Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: 5+SvsgvDP3DMycm8laYxtsFNrmLgp/AVcWklJlq0aqo=
Subject key identifier: 24:76:43:F3:C8:6E:8A:28:56:4B:26:28:C1:BF:97:63:46:9B:29:1F
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 019D2704B250712810B6C217F91451E4B001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0FE6
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: nTIf4aOmEvTyMvwWWrD29d/EcSgMYa/3kT7AAanncoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b2:50:71:28:10:b6:c2:17:f9:14:51:e4:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=247643f3c86e8a28564b2628c1bf9763469b291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:6c:85:20:c7:8e:39:b5:fe:bd:ce:01:a5:
34:72:50:25:ad:c8:d8:fb:62:91:92:1a:d7:8d:fe:
ab:46:81:33:2d:dc:58:f2:38:2d:b8:4c:ea:e0:66:
98:b7:72:2e:b8:48:b1:3f:3a:0e:23:81:de:2e:64:
89:f9:00:3a:75:00:06:ed:21:02:e6:f9:1f:ae:32:
f2:55:9b:2a:b7:b8:e5:26:ce:e4:51:bf:ae:e3:62:
be:8b:45:a1:33:67:09:87:1c:64:58:15:7b:af:1f:
34:d8:37:81:e6:40:b6:a1:18:49:c5:06:56:36:fb:
73:ab:b3:8e:a1:67:d1:5f:5e:69:36:5f:c7:8a:d0:
ff:da:b4:31:52:ae:d0:15:28:3e:17:ec:49:1a:a0:
96:e2:56:0e:ca:58:8c:d0:8e:74:88:40:fb:10:d5:
e3:9b:67:85:b1:6e:8b:fe:36:92:af:78:21:e1:af:
24:fc:1c:b0:81:9b:09:8f:01:c2:f5:9d:02:42:a0:
00:e8:b8:c3:9a:8d:c0:84:f0:97:7f:ee:75:9f:44:
0c:3e:b2:fe:18:cc:9c:3a:8e:45:c4:75:b9:41:42:
50:df:1f:6f:04:9f:6a:d6:a4:5f:b6:24:48:78:ec:
aa:ef:dd:87:58:95:35:b9:d3:cd:3a:ad:70:a0:b9:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:43:F3:C8:6E:8A:28:56:4B:26:28:C1:BF:97:63:46:9B:29:1F
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:da:59:d6:48:ff:63:57:57:d8:81:f6:30:9a:20:a0:b3:
e6:c2:5f:13:bd:44:2a:c7:5b:c3:25:6e:14:2d:b9:76:69:d1:
63:06:89:8e:26:b0:b3:55:46:f1:b6:f2:fc:ae:26:39:bc:2f:
c4:67:16:bd:b2:d6:a7:f6:1e:51:27:38:32:1b:ab:af:67:a3:
e8:eb:d6:31:06:59:cc:5d:b3:6e:99:41:b3:4b:b8:83:56:94:
c6:26:02:9d:fe:49:1d:ca:6e:ae:59:de:f5:a4:83:a1:cb:60:
56:22:cb:10:9a:92:b0:6c:14:4c:7c:e6:5f:46:21:04:d8:c8:
be:fe:63:61:38:19:60:aa:25:7f:8a:65:37:1d:87:74:9b:6a:
82:56:9b:5f:3f:f7:c1:ff:c5:a5:44:f4:67:49:1b:d1:ce:fe:
b1:ce:8e:04:a9:ff:18:0e:4e:fd:d2:d0:bd:01:79:67:24:f3:
a2:b8:ea:bf:a5:12:e6:61:5d:f0:3e:a3:ae:29:0f:3f:81:87:
28:56:5e:8c:e6:0a:1a:1b:d7:7c:71:68:53:93:d5:6e:7e:34:
48:33:80:ec:6e:bb:a9:31:cc:67:08:8d:49:29:75:70:d5:67:
ff:8a:54:92:30:64:9c:4e:ff:49:9b:f6:30:8b:4a:05:64:b2:
72:0a:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:17 2026 by rpki-client