Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: Qez0H1OlPqF7xIXTCk6JtJoLapsq4NFnjV5k2/qmW5k=
Subject key identifier: 77:2E:31:EB:C5:B1:34:A0:8E:12:29:2C:23:37:E8:15:CF:31:B5:22
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 019D270422B31C495986874F580C6ECABB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: s0NoRNVlb68oxRTrN5GfFQXLVz88hnjgjsts6F2s9Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:22:b3:1c:49:59:86:87:4f:58:0c:6e:ca:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=772e31ebc5b134a08e12292c2337e815cf31b522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:6a:10:dd:77:56:04:89:fb:54:79:b7:a1:
76:22:7a:b8:cf:b9:31:e6:b4:ea:cd:50:79:98:84:
70:91:80:5f:07:de:13:a1:81:ca:13:bc:eb:a2:48:
f1:7a:bf:4d:34:66:36:6b:c9:91:20:e8:3d:7f:1e:
3e:11:80:06:3c:15:b4:52:75:9f:d5:68:15:08:0b:
e4:85:5c:c3:b2:59:57:1e:41:a5:ba:82:5c:f9:26:
e0:3c:91:23:2b:6d:94:ed:e1:95:bf:e1:45:85:b2:
30:8c:67:d8:ac:d2:a5:9c:85:fe:f2:fb:3a:a9:fe:
20:1f:66:ca:af:67:1b:32:2d:51:5a:7c:92:0d:0a:
9e:f7:58:3e:30:f9:08:aa:59:8a:44:9b:a9:84:c6:
0e:d1:4b:b1:75:0f:52:bb:d6:07:31:2a:f3:b0:5d:
18:6e:5f:a0:7a:29:0e:37:bd:91:f9:d6:09:d5:0b:
ac:ce:42:f6:d2:6c:a9:72:5e:85:21:d7:89:cd:b0:
c8:88:77:ce:3b:af:44:55:f3:fc:a6:f0:9b:e4:a9:
e9:c4:4b:b8:44:52:d3:d7:c2:00:d4:a9:81:1c:b9:
62:32:3a:a6:fe:c8:91:23:67:4f:53:cf:44:bd:5b:
a6:d3:83:f7:39:be:70:45:d0:be:e2:05:51:54:15:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:31:EB:C5:B1:34:A0:8E:12:29:2C:23:37:E8:15:CF:31:B5:22
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:60:44:95:40:d8:16:c6:28:a3:e3:5b:fd:3d:59:66:86:
55:3d:17:54:e2:e3:c3:b3:5f:de:d7:a4:25:0a:aa:36:a7:a6:
e7:82:bc:64:3b:8b:21:09:8b:a9:9f:8d:39:ca:37:37:fb:35:
f9:24:aa:8e:db:b3:fe:cc:95:ee:8e:40:67:3e:24:16:15:62:
87:27:1c:68:09:4b:f8:91:6d:a5:84:dc:71:80:38:cf:88:9a:
1e:2f:c7:40:01:63:d4:1a:fc:f4:20:5d:be:ac:dc:ca:f4:47:
e2:26:23:5a:dd:e7:03:70:c2:8e:b5:53:ba:de:66:45:a0:fe:
0c:c3:28:1a:01:5a:8d:70:37:50:da:71:04:5a:35:ae:81:c0:
7a:da:44:a1:93:79:25:aa:58:7e:90:2d:a5:34:b7:1f:9d:f2:
07:95:28:16:e5:57:92:4a:17:a7:7a:70:10:25:d0:cb:76:c4:
d7:d6:77:e1:33:2f:4e:e0:d5:aa:0a:d1:2e:92:b9:46:81:03:
e0:03:63:fb:61:fb:07:4d:b0:c2:ef:48:6c:d4:00:ac:7f:9b:
a4:f0:5d:3a:cd:7c:98:34:70:ab:63:3f:3e:47:80:75:68:dd:
e2:a2:b2:bb:20:87:e0:67:50:f6:a3:da:38:6d:df:86:07:39:
08:5e:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:09 2026 by rpki-client