Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: EuDZ+X8s5lgALTEP+ynqRlBYI5mO5HygDO15W2WA4oA=
Subject key identifier: C2:B4:5D:2D:98:33:FD:32:8A:D9:80:E0:39:D8:50:AA:14:EF:64:E8
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 019D3909F43AD144E4816C4CEB813CD9A717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: 0135
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: HebxY48ZhbVmQKgtuGaFpMeq208eafLm44NWJPOigig=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f4:3a:d1:44:e4:81:6c:4c:eb:81:3c:d9:a7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=c2b45d2d9833fd328ad980e039d850aa14ef64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:50:92:86:0e:75:56:b7:a1:3e:1f:98:c0:
d9:cb:c9:b4:6a:82:a3:15:ea:2f:02:c9:b0:20:76:
13:f5:ee:87:4b:f5:9b:f8:68:0f:c8:34:13:96:52:
7d:73:46:a1:31:8d:3a:63:29:3d:47:55:b6:90:1b:
90:1c:ce:fc:f7:ea:8c:43:c5:4f:cd:7f:a7:96:9e:
f3:70:c3:81:3b:2d:8a:e2:6b:3f:8f:84:23:24:14:
d1:02:2b:32:55:06:9d:9b:a5:a3:9b:0f:96:da:0a:
a3:f6:23:22:ad:fd:92:8c:9d:24:44:4a:fd:91:e7:
f1:4a:85:39:61:80:3c:20:90:2f:c5:1b:12:af:80:
70:bf:a3:3a:91:2c:e4:28:0b:1a:ce:3a:56:16:34:
b7:0d:82:c2:30:2e:16:a8:7f:26:dc:e3:65:25:55:
cb:11:57:7e:52:75:77:16:2a:49:8a:88:58:27:12:
3e:23:61:23:6f:e9:0b:f6:0f:76:01:9f:11:aa:bd:
81:0b:96:d0:b0:6d:3d:bb:56:d5:4f:55:cb:fa:94:
ec:f8:b9:0a:47:9d:c4:70:0d:ee:3d:8c:ff:97:60:
04:fe:ef:77:10:39:10:e7:b7:d8:5e:a2:db:af:0b:
b2:e7:8e:d3:df:b5:97:41:86:f6:d5:7a:6d:47:3a:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:5D:2D:98:33:FD:32:8A:D9:80:E0:39:D8:50:AA:14:EF:64:E8
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:3f:f8:d4:8e:63:51:da:fe:33:f0:bd:c5:69:8e:b8:a8:
17:86:42:08:69:73:f4:ca:63:30:b9:8f:10:7f:42:94:e5:70:
7e:2d:f1:88:83:b4:9d:c6:41:c2:92:bd:0f:c7:e8:cd:00:41:
b5:5c:dd:36:42:5d:ed:1e:d5:9a:bb:ad:5d:e9:97:49:58:b7:
33:33:a2:34:18:8c:6d:cd:b7:be:ae:33:ec:f2:81:9b:10:15:
cd:9a:7c:6f:29:41:bb:cc:e8:59:3a:63:8f:95:5f:6a:b5:f8:
55:cd:1c:e8:2d:47:1f:1a:9c:6b:e3:25:af:61:f6:60:7b:05:
cf:3d:36:7b:eb:3f:af:64:7e:79:25:f2:82:ed:26:aa:cb:37:
13:99:7b:82:fb:8b:51:84:41:e7:ca:ab:2c:a8:ab:33:9f:73:
7b:52:73:86:a0:9b:18:8a:f8:51:b2:df:45:ed:4b:9e:e9:89:
83:bd:2c:c2:1d:02:4b:20:f2:a5:2b:04:8d:97:57:93:69:f1:
b4:ef:26:66:e2:0e:f8:2d:e7:ee:0b:3c:51:ea:fc:4b:0f:53:
42:84:42:bd:40:9e:7c:c7:3b:51:46:9a:8e:25:11:be:6a:4f:
d3:2b:0b:9a:17:35:0f:c8:ff:ba:d4:46:13:bc:99:14:9e:0c:
0b:40:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:26 2026 by rpki-client