Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: yjTt5mDhWkSWyPuBtwbqbqmeEarEWgCFxj1eZY67LP0=
Subject key identifier: 95:DE:74:56:5E:4C:6A:01:0B:D8:60:08:90:57:4B:83:17:56:93:A6
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019D36E4EE83C44DBD7F0B94A4169FFEB386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 00:01:06 +0000
Manifest this update: Sun 29 Mar 2026 00:01:06 +0000
Manifest next update: Mon 30 Mar 2026 00:01:06 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: et04fr7qM0GOoUEaMU9nBd5Whi7ibc1rvyP5EGFG8nk=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:ee:83:c4:4d:bd:7f:0b:94:a4:16:9f:fe:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Mar 29 00:01:06 2026 GMT
Not After : Mar 30 00:01:06 2026 GMT
Subject: CN=95de74565e4c6a010bd8600890574b83175693a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:d1:88:a0:6f:68:ba:f1:f6:89:27:09:09:
5c:f1:a0:2f:af:20:3e:7e:32:22:37:df:47:3f:e8:
0f:2a:94:67:38:41:d7:2a:3b:07:ac:4a:fd:62:ad:
67:d3:c2:ba:a5:09:4d:3c:b0:00:26:b0:82:e8:65:
6f:30:57:c1:70:7b:80:a7:da:38:39:8d:be:8b:db:
de:b5:fe:f4:20:60:6b:09:84:85:c2:47:e2:b4:f0:
df:10:75:75:3a:22:fb:8a:98:2a:2a:d9:ea:17:2d:
ad:20:cf:17:3e:ca:6c:5b:df:26:c0:ec:bc:6f:5b:
e4:c9:23:2d:56:5d:94:bb:76:80:ac:20:6f:e8:93:
8c:ff:43:b1:d5:34:da:e5:af:ed:56:6d:9e:06:a6:
72:ff:76:05:9c:9a:69:cb:4c:66:02:86:cd:fe:bd:
df:9c:77:88:23:87:90:d7:43:75:10:3f:c2:e0:67:
5b:3c:96:a4:40:74:7f:d0:3d:0e:65:df:37:a5:4c:
af:76:32:d4:06:11:5d:de:4a:d7:b8:89:0d:97:0d:
7e:b3:1f:5c:27:66:6e:a5:85:1f:92:ef:d5:bc:39:
20:c2:91:6d:04:87:7c:81:6e:db:b5:5a:23:b5:aa:
14:65:9d:4f:f0:14:8a:a0:8e:3f:cc:96:f6:ce:e3:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:74:56:5E:4C:6A:01:0B:D8:60:08:90:57:4B:83:17:56:93:A6
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:33:5e:88:de:f0:c7:2f:09:6d:27:52:2d:b6:b6:b8:53:44:
cc:23:14:14:9f:b2:e4:41:0d:5d:ff:44:84:eb:0e:b5:15:67:
52:63:dd:f7:93:72:86:3e:85:e7:54:0a:7a:6b:66:59:37:c0:
c3:c8:17:0f:e0:4e:b9:97:ca:fa:a2:d2:a3:74:91:0d:86:10:
af:39:c2:8b:18:83:b1:9e:81:54:98:5a:08:ae:b6:ca:80:e0:
60:8d:59:6b:03:2c:7e:23:07:8f:98:b3:ec:3b:52:ac:69:90:
8b:27:b3:d8:30:1c:fc:6f:26:7a:23:97:cb:96:c0:3a:46:7b:
71:b6:09:73:9f:3b:4d:18:cb:4a:07:bc:59:e8:ab:61:9e:61:
65:8b:13:0d:79:84:bf:24:59:75:36:ca:49:06:e8:09:73:79:
2a:98:9b:ac:12:bb:6f:fd:e9:cd:c8:af:1f:3e:3f:26:84:b1:
1e:00:87:dc:96:53:df:d5:20:3a:b5:14:df:61:64:40:23:87:
19:d1:46:ee:27:c2:b7:8e:89:05:3d:7a:02:65:bb:8a:d5:8e:
b1:10:44:46:a2:e0:eb:e6:36:a5:63:e2:82:0a:5b:8c:61:a1:
9e:ff:d9:fa:97:cc:95:51:84:3a:86:06:ae:77:fd:b5:0f:84:
88:ca:61:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:46 2026 by rpki-client