Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier: hHPtqus8azqq/V9sWXN/OPWodqsEXfpFTC4nYjx2RqQ=
Subject key identifier: 10:CA:4E:33:42:94:7C:93:74:A6:68:BB:8C:84:04:9F:70:45:87:A3
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial: 019D28BB5C7EBBC53C833A68E8D8CE4907B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number: 14D7
Signing time: Thu 26 Mar 2026 06:01:00 +0000
Manifest this update: Thu 26 Mar 2026 06:01:00 +0000
Manifest next update: Fri 27 Mar 2026 06:01:00 +0000
Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: 3hdq/l6iQM9mpWgwrjKvVurMjypl/rYEhvxyV2xEf1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5c:7e:bb:c5:3c:83:3a:68:e8:d8:ce:49:07:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Validity
Not Before: Mar 26 06:01:00 2026 GMT
Not After : Mar 27 06:01:00 2026 GMT
Subject: CN=10ca4e3342947c9374a668bb8c84049f704587a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:4c:8b:43:41:e8:0b:c4:d4:f0:62:61:b8:
69:6b:7e:7d:6c:ca:f9:cf:3e:fb:b2:ab:c4:f2:2e:
22:0d:78:e0:ee:0b:f0:84:f7:30:42:8d:89:d4:c0:
e0:d6:e0:5a:b0:d0:b9:f3:60:62:3d:b2:a2:4f:2c:
89:6f:99:6b:3a:77:7d:66:66:55:00:40:a8:5e:3c:
5b:6b:53:4f:f7:a2:d3:f2:24:f3:8a:4c:75:ea:23:
63:f4:47:9b:66:ee:cf:ce:08:bc:12:41:4a:99:a8:
91:96:2f:9b:13:d1:1a:79:7f:f2:32:8b:86:5e:f2:
2d:e3:b2:c4:25:a2:ae:ca:b7:1c:06:45:32:de:8b:
37:bb:ed:08:84:3c:38:b4:4a:bb:eb:1f:76:01:15:
7a:51:08:43:0d:d3:ab:ad:ac:33:1e:96:ca:b6:65:
df:8e:b4:49:55:60:9a:1f:24:71:d3:17:65:34:38:
e7:00:53:42:77:e4:3f:c3:8b:0d:2f:76:9d:94:5e:
68:a7:f4:f4:3b:11:67:6c:cc:4e:33:13:ff:ba:e4:
3e:a2:04:99:08:49:2d:d4:18:c5:b0:f8:ca:e0:c6:
65:b2:22:f7:82:85:e0:47:f4:67:7f:29:11:b2:4c:
c0:85:ce:a6:cd:5e:9a:09:71:a9:20:5e:07:82:a9:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:4E:33:42:94:7C:93:74:A6:68:BB:8C:84:04:9F:70:45:87:A3
X509v3 Authority Key Identifier:
keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:fe:81:c9:2e:b5:ef:18:a8:0e:6d:a2:88:6a:6d:34:f8:
90:36:88:1f:1f:e8:40:fe:83:52:2c:ac:6b:2e:ab:7c:6b:d2:
7a:dc:6a:79:27:aa:73:3e:1f:99:e5:0a:d5:ed:55:14:7f:3a:
18:aa:e6:44:f2:8f:98:0d:02:b3:51:60:c1:de:16:fb:2c:de:
88:00:b2:27:2d:e7:a4:8f:aa:5b:53:c5:63:8d:c9:ce:d2:c0:
a6:15:31:d8:d7:07:c6:5a:56:f4:63:98:dc:9b:0d:20:43:27:
87:3a:a0:8e:d8:ca:8b:9b:01:02:03:77:35:d7:7c:06:7d:ed:
3c:8a:c6:77:c7:85:44:96:f2:ec:19:3a:50:07:20:f2:12:e1:
0d:ee:30:f9:62:b4:e5:50:fe:81:94:d6:a1:67:8e:07:f7:d0:
16:22:2a:53:17:9c:4d:ca:e5:c1:ca:7c:5a:16:d3:1b:6e:50:
57:49:63:a0:1f:04:3a:ed:f6:a1:9a:f4:80:8d:07:c5:cd:03:
9b:d8:d2:e0:9a:cb:9e:10:ae:cf:1d:cd:ef:5d:d7:1e:41:ea:
19:13:55:4d:d6:bc:03:a9:5d:42:e7:a4:32:1d:99:d4:b1:95:
eb:0d:49:12:51:1c:aa:9f:ac:61:84:e1:29:05:b1:f8:07:29:
6e:62:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:17 2026 by rpki-client