Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: MDA04iEtN5KI/tFARCyrxRgvdtuAWQjrC7KHU0scxL4=
Subject key identifier: 89:29:39:62:40:38:2E:DC:57:31:4E:11:30:1B:50:FB:1C:BB:0F:81
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019D38D3D7C604535D69596BEB0673F8BC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 05B6
Signing time: Sun 29 Mar 2026 09:01:40 +0000
Manifest this update: Sun 29 Mar 2026 09:01:40 +0000
Manifest next update: Mon 30 Mar 2026 09:01:40 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: gnaBD5MPZ6IFFvkSyYMj7GojOyL+7929RIC91hy3Hk4=)
2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d7:c6:04:53:5d:69:59:6b:eb:06:73:f8:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Mar 29 09:01:40 2026 GMT
Not After : Mar 30 09:01:40 2026 GMT
Subject: CN=8929396240382edc57314e11301b50fb1cbb0f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:fa:93:49:e4:0b:c3:aa:74:7c:2c:6d:dd:
c3:3d:90:8d:19:9e:5c:c4:81:05:4b:20:b0:3d:7b:
76:f7:29:cf:87:24:28:c3:a8:a6:8b:4d:80:f2:de:
48:a7:7a:54:4d:c4:2d:86:ef:65:88:f8:20:5e:a2:
23:e5:1c:f5:c9:ab:e0:c5:41:e1:ff:18:45:ce:ee:
ef:78:f2:ce:e3:32:70:36:25:c1:bc:3d:b7:1c:64:
c5:cd:26:73:3d:d3:80:6d:db:ad:57:36:60:79:85:
40:68:da:b8:f8:4e:89:41:e4:bc:cd:fb:95:42:3a:
be:da:58:94:89:a9:8a:fd:dc:43:9b:45:c6:12:6b:
8d:b0:76:51:82:fc:ea:3d:92:20:58:0d:72:91:01:
5c:d9:b3:cd:2b:e7:d3:54:06:56:7d:fe:12:0b:d9:
a4:7b:d8:db:0a:4a:f0:cd:76:ef:1e:a5:4a:39:66:
b4:22:a4:f5:bf:d3:52:02:ad:56:a8:71:79:4b:e0:
5d:ca:6e:b2:37:d5:10:7a:dd:35:f3:49:f7:cd:ef:
67:69:0d:7b:1a:89:02:7f:b4:0f:13:8c:38:d7:96:
e9:8e:2c:76:a9:dc:98:6f:9c:9d:91:41:f3:39:bf:
50:df:5d:b9:1a:62:11:ff:d5:6a:00:83:bf:4a:07:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:39:62:40:38:2E:DC:57:31:4E:11:30:1B:50:FB:1C:BB:0F:81
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5f:0b:ce:89:7f:45:5b:c1:16:c0:2f:e7:98:23:5c:a0:4c:
f5:04:dd:12:ce:75:36:41:2c:f3:1c:57:c8:97:e1:d0:c3:01:
3b:94:57:6a:b9:5a:c1:e7:bc:83:c8:d8:e6:2b:56:15:f6:c2:
16:d8:ce:2e:0d:77:42:8b:05:00:1e:46:9c:76:32:11:35:70:
3d:7f:b4:4a:fb:08:29:5c:6a:fb:37:ba:79:25:0e:39:a2:4d:
c3:72:e1:e9:43:99:1a:91:75:79:63:e1:aa:d5:d0:ed:96:66:
ce:e1:a9:6f:86:a0:2f:8c:f0:b5:b0:20:ce:fd:65:1b:31:f6:
54:a9:17:36:48:41:09:1a:eb:54:ed:e4:50:cc:d6:a3:bd:7c:
e2:04:e8:8e:e1:66:ac:e2:77:b4:90:9a:00:72:34:04:03:5a:
63:8a:a1:ed:28:01:f7:ec:c9:cb:4b:d9:4b:7b:b4:2f:de:1b:
41:06:3e:82:be:dc:51:22:31:c6:6a:2d:13:10:e8:5b:c8:a5:
0d:0d:bd:a8:6a:a5:33:e6:f0:74:47:08:f3:87:c0:bf:84:0f:
b5:94:09:e8:65:cb:12:93:93:ee:03:35:db:76:cb:8a:71:e4:
f2:36:22:5d:bf:90:ca:2e:71:80:80:2f:e6:06:38:4b:47:19:
51:dd:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:14 2026 by rpki-client