Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
File: aUSJSM9NjazkdxjA9yWe3usJPns.mft (raw, json)
Hash identifier: HCTsQB2XVyidu5vhGR9F2COtjcNX4lcQZsvZKNnJgmU=
Subject key identifier: 7E:2B:E3:D3:51:A7:CA:96:5D:5A:DF:66:1D:F5:67:D7:2C:2B:4F:5A
Authority key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
Certificate issuer: /CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Certificate serial: 019D37C049E77B208D515952A0BA77708160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: aUSJSM9NjazkdxjA9yWe3usJPns.crl (hash: 7L1Rdu5o3Ny3KkaDXYkV8qp/d9jcywOYDZrXeh660mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:49:e7:7b:20:8d:51:59:52:a0:ba:77:70:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=7e2be3d351a7ca965d5adf661df567d72c2b4f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:b4:2d:af:28:d2:24:8d:85:b7:fd:7d:56:
f7:d0:5a:b9:8f:58:6f:d2:5e:d5:54:ca:5e:ea:1f:
cc:c1:41:3f:c4:2f:80:30:8a:d9:47:cf:d3:03:6f:
77:85:78:60:7c:81:76:0c:2f:5d:58:5c:f9:90:6d:
06:f6:b9:92:55:04:15:86:bd:20:e0:71:e7:55:3a:
fe:7b:60:19:c7:37:48:cd:e8:1a:26:ac:90:19:39:
cc:46:75:70:fb:e8:da:57:24:59:c9:d0:e3:62:c9:
66:02:23:e6:c0:e1:b7:6d:57:30:b0:b8:ab:5c:4c:
0a:6f:0a:cd:a0:29:5d:ba:98:a6:8f:de:78:14:b9:
5f:78:67:1d:82:55:21:5d:66:a1:93:95:19:08:b1:
70:1e:c3:76:e4:65:9c:b5:32:c9:85:74:03:25:b3:
38:e8:48:fd:31:be:c1:c3:ee:e4:e4:d7:4b:92:6b:
b3:6a:b7:8c:66:cb:38:d5:aa:62:02:11:13:a2:82:
63:6b:d0:e9:f6:07:e7:6a:35:a3:0c:b7:fb:4e:c8:
e5:5e:9e:79:d8:76:3f:f7:07:19:f9:c7:cd:92:ee:
23:2c:28:31:bb:a3:53:f2:a8:f8:ae:02:7f:0c:c4:
6c:e6:e8:b5:dd:af:4e:5a:48:70:a2:49:50:f6:0a:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:E3:D3:51:A7:CA:96:5D:5A:DF:66:1D:F5:67:D7:2C:2B:4F:5A
X509v3 Authority Key Identifier:
keyid:69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:21:65:d7:76:b5:72:a2:bc:87:28:60:89:bd:11:10:03:
42:a5:28:2d:40:e2:bb:fd:21:e5:68:b1:62:39:14:30:cd:b6:
cd:9b:72:56:9e:10:a5:83:e5:1f:df:f3:2d:dd:a2:a8:f1:00:
b7:fb:cc:86:01:57:7f:b9:24:34:38:fc:75:cb:59:b9:4d:2d:
22:4e:f3:3e:3a:f4:8d:ff:b1:86:cd:20:68:19:4d:aa:92:a3:
b7:3c:15:9f:f3:ac:fe:65:50:3a:06:21:fa:a0:6e:8a:a2:46:
dc:e9:1e:5a:5b:43:09:67:a8:cc:5e:09:fe:5a:4b:77:c2:e6:
e7:1d:9b:61:5f:d0:b3:2b:a2:f3:7b:84:61:a1:2e:0f:5d:8c:
a1:c4:2f:2f:5a:aa:40:36:a9:e0:a9:8b:67:c3:e8:b2:7b:c4:
4b:ae:6d:5c:7f:11:88:a1:ab:0a:91:b6:60:27:62:87:2e:6c:
35:d0:c5:ba:cf:34:6f:19:5b:0a:58:ac:29:15:0c:bf:5c:44:
16:2d:e1:dd:34:bd:71:bc:52:79:25:81:7d:56:25:bf:ac:31:
d8:a3:f9:92:5c:b8:ae:71:87:be:54:8d:7c:2f:61:b1:b7:c8:
6e:fe:bf:99:46:f9:f3:07:dd:e6:60:ed:c6:1e:38:29:11:32:
62:8c:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:45 2026 by rpki-client