Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: mhwYvB/dY+Cu7azCG1p25GsY7Hd0HwfGLKk0AF3n/W4=
Subject key identifier: 42:12:8C:D8:0D:A0:F0:3C:08:EF:05:2A:7F:E9:FD:80:67:05:EF:FC
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019D38669C59DE77C7597E55DB132E7AB397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0F48
Signing time: Sun 29 Mar 2026 07:02:21 +0000
Manifest this update: Sun 29 Mar 2026 07:02:21 +0000
Manifest next update: Mon 30 Mar 2026 07:02:21 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: kC1S7zCbTfWawovIpslUyuhXsoMxyth16PY8BZL3llw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9c:59:de:77:c7:59:7e:55:db:13:2e:7a:b3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Mar 29 07:02:21 2026 GMT
Not After : Mar 30 07:02:21 2026 GMT
Subject: CN=42128cd80da0f03c08ef052a7fe9fd806705effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:cd:d5:6d:1a:f5:bb:5c:f9:bd:46:ec:48:
b4:7c:65:29:01:17:01:4c:b3:b6:76:e4:f6:41:8b:
92:b1:a6:5d:36:01:7b:5a:69:99:e6:d0:9d:97:dd:
11:aa:b6:0d:42:98:39:b2:c5:18:c8:dc:f2:09:83:
db:de:d2:8d:1e:68:b5:da:ff:32:41:fc:dc:f6:3b:
13:7c:06:1d:27:76:7c:4b:b3:48:b0:24:17:bf:c1:
03:5c:ed:1c:92:b9:0e:e2:57:f7:6a:cf:2a:46:e0:
66:14:ab:97:78:78:19:ab:0b:6c:3c:ed:6c:aa:f3:
c1:80:9f:52:f3:29:81:ac:2a:54:6e:5b:81:4e:4c:
cb:93:be:d8:65:36:03:65:a7:8f:7d:8e:d0:f5:08:
9e:a5:54:0f:96:86:cf:42:5c:88:39:eb:d7:cd:b6:
11:05:42:9e:23:78:12:20:bc:7f:30:c6:2a:f2:33:
6d:59:2d:b9:67:2b:58:9f:09:a3:62:66:a0:d4:f3:
ed:eb:e8:5e:2e:d7:3a:66:74:18:26:b2:d4:be:03:
0a:6c:65:61:aa:3b:55:11:a8:8d:95:23:7a:17:bc:
e4:c3:ab:53:d9:c4:3d:f2:c9:2c:22:cb:97:18:7b:
92:de:73:50:92:9b:1e:10:fa:4e:42:06:89:92:99:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:8C:D8:0D:A0:F0:3C:08:EF:05:2A:7F:E9:FD:80:67:05:EF:FC
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:3d:81:59:4c:a4:ad:ef:d4:6c:40:90:c6:19:6c:e9:c1:
6d:16:01:84:01:bc:e0:50:40:6e:e2:4b:99:49:e0:52:81:2f:
66:50:f1:a5:c0:6f:5b:89:b7:23:c3:3b:1b:1d:cf:28:f0:4e:
26:57:e7:1e:70:b5:e3:ec:20:7d:03:9a:c3:33:52:74:5a:d2:
9f:c1:a8:f7:d1:df:aa:69:5f:31:be:75:52:3d:ee:26:56:fe:
c9:11:bb:11:4b:78:b7:70:d7:82:67:00:3d:42:38:e1:d7:43:
ae:61:54:4a:f7:54:39:fe:35:18:ed:44:22:d2:db:b4:14:b7:
da:b5:ad:26:f7:3a:6a:c7:08:f3:96:01:cb:a7:bd:7c:05:6c:
7b:fc:6b:eb:f4:0a:61:d9:65:31:9f:6f:44:ee:75:20:64:25:
88:ee:79:68:5b:a5:3c:a8:49:59:7e:f7:41:af:82:2c:00:a7:
74:2c:da:83:a5:e4:11:42:f6:7a:ec:ce:55:74:ae:b7:87:0b:
f5:8a:3a:5a:5f:33:1a:20:02:42:52:20:44:7d:e5:9e:a5:57:
db:8a:08:01:f8:c9:9b:e6:fa:58:4e:fe:e8:ba:ce:92:60:2c:
32:da:cf:a1:fd:55:c9:09:f3:12:34:4a:2c:4d:23:29:d1:39:
f7:73:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:31 2026 by rpki-client