Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: 2JOE6cEkXmkbiOg9sYNASiLM3oLPXFGiNw6UcBfbOUg=
Subject key identifier: 10:B1:8C:91:AD:31:AB:73:B3:33:6D:9E:17:62:F1:C2:07:45:B0:1B
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 019D2703F9E41962D5E871E79821D6C8D208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: 1gkbEf/FCsetdxRdbE/4u0FNHw7OKUSV/Tq8X47X4Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f9:e4:19:62:d5:e8:71:e7:98:21:d6:c8:d2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=10b18c91ad31ab73b3336d9e1762f1c20745b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:f3:3c:9b:8b:6e:55:a5:b0:5f:f9:a9:3f:
fa:50:12:9b:b4:62:76:b5:75:0a:d6:51:7c:c5:cb:
f2:b3:9c:93:cd:f3:11:d2:1a:92:f7:35:fd:30:63:
0f:8d:ae:88:e7:27:8a:fc:c4:de:d6:3d:67:18:38:
99:fc:7a:66:4e:89:d4:01:40:46:48:6d:67:81:bf:
1c:4c:d9:56:f4:fc:2c:c8:38:72:91:fc:8f:35:a1:
9e:d0:26:82:66:32:a1:5d:a8:da:1f:54:7b:10:47:
bf:00:7f:48:61:d3:de:ab:cc:d5:0b:fa:a5:22:89:
27:85:61:ee:ed:a1:f3:cd:a3:8c:82:de:32:f2:a0:
f9:8a:b4:f8:ca:57:e5:e6:be:4c:1a:eb:39:00:04:
0b:a4:a3:f1:c0:53:74:2a:78:d8:45:30:e1:6b:2f:
69:20:c8:bc:7f:92:5f:32:9c:6e:0f:3c:43:4c:e3:
d2:55:cd:ce:a7:4d:a7:e2:7f:36:e0:06:2d:fe:42:
8a:f2:04:4a:c8:3c:de:86:7f:bb:56:05:85:32:07:
7f:a0:02:42:2c:af:b9:63:7f:83:3d:50:b5:28:34:
d4:86:fc:c3:bf:3c:1c:cb:b9:9e:6a:74:54:eb:78:
e0:08:c2:38:12:4e:52:e7:5a:1b:e6:b9:dc:22:42:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:8C:91:AD:31:AB:73:B3:33:6D:9E:17:62:F1:C2:07:45:B0:1B
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:d4:22:90:36:d1:28:68:64:44:f6:cf:31:4a:ed:9f:1c:
76:42:d7:df:b0:10:de:7a:61:fe:40:58:29:37:4b:44:e5:61:
a0:8d:be:70:a0:6f:e4:62:6e:47:4e:95:0a:9b:a4:68:6d:be:
e4:fc:17:71:ef:e4:ba:0a:35:a6:49:1d:04:b5:2e:c6:92:43:
de:c3:a9:2e:ed:de:cb:c2:57:8d:01:1c:e8:ce:fe:24:c5:e6:
8d:6a:a5:ce:0e:a6:95:fa:91:d1:db:31:18:3b:87:3c:df:c0:
d7:f9:c0:74:9b:08:b2:c9:40:00:08:c2:a2:b7:1e:ac:75:b3:
eb:76:6a:fc:ea:b2:4f:21:fe:0c:13:60:79:a2:5b:6a:5d:50:
f6:d0:a2:7a:84:aa:a2:a0:01:da:53:25:d4:42:5f:18:d1:40:
d1:7f:65:0a:68:37:f9:94:2b:af:05:58:9a:14:f8:7b:25:68:
72:9f:a8:2e:77:d0:e1:c8:55:3f:14:8c:e2:c6:87:cb:07:eb:
ea:95:0b:23:44:ac:49:2d:87:ab:d5:5c:8a:61:b8:2e:32:f8:
54:d7:24:b6:8c:b5:34:a9:25:62:25:b6:e2:76:57:6a:60:4a:
71:82:00:bc:fb:f0:df:07:11:9c:a9:f1:83:b1:71:a7:da:65:
e9:f8:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:25 2026 by rpki-client