Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: w7AMDjbLUx8GPq63SKDmRfmDJW7wV/ikjGfctGpne+A=
Subject key identifier: 14:B3:B1:10:05:82:4F:3B:03:08:11:E8:BE:46:6D:29:CE:53:28:F6
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 019D2960B7A3A8400BE9408EC6F571913CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: 6hlT6jTD6WuUosK07O4ZisUR9ydDs7n9RNKOsBSlEBc=)
2: T0PKdpY-NmquZZ8W5q5sczFw4HU.roa (hash: hAEz18QKEFNj/3DJHuJkTiVTgl3SDPgBVi0BIoWhL64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b7:a3:a8:40:0b:e9:40:8e:c6:f5:71:91:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=14b3b11005824f3b030811e8be466d29ce5328f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:89:a9:4f:3e:20:53:ec:53:66:65:fc:85:
61:e4:08:28:87:31:f5:b0:44:8f:1e:73:94:2c:c1:
a1:36:9b:2f:35:72:e3:58:5d:45:2d:bd:7c:b4:8d:
97:c8:ea:aa:12:28:76:0c:a1:eb:85:6f:11:79:3f:
d2:72:db:d5:61:b4:a4:ae:81:00:24:b2:59:f1:cf:
47:95:48:7e:90:d7:86:6a:b8:a1:03:e8:cd:c7:9e:
de:2f:fd:dc:d1:bc:8f:8b:9a:6d:10:6d:f4:68:3c:
42:ea:75:70:9c:a8:a9:f2:da:8f:d0:70:ee:e5:cc:
90:2d:b5:ba:cd:6d:bb:9e:f4:0e:b2:6f:18:f2:34:
be:0b:b7:32:01:c6:53:3e:00:37:8e:7d:5c:5b:89:
33:58:98:cc:17:48:26:03:31:49:fe:8a:5f:36:e2:
e3:08:05:3c:94:cf:d5:f2:61:f9:ff:86:87:7b:8c:
17:1b:70:76:51:76:d9:72:31:6b:b9:db:21:8f:d6:
af:c1:28:a3:b6:e7:fb:67:da:03:e4:45:41:16:6d:
e1:8d:30:58:90:8c:68:69:97:75:f0:eb:e2:30:c4:
f2:4c:ce:f5:44:93:02:ba:b3:88:fb:8b:28:08:8e:
bf:0f:54:b5:32:80:4d:91:1a:84:a3:2d:a4:99:fb:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:B1:10:05:82:4F:3B:03:08:11:E8:BE:46:6D:29:CE:53:28:F6
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3f:4d:25:d8:66:ca:d2:0d:05:34:fa:41:2f:c7:8b:10:15:
4e:a1:d8:32:68:d2:55:73:54:85:39:c8:96:14:16:12:5b:cf:
fe:4d:b7:d1:70:8e:61:c2:cf:64:45:10:a5:69:81:f7:16:36:
36:a8:96:d6:41:eb:61:85:bc:6c:af:cd:66:76:45:b4:d0:0c:
04:71:5b:61:62:15:ba:80:f4:3f:08:37:6c:e1:b8:5a:58:e5:
6e:fb:ae:00:b6:8d:05:25:1f:ec:b8:e8:f0:07:1a:ba:85:50:
78:36:77:2c:66:11:8d:86:3a:d3:73:70:2d:99:fa:43:1c:81:
52:a1:eb:8c:7a:e7:47:8b:32:57:3b:4d:2a:78:bf:4d:ed:ab:
23:1a:fb:d0:1b:d2:2e:47:99:88:28:c0:2f:38:e0:06:23:f0:
ef:d9:03:a7:1d:2f:ac:10:35:1a:4e:11:7e:00:d4:cd:32:46:
8c:a3:58:80:d5:e3:18:5b:26:f8:eb:9a:ca:c6:38:44:73:a0:
22:4f:00:5c:77:36:22:65:93:87:6b:56:66:6a:34:6e:73:93:
07:f9:38:7a:0e:69:e1:95:aa:bc:71:30:10:b8:38:87:ff:33:
38:a5:a2:62:e2:aa:5c:5e:ee:e6:ef:07:a3:67:c1:ce:bf:f6:
e6:68:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:55 2026 by rpki-client