Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: gbwf6KxxxnQMty1Qc1nLIHl9JtXjbwznIo/32rtir10=
Subject key identifier: 41:34:69:10:FF:33:DB:29:28:46:4C:26:6E:BA:D3:96:5B:E9:C0:09
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 019D390A346E6E646759D7A52BF682AC2BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 153E
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: wUEuaY+hOrz3pzvxarxTbJGZLtuFQ4xZ1BOk2h1FCC8=)
2: cQSoOImIWHLQqvwma-mbQwTjc30.roa (hash: CvEfeGMhdPBsYF3CWWhLxK0Vg1UuXavAs76jMv4L1vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:34:6e:6e:64:67:59:d7:a5:2b:f6:82:ac:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=41346910ff33db2928464c266ebad3965be9c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:70:b1:f7:37:74:e0:ad:fb:c0:82:04:03:
7d:3d:76:51:00:65:e0:d4:aa:68:0f:23:b7:2b:90:
3e:e5:7a:07:c9:be:e2:ef:32:97:d9:ca:2a:28:98:
46:bd:69:1a:dd:91:de:87:40:29:84:07:94:09:b2:
77:dd:43:0b:6b:0e:f4:81:30:08:3a:77:34:0d:11:
d0:c9:60:1c:81:5b:e9:96:0b:d1:8a:34:55:12:09:
43:46:79:34:35:2b:b9:d6:38:f7:44:49:ae:a1:42:
a1:6e:0d:68:7c:3a:9f:23:2c:03:5b:3d:a3:5f:fe:
8b:2b:7c:00:d9:8b:76:ae:49:92:3b:26:f9:80:6c:
38:b6:51:b9:09:1d:fa:37:16:5b:9d:4a:da:c1:89:
cf:91:52:9c:9e:51:ee:d2:6c:8a:88:8d:63:e4:a3:
6a:93:d3:62:bd:03:df:94:1c:22:7a:00:c1:be:a1:
a9:27:84:af:38:c0:8e:6d:60:4c:92:c5:2a:04:54:
67:b3:da:b4:4d:83:8b:d4:57:a6:9a:ce:63:05:23:
8c:15:cc:cd:aa:d3:03:87:97:cb:10:44:c2:9c:d5:
84:03:40:79:27:26:e0:ff:54:16:10:85:e2:66:e0:
9f:3d:4d:66:61:a3:0d:cc:c0:07:a4:1f:12:d2:07:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:69:10:FF:33:DB:29:28:46:4C:26:6E:BA:D3:96:5B:E9:C0:09
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:dd:0f:7f:5a:13:e3:3d:30:bc:ed:c2:d9:c6:9c:41:2c:
af:a2:eb:01:69:dd:f6:fb:f6:94:8d:e6:15:19:6e:fc:e7:cf:
ee:0d:52:df:1d:8c:88:f2:01:2c:a2:62:a2:c9:d9:1a:ac:89:
19:ff:7d:1e:4f:e1:3a:8c:b3:fc:4f:d4:b5:c7:33:64:6a:a5:
6a:63:69:7b:97:10:82:41:63:95:42:ae:67:76:87:3a:2c:7e:
d7:61:6e:86:26:30:ad:a0:36:7b:86:76:7b:31:ac:e2:63:60:
0c:c1:94:38:34:65:1a:7d:a9:bb:ce:90:58:b7:d0:d9:11:87:
7e:34:4b:3f:fa:2b:eb:ec:f7:8d:e1:e5:04:97:cc:49:0d:f5:
ea:7a:5e:98:e2:b1:9f:92:63:0c:e4:33:9e:76:80:60:91:32:
52:77:26:7b:fd:73:3e:81:43:fe:36:b3:99:92:95:83:8f:02:
af:9d:3d:0d:ec:e6:95:1a:c8:ef:08:a4:10:ae:22:cf:10:ab:
8b:fa:45:34:c0:95:d6:75:79:9a:b3:e2:57:de:3e:a7:18:52:
e7:03:13:03:7c:f0:b1:72:06:ca:45:1c:96:44:e8:3a:9b:c8:
f5:95:71:c3:2b:e4:b0:ef:2e:6e:a6:71:53:a5:55:03:d4:6c:
19:ce:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:24 2026 by rpki-client