Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: KPf6F7f8TAs4sMFf//rcliiSvxLNbgrDPTrMQYbiV6g=
Subject key identifier: 9D:51:F8:70:DB:1A:3D:BB:DA:13:83:B2:D7:2B:78:23:59:D2:F9:A4
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019CE893644157C4A19336A2B7B485F67C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 157F
Signing time: Fri 13 Mar 2026 19:01:39 +0000
Manifest this update: Fri 13 Mar 2026 19:01:39 +0000
Manifest next update: Sat 14 Mar 2026 19:01:39 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: djCoh64EAtpebzpe4tYTelZlrcD/INQkbkC8tUmw6yo=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:93:64:41:57:c4:a1:93:36:a2:b7:b4:85:f6:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Mar 13 19:01:39 2026 GMT
Not After : Mar 14 19:01:39 2026 GMT
Subject: CN=9d51f870db1a3dbbda1383b2d72b782359d2f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:a0:0f:f5:ae:c3:a4:68:74:7a:17:d2:95:
a1:24:cf:3d:6c:9f:07:52:e0:92:76:e6:3a:10:dd:
91:93:32:2c:b1:49:0b:07:10:2c:b2:f3:3d:0f:b9:
20:93:f9:c2:ec:e9:7c:8f:7f:7a:6e:f1:2e:e4:04:
bf:cd:3e:35:9e:a5:17:de:a7:c0:46:e7:03:11:0b:
be:f0:26:20:5c:7f:2a:13:0d:73:51:9f:ab:68:84:
6a:30:74:e9:c6:58:8b:1e:9b:36:b5:ea:03:4f:a8:
b8:65:eb:3b:2e:4a:fb:82:34:73:c3:2f:1b:0c:36:
8f:85:05:8a:67:38:2a:1e:b9:38:73:ec:62:20:b0:
66:f4:cb:86:74:49:59:09:90:ec:30:32:14:4f:aa:
a8:fd:01:67:32:91:d8:3e:9d:b5:17:2f:c5:a6:9a:
c0:9e:d4:9e:75:fa:ed:e7:9d:0a:4a:b7:a4:94:41:
a0:a1:dc:db:01:ca:e8:1c:98:36:fb:53:95:63:59:
39:96:46:46:6d:8a:48:e2:75:b5:9c:54:7d:2f:85:
86:0d:7a:f2:ee:01:5f:0c:1b:49:c7:12:ba:1a:5c:
8f:3e:ca:10:49:f4:bc:f1:e8:38:e4:51:97:25:b2:
f4:c6:e0:74:03:74:6e:fc:d4:70:37:d6:ff:17:29:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:F8:70:DB:1A:3D:BB:DA:13:83:B2:D7:2B:78:23:59:D2:F9:A4
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:70:c1:6d:79:73:35:58:12:e8:ae:89:87:47:7f:58:0d:16:
ed:5e:e0:2a:8d:f2:06:3d:ed:88:10:d5:9c:dd:49:41:44:5f:
c1:bc:80:3a:4a:72:73:ed:a5:08:ee:5e:30:54:40:d7:e8:e4:
54:04:65:1e:7b:62:41:e7:86:7c:64:a9:a6:c5:ca:c9:76:2e:
99:73:8d:3f:89:f6:5e:1b:05:cb:cb:07:6a:1f:9a:ad:06:48:
70:54:17:1a:7b:28:04:2f:a8:74:9b:76:89:b7:63:42:f1:e9:
d9:bd:c8:89:85:c6:dc:2e:24:73:23:40:bd:f3:d5:77:6c:24:
2a:0e:e0:82:c6:3c:81:ae:7f:79:11:55:a9:d2:d4:1c:50:79:
20:a5:d9:5a:4a:73:58:ae:e9:9d:2e:f7:d0:7b:b5:2f:7c:b9:
44:61:c5:31:c1:3d:e8:04:7a:49:5f:2d:4a:1f:16:53:a1:ff:
75:17:40:24:47:ea:7a:ce:4f:b4:8e:80:49:20:a4:20:7e:76:
48:81:21:95:36:79:ce:07:22:18:97:be:df:3c:53:9f:2d:30:
c7:cd:b5:c9:78:b7:8f:53:7e:0f:14:96:a7:be:c2:b0:9b:03:
10:63:65:33:a0:df:c6:56:81:e6:8e:cb:d7:c3:f7:e6:7f:9e:
ca:15:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:55:15 2026 by rpki-client