Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier: 0BWDiJmc9Oj58LkhxRvN44JFiqaz0aULUeOeHomZR5o=
Subject key identifier: 7E:12:D6:FE:E3:E5:E3:BC:96:47:DD:39:D1:D1:8A:7A:A6:53:57:03
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial: 019D26285847A898D9297EFE7DEFD9844109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number: 07D1
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: 6TSqtqP2Lx5eaD5bjm4AnOJSFtd7yeFo39XE2UQf3u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:58:47:a8:98:d9:29:7e:fe:7d:ef:d9:84:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=7e12d6fee3e5e3bc9647dd39d1d18a7aa6535703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:45:d6:29:e9:ff:af:11:fa:8b:75:c7:24:
1b:3e:03:c8:ea:bd:25:ba:f2:fc:4a:3f:6a:60:26:
06:d6:45:13:25:e2:1c:a8:35:1f:1b:90:76:cc:fb:
9f:ff:e9:fe:be:1d:81:38:f4:5c:60:95:52:df:d3:
cd:ab:d9:d5:d3:5f:35:19:bd:47:65:69:4b:64:70:
94:83:ec:15:e1:16:0f:83:05:b5:0b:70:a0:92:60:
e0:41:29:2c:d6:3e:0d:74:c5:63:81:54:3f:c5:e4:
90:ce:3e:91:4c:38:de:b3:13:1b:33:af:6c:7d:60:
23:09:00:d5:9d:24:5b:e6:b8:78:09:80:da:b0:5f:
29:22:3f:02:60:3e:d1:30:89:03:eb:9a:6b:40:a1:
8e:60:12:34:fc:ab:ff:26:2b:35:43:5d:b7:d4:58:
48:1d:58:34:74:8a:9a:05:82:1d:dd:ff:85:d7:aa:
0c:c0:e0:1b:a0:e1:12:89:0a:a4:71:61:2d:20:2c:
f4:19:8f:14:de:0b:d0:d8:bd:bd:d2:62:cb:27:dd:
a8:fa:6a:f5:a0:c8:d1:2f:99:55:1d:d1:72:04:24:
20:b2:23:2e:8b:5e:db:aa:e9:e2:a2:4e:1c:e8:2a:
f7:39:73:4c:76:c0:62:a5:17:2c:ed:33:c9:c3:39:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:D6:FE:E3:E5:E3:BC:96:47:DD:39:D1:D1:8A:7A:A6:53:57:03
X509v3 Authority Key Identifier:
keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:26:9a:cc:3c:92:5f:e6:c9:b4:30:bb:bf:1f:be:84:b8:13:
81:01:dd:9f:7f:2c:66:89:8c:12:d1:23:4b:90:83:44:a5:d9:
9a:92:2b:02:c6:17:06:f2:d1:33:da:20:af:26:91:36:c3:6e:
4b:42:5c:4a:13:d6:24:1c:3b:12:2a:d0:5f:78:2e:21:d0:f6:
62:43:05:7b:13:94:fb:81:65:51:27:49:ef:0d:90:26:9b:81:
27:c9:eb:89:1f:8b:c8:70:34:59:48:91:07:a7:cb:ff:17:3e:
e1:ac:f1:ac:d3:be:00:4d:e6:c8:5b:2c:7a:be:a8:30:37:20:
bc:8a:7b:05:b3:f7:78:4f:52:63:18:1c:91:bb:63:82:69:71:
96:b9:62:a2:3e:f1:0e:04:f2:02:ba:a8:5b:2c:2d:da:b2:03:
6d:11:75:c8:09:7a:24:3c:49:5f:b3:b6:8b:b8:6f:79:d4:f2:
b6:90:57:da:b7:92:6c:fc:e1:f4:30:91:55:2e:bb:30:e1:1c:
ca:fa:61:dc:89:06:22:2c:b0:8e:d3:f0:6e:99:1a:33:d0:51:
ba:d2:1e:02:5b:9d:11:e2:3b:15:ec:14:49:6f:f7:25:bc:ed:
b7:ed:c1:ab:73:89:60:63:49:09:39:a9:32:c3:bb:2f:a0:82:
bf:39:ed:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFhHqJjZKX7+fe/ZhEEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0
YTY0YTUwHhcNMjYwMzI1MTgwMTExWhcNMjYwMzI2MTgwMTExWjAzMTEwLwYDVQQD
Eyg3ZTEyZDZmZWUzZTVlM2JjOTY0N2RkMzlkMWQxOGE3YWE2NTM1NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlBF1inp/68R+ot1xyQbPgPI6r0l
uvL8Sj9qYCYG1kUTJeIcqDUfG5B2zPuf/+n+vh2BOPRcYJVS39PNq9nV0181Gb1H
ZWlLZHCUg+wV4RYPgwW1C3CgkmDgQSks1j4NdMVjgVQ/xeSQzj6RTDjesxMbM69s
fWAjCQDVnSRb5rh4CYDasF8pIj8CYD7RMIkD65prQKGOYBI0/Kv/Jis1Q1231FhI
HVg0dIqaBYId3f+F16oMwOAboOESiQqkcWEtICz0GY8U3gvQ2L290mLLJ92o+mr1
oMjRL5lVHdFyBCQgsiMui17bquniok4c6Cr3OXNMdsBipRcs7TPJwzmzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4S1v7j5eO8lkfdOdHRinqmU1cDMB8GA1UdIwQY
MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt
N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3
LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyaazDyS
X+bJtDC7vx++hLgTgQHdn38sZomMEtEjS5CDRKXZmpIrAsYXBvLRM9ogryaRNsNu
S0JcShPWJBw7EirQX3guIdD2YkMFexOU+4FlUSdJ7w2QJpuBJ8nriR+LyHA0WUiR
B6fL/xc+4azxrNO+AE3myFsser6oMDcgvIp7BbP3eE9SYxgckbtjgmlxlrlioj7x
DgTyArqoWywt2rIDbRF1yAl6JDxJX7O2i7hvedTytpBX2reSbPzh9DCRVS67MOEc
yvph3IkGIiywjtPwbpkaM9BRutIeAludEeI7FewUSW/3Jbztt+3Bq3OJYGNJCTmp
MsO7L6CCvzntlA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:29 2026 by rpki-client