:ca:c7:f6:a8:73:74:19:0b:f2:32:66:f8:
6d:a6:03:d9:0a:d8:50:dd:b0:0f:39:9a:fa:e3:10:
5c:31:db:00:4c:0d:cb:03:dd:0e:06:f8:83:b9:d7:
cc:d6:01:ad:02:c6:cd:20:83:10:f3:92:d0:15:39:
f8:b0:dc:8d:73:4e:a4:01:6d:e0:ee:80:02:80:7e:
af:f3:50:52:b4:ef:0e:87:79:8e:bc:8b:cd:ba:21:
27:58:7c:ed:d1:ed:7d:ba:ae:9c:61:df:6d:30:7b:
2b:54:a1:fe:42:5f:56:12:fe:42:6f:4e:f4:a3:b7:
d2:39:f5:42:47:b2:79:50:8a:45:ba:e7:c1:d4:b1:
23:c7:b0:ab:89:a9:39:ec:29:65:4e:de:e6:6f:dd:
d0:c3:ea:3e:a0:ad:bb:00:a6:2e:8f:ff:1a:58:de:
92:ab:4b:a1:86:87:54:99:4b:63:ee:08:bc:89:4b:
9a:76:81:90:f0:40:1a:ca:67:85:6d:d1:be:57:b2:
c2:a4:ab:d0:dc:cd:0a:3d:90:df:8b:5c:4b:84:40:
66:55:a0:98:f8:78:3c:47:11:26:f1:e6:2d:e3:e6:
63:2c:70:c2:18:0c:20:9f:35:0a:c4:6d:04:1b:7a:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:26:DE:03:2A:D1:0D:55:9B:07:1A:69:70:AC:DF:49:4A:00:A3
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b1:aa:f2:1d:9f:1c:c7:db:48:76:fc:03:26:8d:d5:b7:fc:
36:a9:02:8d:34:87:90:c2:7c:a0:8b:92:b5:1b:da:86:61:8d:
6f:6f:97:b8:32:6e:55:aa:53:37:eb:a3:74:54:b6:6f:dd:23:
e9:60:28:b1:ef:85:4e:ae:f9:3c:a1:ac:7a:41:86:5e:8b:8f:
4d:3b:0c:ad:03:86:4b:13:36:dd:7a:05:eb:d9:b7:07:c4:2e:
c4:54:83:c0:bf:0f:26:61:b1:ba:bb:6b:4a:45:ef:8a:52:c4:
d6:11:bd:33:a0:ee:42:7e:70:c9:48:a0:a2:f0:ea:d0:d8:b3:
96:d5:d7:17:20:13:df:4d:2a:cf:4f:9c:7b:0d:c4:1f:e9:7a:
11:04:3d:a7:3b:22:e4:68:46:98:7e:70:58:05:a2:4d:5f:d0:
3d:74:e2:ac:68:d6:a2:fb:52:3f:dc:b1:05:d4:31:a3:0c:10:
97:a6:1f:87:54:7c:61:00:21:4b:c0:0c:18:90:60:a4:4d:e2:
69:59:6c:04:dd:89:84:69:03:9d:c2:c1:06:e1:91:6d:e2:de:
74:06:a7:cf:b2:38:a2:33:1b:41:37:1e:3f:c3:45:f2:07:01:
1e:2a:7d:33:48:f4:7a:81:ae:b0:df:2b:23:ad:9a:b2:20:31:
93:bc:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:18:35 2026 by rpki-client