Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
File: aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft (raw, json)
Hash identifier: HpZQz6XansMQMI/WKjYEIP6meSyQyq/gWnyEYyVSobE=
Subject key identifier: A8:42:0C:32:17:A3:1D:DD:ED:29:07:06:EA:6C:36:EC:37:3A:EF:41
Authority key identifier: 69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
Certificate issuer: /CN=6951d3a68f40008ad8c520745ca0f309ea81e965
Certificate serial: 019D26CCD5F6244C0F5674985CAC9435D269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
Manifest number: 01E5
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl (hash: AKyASR6j+s0k0YqQddzXQOzY658t0armUprrCctR/8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d5:f6:24:4c:0f:56:74:98:5c:ac:94:35:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d3a68f40008ad8c520745ca0f309ea81e965
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=a8420c3217a31ddded290706ea6c36ec373aef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:68:2e:bd:b3:81:9d:21:2a:e7:34:5d:80:
70:1c:a8:d2:97:de:18:10:57:50:4d:e0:52:35:4c:
04:43:03:88:14:0d:60:fa:4a:c2:66:6b:00:73:6c:
29:77:18:c7:40:97:a5:c3:5f:55:07:38:d4:90:71:
3c:21:27:2f:e7:bd:42:2e:54:e3:70:a5:39:fa:82:
0e:71:12:28:12:da:e3:d2:e4:8a:9f:2b:a7:ed:b6:
76:e1:80:26:28:89:23:7a:ef:4b:f1:25:d9:e6:47:
86:97:c5:52:67:70:c4:14:c7:cf:de:c3:be:b9:a8:
4b:d2:70:07:eb:5c:e7:06:b6:39:0a:fb:38:7e:92:
99:ad:2e:a0:a0:ea:8e:6a:71:2e:49:ee:63:98:51:
78:61:a1:7a:4d:32:9f:7b:d0:e7:2d:c8:a8:4f:f6:
9d:8d:60:e3:55:4d:08:8b:80:2d:fb:b7:d9:32:d8:
46:99:08:c8:8b:78:bb:07:54:6d:e9:1e:ae:12:1c:
b7:12:93:4e:c2:c4:e6:00:81:58:91:70:05:c9:f1:
9e:b5:1d:56:a7:a8:cd:1d:62:de:7d:9b:fb:84:03:
a1:12:4b:1c:00:b9:5a:28:b9:79:20:07:3d:e8:9e:
bd:c8:d2:9f:91:1b:80:3f:ae:80:08:ab:e4:c0:ab:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:0C:32:17:A3:1D:DD:ED:29:07:06:EA:6C:36:EC:37:3A:EF:41
X509v3 Authority Key Identifier:
keyid:69:51:D3:A6:8F:40:00:8A:D8:C5:20:74:5C:A0:F3:09:EA:81:E9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHTpo9AAIrYxSB0XKDzCeqB6WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7eaf05-6a03-40b1-97bb-a2521114a72e/1/aVHTpo9AAIrYxSB0XKDzCeqB6WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b8:c1:5c:46:52:bf:35:c2:73:a5:d3:8c:03:19:bc:86:36:
00:9e:fa:56:cd:a2:ac:ef:ee:15:31:ab:66:66:08:ee:5e:ec:
f8:22:51:b7:55:a2:72:09:dc:56:5d:c1:e5:d9:db:3b:fe:0a:
37:a3:e8:8e:4c:fe:e4:8f:04:00:a8:17:5c:97:cd:49:ad:75:
2c:d0:61:de:b9:6b:44:07:dc:5f:83:ca:7a:18:98:46:36:49:
49:2a:88:8e:4e:e8:0f:7a:01:04:74:f7:f5:cd:83:c7:c3:e7:
25:0b:d3:2b:cc:7f:6e:aa:08:40:73:a2:9e:33:11:17:7d:e9:
29:9b:2a:0a:bf:db:72:fa:d0:d9:5d:bb:24:d3:ff:68:a8:c1:
83:09:d3:39:6f:de:73:25:91:99:41:5c:27:ad:4e:11:97:83:
ea:05:aa:f5:ab:78:b1:35:ae:8d:e0:77:40:70:94:34:26:35:
fa:4d:2f:05:6a:ab:00:b8:ac:67:ac:02:b5:c0:78:34:3e:e7:
57:5e:3d:9f:26:94:ba:74:bd:ad:2e:6e:cb:20:40:86:3f:ba:
7c:34:0a:89:9f:ce:50:81:4d:21:db:c9:2f:29:02:21:c4:de:
88:c2:d6:05:96:34:3d:a0:be:02:f6:f7:34:da:5a:83:90:91:
9e:d2:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:23 2026 by rpki-client