Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: zgRNvB7ZCErp+U+Ilgfech5HihWgbR40uYiEc4usnr0=
Subject key identifier: 3B:0D:49:5E:FC:7E:B0:F3:12:CF:2C:14:7B:1F:32:C0:75:4C:F8:E6
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019D26CD806D06FA8AE0217BE710E9AF9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0C27
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: mTK4OPRFmYpCXqXpTwmChS88WWEMw/iaITOSrqo0KXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:80:6d:06:fa:8a:e0:21:7b:e7:10:e9:af:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=3b0d495efc7eb0f312cf2c147b1f32c0754cf8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:b9:98:3d:0f:da:08:00:e3:ef:53:dd:16:
3a:c0:9a:21:db:bc:bc:38:f3:94:11:20:6d:b5:1c:
46:34:e8:6e:c1:90:54:1b:78:1c:47:90:8f:87:dd:
6d:04:6d:cb:0c:41:25:71:0a:ba:21:02:ac:6d:23:
e5:3e:02:b6:ca:9a:25:9d:72:d6:6f:9d:6c:44:90:
60:29:da:4d:24:96:56:df:2d:62:44:fc:af:0c:48:
10:9c:79:06:a7:2b:22:67:9d:25:c1:aa:e1:b9:8d:
eb:ce:30:8d:bb:98:7c:28:9a:86:14:2d:e6:26:17:
ad:9a:d4:c3:ea:be:95:18:02:12:09:a8:d8:2c:c8:
b6:63:71:02:38:4b:e7:97:45:42:00:19:b1:d9:e5:
5a:6a:d3:52:b3:22:65:3c:74:7a:6d:a3:8f:72:03:
9e:9a:06:25:08:d5:28:8f:34:56:2a:94:aa:34:63:
53:85:e9:84:7e:21:cb:a7:e7:d6:aa:73:64:f2:f2:
57:fe:6d:e1:e4:2f:1a:ec:85:b1:8f:28:0d:44:4f:
fd:84:3b:22:b7:31:31:ac:f8:48:5b:4b:60:b5:d6:
e4:78:2f:b9:1f:88:4c:e6:87:b8:43:f4:10:1c:37:
6a:8a:5f:bf:8d:e8:8d:4b:b2:75:2c:19:51:35:24:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0D:49:5E:FC:7E:B0:F3:12:CF:2C:14:7B:1F:32:C0:75:4C:F8:E6
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:85:71:f2:87:19:a8:b6:47:b8:70:26:7f:54:a0:08:b8:45:
6c:44:66:60:3e:cb:8e:be:4a:6a:8d:c5:a3:8c:20:8a:6e:d3:
82:4f:8b:61:65:3b:91:d2:d6:ef:ba:19:2a:21:83:ab:85:b6:
ae:0a:a1:9f:3e:32:0f:56:4a:6c:6f:f3:92:57:c6:93:27:91:
f1:4f:2c:8f:91:22:0c:9f:6a:20:be:c0:38:6f:9a:dc:c4:6e:
05:a9:55:5e:57:61:10:7a:8d:54:46:7e:6e:b3:f5:1c:d5:9a:
51:34:79:e9:b0:ab:86:4c:f4:66:92:7b:8d:c5:8c:dc:df:8e:
89:d0:ee:25:91:d8:c2:14:ef:75:48:3f:ef:f4:91:51:ca:9c:
b5:c7:9e:1d:5c:c4:2f:86:f5:7e:c1:44:89:5a:99:32:98:17:
03:ec:d7:c8:f8:33:7f:4f:be:36:f7:6c:a1:df:04:8f:15:4c:
12:98:28:ee:ef:10:2d:63:5e:ff:36:af:99:11:c5:7b:10:66:
83:d0:c5:90:97:c4:96:b2:be:f9:3f:c2:2b:2e:a0:f9:89:16:
1d:7e:07:f3:49:b4:3c:4b:f0:70:1d:90:15:6f:ac:42:ba:95:
1f:3e:e6:73:d1:0e:46:4b:2d:8d:47:82:93:d7:ef:09:7c:7c:
aa:8d:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:47 2026 by rpki-client