Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
File: rryO4V1QIdy_qgXKGDil4KyLfaA.mft (raw, json)
Hash identifier: 4zLN1lwTKJV6mJzYfbo7LA/70DmhqjKDqs1evi9Ioe4=
Subject key identifier: AC:92:72:6B:F6:B3:DE:70:F9:9A:3B:C1:A9:1A:86:77:93:0A:37:E8
Authority key identifier: AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0
Certificate issuer: /CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0
Certificate serial: 019D29298BAEE191A58EDF00855B1E51D173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
Manifest number: 015A
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: rryO4V1QIdy_qgXKGDil4KyLfaA.crl (hash: bxAzGr9i2nnjdKByHuM7E7CFtKoYGOa/648OMOpe/J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8b:ae:e1:91:a5:8e:df:00:85:5b:1e:51:d1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=ac92726bf6b3de70f99a3bc1a91a8677930a37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:ec:a1:8c:07:11:65:f5:bb:d0:8e:52:6e:
2e:43:10:92:8c:68:12:3e:80:f6:5b:9a:b0:84:ee:
34:b9:d8:da:ac:3f:72:f2:c2:22:db:bd:da:70:38:
bf:94:ea:58:74:f3:0c:0e:07:c3:4d:1d:de:16:5a:
48:88:29:36:5a:f8:3a:6c:cb:bc:4e:cb:8f:cb:50:
38:8c:49:ea:19:cc:99:34:36:d9:3a:af:e0:93:d4:
94:ae:02:21:91:25:ba:66:d7:9d:16:42:bd:7a:14:
59:57:ae:a7:ce:6a:95:84:34:17:bd:19:d7:3b:fa:
af:41:af:b8:a2:8d:6f:83:5d:36:a6:d7:89:c0:04:
e1:85:e7:0b:57:24:45:e5:be:ee:1f:53:eb:ba:de:
9e:ea:1f:94:99:2b:47:9d:0b:52:58:f3:4c:36:21:
85:83:64:e9:33:70:90:85:54:14:6c:26:36:b8:46:
bb:7c:43:aa:1b:c8:0c:35:66:82:88:ca:11:8d:79:
62:56:00:1c:d9:d8:54:cb:c8:f9:61:49:13:f0:44:
ac:54:96:46:dd:08:e5:dc:10:e6:33:da:cb:6f:1a:
9e:98:8b:55:29:75:32:ac:17:a2:61:7b:a1:40:18:
bf:b8:73:ce:56:93:2e:3b:84:df:87:93:82:85:69:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:92:72:6B:F6:B3:DE:70:F9:9A:3B:C1:A9:1A:86:77:93:0A:37:E8
X509v3 Authority Key Identifier:
keyid:AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:67:a2:e9:28:45:cf:9e:f1:2a:3b:21:23:a1:67:4b:c5:8d:
86:1a:6b:3f:a9:77:a8:dc:52:50:ff:a4:28:80:10:9a:97:c8:
6a:6c:42:11:3a:ea:64:0a:4d:c7:36:83:cb:45:80:3c:7d:54:
2e:e8:60:5b:fc:e6:5e:a3:35:ad:c1:33:33:51:cd:f6:2c:2c:
0c:4a:53:e4:6b:50:82:2d:ac:5a:0a:6a:66:5c:a2:70:a4:db:
28:0e:f6:36:af:55:95:0d:a1:e8:12:c8:c1:7b:ba:77:82:12:
14:2b:58:17:a0:94:67:da:d1:9f:7f:50:84:8c:c3:f2:f8:64:
bb:db:a1:19:ef:1c:93:b4:73:17:79:e9:0b:75:86:98:4b:e6:
46:2c:3a:c8:01:34:e9:61:2a:21:95:fe:bd:23:39:10:84:35:
4d:07:94:bc:ce:0d:ad:56:2e:99:c3:31:7e:68:b5:65:70:1f:
98:fe:98:59:ae:69:42:c8:7b:ad:7f:82:c6:66:5d:ac:f3:22:
72:1f:57:ce:b7:41:8e:1c:a5:61:d4:3d:d2:3d:a2:26:16:2a:
ac:43:95:4e:b0:ff:21:0d:28:51:6d:ed:6e:a2:10:ec:58:8f:
e7:8c:0a:d4:4b:b5:8f:33:87:38:2a:45:fb:a7:d3:f2:69:0c:
77:75:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:44 2026 by rpki-client