Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: dQ38aoCxvV7wB0AgyGTXXLsQLXRQ6CT2zZCWFnUvpq4=
Subject key identifier: 16:5C:0C:1E:F7:5D:9A:D2:28:41:81:CC:6F:BC:7D:9E:63:6B:2A:A4
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 019D2961694A6C0F91715E6D09144349839B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 09F1
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: 3ZAPUCVw8lim6ytABJ3KqUkupBT9I6ffhNWCZNJZRMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:69:4a:6c:0f:91:71:5e:6d:09:14:43:49:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=165c0c1ef75d9ad2284181cc6fbc7d9e636b2aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:c3:a9:d5:ff:02:fc:6d:05:e8:9e:7a:d5:
69:d1:f0:8d:09:79:95:41:86:f0:0a:fb:6a:5c:ba:
62:e6:95:b8:2b:cb:c9:f1:f0:78:50:67:aa:c2:65:
99:52:b2:36:65:4c:f5:74:82:54:2d:22:f2:4e:a5:
02:ed:da:4f:95:78:95:12:b1:d1:0f:0b:38:6e:5e:
42:ff:11:b9:05:86:2c:2e:d2:4a:59:17:51:1d:43:
a8:e0:a8:76:09:33:a6:05:03:77:54:29:f8:65:5b:
6d:1a:49:d5:93:b4:b1:10:79:83:20:98:91:40:43:
ea:3b:e1:cc:d9:e0:b6:c3:4c:30:a3:1f:28:09:80:
c0:be:18:ce:80:57:3d:a8:9a:03:8f:17:1c:fe:ad:
dd:f8:f9:2c:d4:bc:11:46:d2:d7:44:c1:e9:8e:7c:
6e:07:1f:64:8a:d3:86:c5:7e:06:97:8c:42:78:d5:
72:ec:bb:69:47:6c:a2:5b:47:e5:64:b5:49:36:dc:
75:40:2a:45:1f:d4:01:5e:4f:fe:db:12:09:78:45:
4e:6d:3c:59:a4:cf:cb:c4:0d:e0:5f:37:e5:0d:87:
c0:9c:71:0c:a6:fb:c5:6f:29:39:76:9a:94:9a:8e:
2e:13:b8:97:5b:33:67:cf:18:96:ca:ed:1d:b9:42:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:0C:1E:F7:5D:9A:D2:28:41:81:CC:6F:BC:7D:9E:63:6B:2A:A4
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:af:15:82:41:a8:d6:e0:d6:dc:d7:d7:b8:24:e0:b6:c3:
08:65:04:2b:79:fb:f2:2f:04:eb:72:2f:b8:fc:7b:55:1d:39:
67:3a:9b:5a:2b:7f:56:41:ad:d2:bd:8f:94:72:17:54:5f:99:
74:29:57:4c:d7:b2:3d:d9:81:f7:16:c6:34:81:4d:f0:be:c8:
eb:a2:67:8c:64:fd:dc:0d:ef:26:d5:64:4f:e8:92:13:51:f7:
2c:28:83:63:76:cf:c8:88:3a:cb:bb:63:fd:29:6a:a7:30:d0:
ac:76:f6:ba:03:0d:69:a2:32:17:2d:2c:b1:6d:12:ad:d9:39:
fa:54:23:6a:8b:f3:34:18:10:77:27:7a:7c:79:5d:fb:62:a0:
c6:40:bd:07:29:6f:8d:34:d9:55:8c:2b:b7:fe:6b:d6:3b:e9:
61:3e:1b:90:6b:cc:c9:bb:6b:ed:15:e0:7f:a0:e1:f1:dc:55:
f6:94:53:89:6c:9b:f7:88:ac:7b:0c:e7:d5:42:42:d6:9d:fb:
83:a2:af:bc:87:49:0d:08:80:bc:7f:81:12:cd:47:3e:2a:a7:
52:6c:d9:87:8e:06:e6:86:22:a4:7a:8b:01:62:80:6e:4c:43:
21:db:ca:e2:e8:17:49:8e:46:06:1d:61:c8:68:d1:50:1b:a7:
80:bb:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:39 2026 by rpki-client