Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File: aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier: OXPWlAa2spTJG4LLIpqX/n4qYSlIpu2DdLjr2oE87w4=
Subject key identifier: 0E:B9:30:E4:36:D8:80:B1:D8:9E:4A:C1:8E:61:AB:BC:F3:9C:F2:2B
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 019D3940EA13D731E3D077D9271CBBA46246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number: 0C33
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
3: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: K5wFRIN+NxbSygMvC9YVERb9YdMts3gKmRONqYTetS8=)
5: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ea:13:d7:31:e3:d0:77:d9:27:1c:bb:a4:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=0eb930e436d880b1d89e4ac18e61abbcf39cf22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:7e:7e:a0:5f:08:70:8b:05:ee:9a:ac:97:
c6:8c:3b:b5:3b:ff:45:e6:95:83:85:88:29:bb:00:
7f:b5:86:6b:ac:55:b9:14:34:cc:84:05:b8:37:5c:
28:c6:aa:c7:c4:a7:a4:ec:2c:cd:66:c5:7d:95:ed:
d6:33:d2:35:bf:ba:99:b3:08:c1:ec:df:5f:44:46:
d7:15:be:7b:07:82:da:67:53:46:59:57:bd:b2:0e:
89:4f:31:6c:69:bf:3b:28:ba:e9:61:91:ba:bb:16:
41:7a:01:54:ed:20:a5:1d:d4:72:9b:bb:73:ed:9b:
c5:6f:95:ff:41:48:f6:37:f9:98:b6:c1:45:91:58:
1f:66:57:92:22:4e:ac:90:51:f3:47:3b:76:a7:e3:
ad:20:ca:2c:43:8f:68:fe:9e:46:69:5b:7a:61:d4:
28:9f:fc:99:53:ae:04:ed:a8:9c:94:24:82:e4:2e:
fc:85:fc:27:70:57:87:81:77:34:68:fa:78:66:4c:
b1:1f:10:91:da:44:37:9a:de:21:f9:de:12:e1:23:
c4:ee:6b:17:07:1e:2c:f8:5a:a9:d6:64:28:d4:56:
df:cc:dd:8b:48:f7:80:0b:83:28:49:b0:7c:ad:ff:
88:80:b6:a6:fb:b6:2c:11:97:53:16:58:88:24:7e:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:30:E4:36:D8:80:B1:D8:9E:4A:C1:8E:61:AB:BC:F3:9C:F2:2B
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:c2:a9:ed:be:83:e9:4c:ae:39:5d:81:6d:d8:c7:9a:26:
2d:de:46:b7:24:84:8e:ff:de:dd:37:19:f5:dc:d9:d2:1c:42:
59:66:4c:4e:99:0b:a1:4b:6d:52:66:22:78:9a:ea:49:fe:f5:
59:d7:fa:5f:9b:a3:e3:30:56:dd:d8:9d:94:2b:98:7d:0d:a6:
d2:a0:c1:ec:60:60:2f:53:83:d2:3a:4b:3a:20:f8:31:f1:21:
fa:59:4a:13:18:8e:e4:ec:2c:a1:fa:ec:e7:f4:89:cd:d8:3b:
46:32:fe:d6:ab:97:ce:36:44:43:7f:44:f2:fa:dd:03:97:9d:
4b:69:6f:88:16:cd:02:23:18:f6:bb:47:22:ca:cc:20:e0:b1:
48:8a:49:ee:7e:88:42:42:9f:fb:76:56:0d:d0:90:47:1f:21:
70:0d:db:de:5e:6f:b9:1f:23:22:b8:cb:96:07:27:68:31:f1:
38:88:1b:0a:c2:b2:2b:20:51:f8:0d:57:84:b3:0d:76:2c:8f:
fd:73:ac:50:dd:52:fe:b0:36:b7:aa:b2:18:74:aa:3f:9c:4d:
0d:c4:4f:db:18:56:ae:18:69:ef:68:29:ce:36:c8:27:0d:c1:
45:aa:9f:5d:ad:3e:67:ce:26:cc:41:15:67:6b:30:bf:c0:e2:
54:ba:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:41 2026 by rpki-client