Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: IKa3+21KiASGuflH6CG6vLugGCZzDWIWXu0UxRhLvkQ=
Subject key identifier: 13:88:0D:19:44:48:1D:97:ED:C4:B3:4F:57:35:B8:96:B0:8D:A9:47
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 019D38D39A7B543EB6FDB9092C8D472D1968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: UxQ3HVuhiYreWXtNHGbJBJ52a1VCq2e12k0Bg3GLw0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9a:7b:54:3e:b6:fd:b9:09:2c:8d:47:2d:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=13880d1944481d97edc4b34f5735b896b08da947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:20:cc:d8:99:6f:7a:26:06:fc:74:60:a2:
ee:8f:31:e2:94:7e:7f:da:a5:dd:3c:bb:16:ef:83:
80:e1:8b:c1:9d:08:8c:0a:4a:52:27:de:7f:12:13:
fe:1e:75:a1:33:d4:0b:d9:d8:7f:0c:38:f1:26:3c:
b4:23:24:c2:a6:b6:c4:9d:cc:e2:07:cd:b7:42:dc:
0d:0d:de:66:90:cf:69:c3:e3:77:81:ef:5d:5b:27:
08:53:7b:50:bb:f0:44:0c:0e:63:d3:bb:01:0c:3f:
d7:01:95:a4:b2:bd:27:bf:90:c2:41:bf:7b:05:b2:
39:61:7d:8a:40:17:92:05:22:8d:54:6d:72:40:e2:
67:be:e9:09:3b:e9:63:1a:71:ab:09:a7:2d:fb:7b:
d1:32:c1:f7:f5:d7:94:39:d5:24:10:5b:b6:ca:96:
87:97:3a:27:5c:28:f1:ff:e5:11:94:a4:5c:f7:66:
79:32:a5:6b:5d:ae:e0:0f:30:e1:0e:9c:73:1d:c0:
a1:13:5f:72:3a:d6:fb:a3:fa:62:19:d2:1d:a9:dc:
56:b1:10:b8:4a:83:6c:29:a3:91:6a:3f:02:a7:36:
bf:f8:96:73:7c:0b:63:e9:c0:59:b4:85:dc:88:90:
e3:8b:09:e1:ee:ee:7b:1e:1a:8b:df:b2:2b:cd:b1:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:0D:19:44:48:1D:97:ED:C4:B3:4F:57:35:B8:96:B0:8D:A9:47
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:dd:8d:58:19:76:b9:e2:7c:c6:07:2e:33:39:0f:c1:01:
8f:be:a8:58:4a:60:85:c9:b3:e1:da:5d:3f:81:91:07:be:1b:
18:75:3d:2c:f5:9d:35:92:5f:bf:d6:0c:80:fd:fb:e4:e8:ba:
f7:08:da:1c:c6:76:c3:d9:a2:f3:74:c7:28:2a:19:96:04:ef:
6c:1f:08:ce:5d:e1:6e:57:8a:2f:52:1c:0e:6a:ae:b3:d5:23:
79:0b:eb:92:f5:48:28:dd:9a:64:7a:11:02:9e:c4:7f:42:71:
ff:a7:08:a4:b3:12:ec:1e:15:41:bd:c1:59:cf:61:48:30:7b:
f5:db:26:65:dd:40:13:f7:e7:e8:b5:9d:3e:d7:1a:21:37:d1:
02:c8:22:61:e2:6d:19:d1:b9:15:71:7e:94:a6:fa:10:62:18:
f8:b8:a7:80:0a:e1:dc:0b:a3:cf:4b:75:ac:5d:47:7b:48:72:
7a:22:11:da:87:42:4c:e7:55:42:86:fb:e6:8b:26:fe:30:c3:
d1:14:a0:ea:24:7b:4d:eb:b2:79:b6:fa:fb:c8:81:f2:0e:99:
43:16:88:8d:2d:6c:e7:a8:3b:ac:e9:16:7d:a1:e9:b2:1f:bc:
7b:25:a5:2e:1b:82:ae:a1:e5:27:f5:a1:cd:36:2f:25:8e:52:
fc:2d:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:04 2026 by rpki-client