Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: 6crJIk2ezBs3XgYXWXZHRbySbmVP+1gBtCK1u1SO+Rk=
Subject key identifier: 86:63:86:BB:FC:D8:C7:2C:38:BC:99:CA:35:B2:6B:A3:2D:CF:B8:DF
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019E1EDA28451D167FE7E64144D5B8BD0B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 01:01:14 +0000
Manifest this update: Wed 13 May 2026 01:01:14 +0000
Manifest next update: Thu 14 May 2026 01:01:14 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: TMHntnblrofdkR5LIlq/XIP0l9fDj71ohYUSW9l9uVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:28:45:1d:16:7f:e7:e6:41:44:d5:b8:bd:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: May 13 01:01:14 2026 GMT
Not After : May 14 01:01:14 2026 GMT
Subject: CN=866386bbfcd8c72c38bc99ca35b26ba32dcfb8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:b2:64:cd:c3:81:e5:a1:d5:fd:61:46:4d:
65:27:ac:8f:cf:99:3f:1a:72:8f:a9:72:03:91:51:
8f:7d:4c:03:8e:6a:22:57:5a:b1:34:2d:14:93:90:
e0:13:40:38:b9:40:09:db:3a:0a:6b:d1:e7:71:61:
df:c8:0e:70:85:83:9b:b1:33:39:b9:bb:a6:fe:e9:
d3:90:88:f9:31:33:65:0f:59:19:0f:27:16:3b:43:
bc:6d:16:68:08:a9:cf:cf:2b:16:d0:8e:29:e0:dd:
92:5c:02:e1:41:72:cb:44:61:f5:da:16:1d:f8:8a:
a3:fd:cb:24:f5:97:47:17:35:02:c7:b3:0a:f1:fc:
ce:a6:9d:85:d0:3f:55:d9:84:0a:9e:13:9c:2a:03:
11:bb:de:32:6f:f1:11:38:5d:5a:d7:25:f9:7d:36:
e5:65:ea:8a:37:27:43:de:a6:c2:39:a7:48:72:a0:
9f:ca:35:ae:2b:17:ee:47:9d:18:b4:f7:1f:ba:a0:
af:3d:d3:a2:0f:a3:0f:71:fa:c0:9f:e2:5f:f2:66:
e0:01:8e:78:cd:23:3a:89:5f:0d:18:68:3e:84:5a:
c0:bb:78:49:bc:dc:18:f7:b7:b9:a3:1a:d3:f7:57:
21:86:89:30:92:8d:71:0b:a9:ea:6d:eb:69:c1:ae:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:86:BB:FC:D8:C7:2C:38:BC:99:CA:35:B2:6B:A3:2D:CF:B8:DF
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:88:c8:a1:ad:b4:f0:c5:a5:f5:e2:55:23:89:55:51:9c:8a:
2c:3c:d8:39:5a:56:28:df:64:8e:85:30:a5:a3:35:d6:a0:50:
06:21:c1:dd:c2:f0:8a:41:ed:7b:d6:94:79:c9:b2:f6:48:a1:
dd:58:25:3b:29:8f:11:f5:3f:64:69:4b:6a:ff:24:22:78:d5:
4d:2d:00:f2:8d:30:3e:3c:e6:40:52:e2:54:ba:32:b8:5a:78:
6c:88:0d:55:34:0f:83:76:89:e0:2e:60:66:3d:14:4f:55:56:
bb:ca:af:e9:e8:49:d8:01:1d:13:a8:64:a0:19:0f:fd:26:8c:
af:fd:f8:2c:7e:d5:f9:1d:63:72:57:a9:da:f1:78:b8:fc:80:
54:fa:c5:1e:eb:e6:d8:d3:72:c9:47:4f:c7:ab:c3:db:c6:35:
61:fc:19:bd:70:a4:42:c5:ad:40:b3:fa:29:81:d1:9b:a9:b8:
69:21:d9:21:be:b9:6e:ca:79:b1:91:37:67:87:49:4a:a9:48:
46:30:3c:05:0d:39:60:8b:3a:6a:e9:c0:eb:48:87:c9:77:fc:
da:c3:33:af:54:86:4a:b9:6e:20:bf:26:10:d4:39:96:8c:cd:
6d:c6:fb:a1:a1:de:9e:d8:a7:e6:ac:cf:48:c1:5c:6e:2c:82:
47:a0:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:56 2026 by rpki-client