Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: TIZfj3CIiqYaYOQBSLPPzAzi6gmvz5hZycZlK5Dvmy8=
Subject key identifier: DD:C6:56:3E:31:94:D6:E4:EB:57:FE:D2:82:62:73:CC:4E:B6:AE:1E
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019D2704719E3442EF64B2F2EC1A801DF70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 12FC
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: yUIFbX7elL6tvooqc9noSd7KfEUyEMpTstufCfqGAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:71:9e:34:42:ef:64:b2:f2:ec:1a:80:1d:f7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=ddc6563e3194d6e4eb57fed2826273cc4eb6ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:46:2a:eb:f6:71:37:9b:86:81:03:6d:24:
60:73:7f:25:e0:b4:a3:99:2e:1b:23:c2:d7:4f:55:
af:08:9b:7f:40:0c:42:9f:8e:02:69:4f:5a:1c:f8:
00:d4:25:4b:c5:35:8a:31:d2:c9:6c:0e:2f:6b:f1:
0c:8e:7d:1b:c9:ad:fb:d8:61:99:04:df:f1:fd:ed:
2d:3d:79:b4:2f:fe:7c:65:e2:f8:3f:a5:84:41:e5:
9b:ee:cb:15:60:2b:0d:19:db:1a:71:18:0a:bc:c6:
99:52:24:73:64:72:f5:5c:69:94:33:01:07:f0:a3:
8f:49:8a:99:53:df:fd:91:49:07:cd:33:94:d8:2a:
0b:68:bf:40:fb:cd:65:0b:7d:77:cf:53:21:4a:82:
5d:9d:3a:a6:95:ec:96:ae:dd:b5:38:2f:91:59:5f:
2c:5f:35:68:35:d1:f6:63:68:14:4f:f0:ca:08:d3:
4d:a2:fd:e7:d8:b7:d2:0b:86:75:7f:e9:33:51:f0:
41:cf:f9:cf:11:26:b1:d4:7a:60:30:e4:fc:49:4d:
c9:e0:cc:6a:95:f1:51:59:4c:0f:3f:47:4b:38:16:
9c:24:0b:42:03:c7:f5:2e:d8:db:5b:10:12:9b:75:
ea:3b:38:b7:9f:60:fa:70:e4:44:54:46:14:86:b1:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:56:3E:31:94:D6:E4:EB:57:FE:D2:82:62:73:CC:4E:B6:AE:1E
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:40:0b:57:a3:e6:ee:af:26:af:e9:33:5c:c1:5c:86:2a:b7:
b2:93:f6:5d:2a:10:4b:4e:c7:04:a5:8c:ea:bc:e6:0a:6b:dc:
f3:b0:7c:c6:85:8f:a4:de:4d:45:23:7b:1a:d2:ec:f5:37:a4:
e7:11:6e:57:7e:62:80:65:68:3b:34:72:0d:de:e7:01:90:20:
1f:13:4d:1d:99:cf:4f:ae:af:32:eb:4d:69:2f:54:53:b0:cc:
5b:81:89:d0:cd:70:dc:d5:06:a8:e4:03:9b:a3:b3:c2:a8:65:
53:8f:9d:ce:fb:b7:e8:aa:e2:f7:6b:ac:f4:fe:ce:ab:1e:43:
5c:e4:c6:d1:aa:cb:47:06:e9:53:fe:97:9a:58:49:3c:ca:2f:
5f:b4:52:e2:2e:59:52:12:b5:e6:3a:75:f7:05:82:43:d5:7e:
2e:0b:0f:b2:4a:1c:f3:4f:bc:67:ac:30:03:38:6f:c9:b2:8b:
7f:30:0a:da:ea:be:5f:e8:1d:04:5d:42:61:b6:43:d8:49:eb:
bb:45:80:93:fc:1f:0f:87:a2:66:8d:e4:ee:59:ba:1d:b3:f0:
86:e7:13:64:39:48:4f:fe:8c:67:35:ad:67:a7:52:e4:41:42:
4b:bd:ba:c8:fb:52:13:b3:aa:2c:8a:a8:cf:cb:d7:76:ee:bd:
4c:7f:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:50 2026 by rpki-client