Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: e2/CgxuxqVk3tDO6UCokUeehM5J4VMewbD3Ewp9z3/0=
Subject key identifier: CB:F4:05:BB:96:F1:E8:1A:DE:88:C4:01:04:6E:BA:DD:B7:C7:EB:7D
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019D382DE7B53AA0FF712C49A8178022813B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 158C
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: xeYLThI9jDGkIOQlW1Cg8L6LWIrMHP73ZhrRKmIj8sE=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e7:b5:3a:a0:ff:71:2c:49:a8:17:80:22:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=cbf405bb96f1e81ade88c401046ebaddb7c7eb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:59:64:21:95:4e:06:4f:61:3b:6e:d5:c9:
aa:e1:c0:ba:64:c3:9a:ee:0d:53:1b:40:8f:94:72:
46:0b:72:a8:ee:58:70:67:26:15:e6:24:34:64:ec:
78:70:6d:f7:f9:d9:8a:a8:37:db:6d:3a:71:99:9f:
3e:b7:e7:bb:cf:f0:75:ec:46:d2:22:94:5c:0b:04:
ac:46:84:06:56:f3:8c:da:4d:b3:56:7c:94:5f:dc:
ee:63:58:fb:27:67:de:25:d3:67:65:f7:aa:58:14:
5a:cf:dd:18:5a:cb:24:d2:61:e1:a4:54:31:d2:8b:
e7:a1:02:75:fb:fc:ee:de:a6:48:a8:cf:a8:a6:04:
af:c3:01:96:15:9f:b9:5a:f0:8c:b4:90:c7:a8:8a:
89:ef:e4:ae:c4:fa:62:2c:93:6b:87:a5:09:e6:ac:
e0:c8:6c:39:7e:d9:ae:ad:46:e0:1b:45:68:ca:3b:
ac:21:c7:83:15:7a:78:81:3d:97:4c:c1:44:42:a3:
a1:9f:dc:a5:3e:ea:2f:b2:5c:9d:a1:7f:66:cb:ae:
83:11:1d:70:db:e4:7f:5b:4e:8e:2e:0b:40:cf:8c:
9c:26:14:23:d5:b7:47:ce:ba:56:8a:09:2a:b5:1b:
f1:68:34:03:49:2b:f1:6b:76:9e:42:5e:be:cf:18:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:05:BB:96:F1:E8:1A:DE:88:C4:01:04:6E:BA:DD:B7:C7:EB:7D
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:9e:0a:2e:35:e8:75:68:e8:5e:bc:f9:62:08:e4:cf:d7:
68:6d:05:25:9f:13:73:df:26:36:47:ac:3e:23:a6:0d:94:5a:
72:7f:ab:76:37:a7:50:da:38:ef:50:d5:34:3b:97:ae:6d:70:
f2:78:03:87:f5:78:4c:26:73:7b:50:29:6f:28:c5:7b:7c:28:
74:a2:5c:bb:3a:b5:fe:47:5e:a4:58:14:75:ca:ae:14:13:05:
05:33:b9:43:4d:30:1b:19:6f:8a:cc:f8:a4:1a:66:54:8f:25:
7a:0f:a6:8b:50:30:71:a8:89:4e:19:da:6e:93:d6:61:02:d4:
bc:91:0a:e2:58:cb:a7:19:3d:91:86:80:7b:36:1e:92:ff:da:
25:a1:27:0e:3f:8d:a0:2d:1e:de:5f:95:c8:98:55:7a:46:49:
1e:69:a7:f1:2c:54:ab:f5:80:51:c4:0b:34:83:b0:e2:2d:94:
74:38:d6:93:92:e7:a0:e1:b2:e4:52:5c:e9:50:77:a3:af:98:
8b:40:41:59:6f:9f:f7:f6:f2:c0:ab:59:44:6b:42:f5:a2:cf:
5d:e7:34:bc:d5:cd:9c:81:b9:24:16:ab:06:9c:98:eb:77:be:
ed:8d:8f:9a:95:9a:dd:2e:97:b4:2d:c7:39:60:bd:51:08:d9:
bc:50:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:14 2026 by rpki-client