Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: 6qZ30R10JZhVGTNcym1Ym3UHiOWfZe7Ziz4jCHTgmtg=
Subject key identifier: 7E:5F:64:20:A2:E9:CF:B0:B4:81:A0:EE:A7:B2:A0:6E:EB:FD:01:DA
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019D3789797B740E1903A936009A22B15AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: 6hTzu5Mg/L3Mp47PaOkQhEI3/ok5aPi3FsurW2E9np0=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:79:7b:74:0e:19:03:a9:36:00:9a:22:b1:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=7e5f6420a2e9cfb0b481a0eea7b2a06eebfd01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:79:fd:00:22:78:d7:83:85:13:d7:1d:6c:
5c:25:43:8a:25:9f:11:9f:3b:fe:08:e0:20:40:a5:
07:80:47:c4:55:88:6e:e7:0e:1a:f2:60:13:45:3d:
92:24:69:43:9d:60:14:88:c1:1f:7e:ac:c3:64:b5:
e8:af:81:af:6a:dc:b5:f7:cb:0c:7f:50:ae:ed:7d:
8c:a2:9e:78:e5:cd:ea:fc:d4:3e:3c:ae:53:c6:0c:
e2:02:34:85:0b:23:7c:08:15:83:3b:f8:23:8f:03:
6e:55:a9:c1:34:61:5d:86:e9:68:aa:87:3c:fd:52:
31:2c:5e:ac:88:5c:19:b5:cd:8b:da:03:09:84:92:
b6:8a:7a:1d:8c:35:59:f5:9e:f2:98:10:23:73:87:
47:69:d2:d2:7b:1e:53:11:94:10:be:77:27:27:52:
82:4a:fa:f0:46:44:60:cc:ac:7a:8a:37:3c:6e:4d:
1f:d6:96:5a:bc:4f:0f:3e:cc:bd:24:89:8d:20:d7:
cd:28:a3:57:63:5d:26:6d:4c:81:1f:e2:03:fe:ba:
63:49:00:6c:2c:a8:6c:30:76:66:02:11:d2:0b:31:
fb:67:bb:f6:0f:12:f9:93:ab:51:20:b4:41:a8:88:
0e:fb:ff:1e:f6:42:c7:0d:36:e5:55:8a:7d:be:40:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:64:20:A2:E9:CF:B0:B4:81:A0:EE:A7:B2:A0:6E:EB:FD:01:DA
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d1:cc:8a:5b:5d:66:ab:8b:95:7b:00:45:8a:f9:52:d2:5c:
7b:91:d9:ba:9c:dd:cf:51:36:b1:00:b0:1a:8f:60:fd:01:00:
db:10:69:b5:c1:4c:96:6a:f9:50:00:0d:2b:1f:38:6b:3a:85:
68:0c:9e:19:42:0b:a2:ae:bf:5f:34:f2:50:e7:5a:10:ec:bc:
df:36:62:ea:2b:e0:21:ff:f8:b6:3b:d1:4e:21:79:fc:0a:c8:
33:28:de:1c:2d:d4:3b:2a:c1:fa:e0:08:1c:91:50:71:b2:94:
69:0b:19:17:aa:54:c5:dd:6c:70:e2:c6:00:53:0b:a5:46:c3:
bc:31:eb:17:b7:17:aa:a7:08:ad:9d:7a:7f:72:64:24:73:99:
e1:40:d8:8f:e9:f9:55:5c:83:fe:43:8a:ff:6e:cb:36:88:f3:
ac:fa:b8:f3:6d:b5:e5:3a:bb:b1:16:89:85:a8:33:4d:61:4e:
80:02:29:ca:85:b6:dc:e3:a8:36:af:f5:df:76:e1:d5:62:9c:
6e:53:e0:64:24:7a:a6:0a:69:2c:f3:d9:bf:cb:cf:d5:37:99:
9c:ca:46:80:e5:34:fd:96:a1:4b:32:a2:6e:ba:36:7b:40:6b:
f3:6e:3a:7d:5c:33:59:18:a4:07:b8:08:2e:45:dd:e8:7d:ec:
e2:38:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:10 2026 by rpki-client