Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: xVw9SVFKJxJqH9kDCCubXhmT6jh8WQGzVYwR8e7bsks=
Subject key identifier: 0F:84:1C:63:BB:E0:94:FC:56:16:52:3A:81:3C:B5:83:03:8A:DA:90
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019D299746D07AAD801030DD67FF79378EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: vBSRm0pHUHwx9gqgqJBgQflTQ+t+NQIOcd1TQIMzj+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:46:d0:7a:ad:80:10:30:dd:67:ff:79:37:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=0f841c63bbe094fc5616523a813cb583038ada90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:eb:b1:9f:3a:e3:ea:08:10:5b:a1:92:aa:
61:02:a0:b6:aa:59:ef:5e:7a:9a:7a:64:27:28:b5:
71:e5:d1:53:a8:99:dc:e0:09:38:32:bf:f9:09:7e:
5f:72:28:2b:3a:e2:c3:6b:dd:d5:e0:dc:a2:cb:12:
af:fc:04:5c:54:fe:ea:59:c4:d5:5b:17:97:f2:b6:
ad:05:c4:d8:d9:b6:7a:f3:e2:82:27:54:be:92:57:
8b:dd:2c:30:bb:fa:63:60:9b:52:da:c2:ef:20:e5:
ff:1e:5a:80:b3:59:f1:3c:71:b1:b6:06:eb:b9:ad:
5d:a6:6a:9f:13:a0:3a:df:d0:33:a5:6f:42:c0:f7:
3f:1a:fa:0b:64:51:08:b2:31:db:3c:39:47:56:7a:
d0:1a:2e:09:b1:9b:14:38:4b:d0:22:3c:06:51:44:
21:a3:75:70:ba:45:0d:07:be:82:0f:e8:ad:90:95:
55:90:ba:d4:0e:83:ca:bf:b9:fa:54:77:8b:c2:f8:
3b:b5:c9:07:55:02:63:36:d8:f7:51:cf:3e:eb:04:
28:6a:28:52:c6:71:4d:05:2b:b2:6a:80:a4:bc:74:
38:c3:bd:5d:d5:40:43:0c:be:07:fd:a4:fc:6c:5b:
c2:24:eb:0d:a6:7d:29:6e:12:fc:ce:a4:b1:a5:9f:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:1C:63:BB:E0:94:FC:56:16:52:3A:81:3C:B5:83:03:8A:DA:90
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e3:01:5a:6a:51:37:3e:76:fc:ee:0c:53:bb:c1:0e:47:27:
cc:55:d0:6c:49:c1:28:fd:31:c1:16:50:f5:b2:c9:7d:1e:e3:
34:e8:66:c3:19:89:5a:eb:da:9c:cb:24:80:99:20:32:00:5c:
ec:2c:92:1f:2a:2f:89:53:44:78:ee:72:64:d6:a4:31:cf:b3:
ac:93:86:66:e9:d4:18:0b:40:b8:56:38:ab:c2:31:c0:58:d0:
77:de:4b:99:35:7c:c0:10:ba:ca:b3:9a:59:a1:9d:ee:52:f9:
af:f4:65:83:ec:30:90:92:aa:2d:b7:b5:5f:17:69:d9:d5:96:
f8:96:47:5b:ba:48:5c:fa:a2:88:0b:f4:ca:93:9b:26:f2:c7:
6c:dd:e0:bb:76:4f:35:ce:a0:ab:90:5a:6d:4f:bc:43:d1:df:
73:e8:83:eb:fc:fb:18:83:5b:97:33:2e:c1:1d:2e:92:13:fd:
52:5b:ce:1b:0d:ac:d3:df:44:41:d5:33:d6:82:7c:1e:00:95:
48:91:de:b3:20:19:35:6e:d0:0d:49:62:3d:a3:f7:ac:3a:29:
35:f9:c4:a0:36:c0:04:af:11:58:0b:e7:e9:0a:7b:88:e5:d3:
4d:ef:d9:10:00:b4:3e:d3:bb:56:14:41:10:78:5d:8d:a8:93:
04:66:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:02 2026 by rpki-client