Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: eyLo9FcCN6zrygQiid7m8Ji9PdnqJfE3KOxDn2UQAEo=
Subject key identifier: D8:14:82:4E:07:B5:89:2D:DB:8A:BA:EA:BB:FF:A3:68:13:8D:F1:19
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019D37C032145F26CB037C13D81CE3EF0750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0DFB
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: CUJq5lsHlmUk9dKb6MeMs/4f8sV5gzf7yOsbJOkoj2o=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:32:14:5f:26:cb:03:7c:13:d8:1c:e3:ef:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=d814824e07b5892ddb8abaeabbffa368138df119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:6a:17:84:8a:23:f0:06:f9:03:ef:16:7a:
50:7d:71:3b:53:67:ae:b8:5c:36:e5:e0:d4:5d:5f:
02:b7:69:97:7c:ea:2b:c4:50:36:d0:e1:fe:8e:eb:
94:94:d3:9a:fe:ea:18:55:59:21:cc:2d:e0:f2:2f:
aa:63:bf:be:6c:8a:99:0e:d4:e3:86:8e:29:29:c2:
45:36:c8:55:72:f1:ba:44:7d:09:c6:72:fd:94:f4:
1c:5a:26:c0:f1:87:73:27:c2:4d:1e:66:d5:03:8a:
0c:56:23:d1:bd:d8:73:f6:6c:f3:a2:f5:6d:85:0a:
7a:25:5e:be:68:0c:ad:d8:d9:36:89:5f:90:02:a8:
38:3a:71:c6:fe:04:22:d7:f2:3f:2e:cd:3e:a6:98:
23:ad:9e:e7:e8:b8:5d:56:df:23:fe:b5:71:c9:63:
15:91:f4:84:16:f3:f4:45:3f:5b:84:05:f1:37:2f:
8a:fe:2d:6e:ba:a4:49:9b:d3:fd:a5:b0:e7:a0:b3:
9b:4d:3c:47:86:50:c8:ad:4b:dd:38:5a:9c:31:f9:
63:24:ef:c3:c2:a6:77:06:59:2c:dc:71:06:8a:d1:
8a:6a:38:3d:21:03:0f:c5:06:fc:f8:b0:3e:32:b6:
af:eb:58:0d:33:90:d6:f5:86:55:7a:34:be:a0:5c:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:82:4E:07:B5:89:2D:DB:8A:BA:EA:BB:FF:A3:68:13:8D:F1:19
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d2:71:29:45:95:2b:80:f8:09:df:88:77:30:67:3f:c6:b2:
32:da:dd:12:c9:51:00:cb:f7:f0:84:b3:06:19:20:b1:e9:77:
4a:16:57:be:fb:c3:a4:41:0e:04:26:6d:6d:54:49:bf:4c:c9:
c3:a5:ae:49:cb:fd:6c:f0:0e:e8:14:c3:73:84:65:82:6e:05:
d9:f9:91:c5:f1:35:08:a6:60:ed:36:d2:ba:63:9f:25:c3:c7:
88:03:e0:ee:bb:85:a9:10:28:32:56:dd:a5:80:2c:46:73:fd:
69:71:f7:6d:53:87:b3:58:5b:4e:76:d2:6e:32:c2:51:4c:e1:
76:c3:ee:ae:7e:cd:4d:29:21:e6:8d:b6:a9:c1:f2:7c:28:fb:
b3:01:4e:72:34:bc:b1:72:d9:dc:44:8b:d1:19:22:94:5d:79:
1a:9a:fa:4c:3e:67:a5:9e:52:b6:dc:94:0a:ac:94:d0:78:e0:
39:7a:d8:49:b1:3a:c3:ee:a7:67:c8:37:a9:ef:5b:2a:fc:fa:
92:67:d4:f7:a4:b0:66:46:b2:5a:1a:14:fa:43:8d:1b:41:68:
cb:61:ce:cf:b5:0c:28:c1:8c:a0:5f:44:28:c8:99:24:30:67:
ae:86:9a:d3:6d:ca:66:59:85:22:58:4a:ae:db:79:46:18:9b:
9b:1a:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:11 2026 by rpki-client