Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: 6QkwcXTxKSlq2Q6M0v5E6Ib6wjf9fRQY6x0XACy6+Mc=
Subject key identifier: 12:30:90:2F:D6:3C:8C:E0:F9:E9:D6:F7:FE:5F:6A:70:89:DA:96:CC
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 019D38D3486902A0289532865D78F25A46B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 0A98
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: r9uNZBZuFEOHsjKYEYobDD/q7Zpzz0QOrQw6lYsIR3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:48:69:02:a0:28:95:32:86:5d:78:f2:5a:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=1230902fd63c8ce0f9e9d6f7fe5f6a7089da96cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:45:39:15:2a:aa:a7:08:65:e0:28:dd:2c:
f4:2f:1d:77:6f:0e:be:91:0b:58:8d:d7:49:df:77:
b5:2b:0f:e2:a4:de:14:78:8e:cf:31:62:ae:44:6c:
f8:7b:45:c4:10:21:5f:dc:61:f4:19:84:32:21:bc:
03:a4:62:c8:1e:71:b7:26:8b:f7:62:7b:4d:46:fe:
2b:13:e5:34:4e:8f:f9:df:40:21:7a:33:4b:0d:bc:
1a:b4:b5:58:61:4f:ba:02:fb:ae:7f:d0:4a:9e:23:
7e:94:77:d4:03:45:fc:ac:db:00:9b:0c:d4:4c:38:
21:1e:e5:53:8d:30:7e:57:7e:50:84:32:76:df:46:
88:2b:14:6b:0f:5d:ca:b6:d7:80:37:32:7e:ae:cd:
4c:a2:54:d0:0e:f5:82:07:38:3a:4b:63:72:16:4e:
55:31:eb:10:9b:75:e1:d3:90:5e:c0:1e:e4:3c:54:
0b:36:35:4e:57:18:5a:8d:6d:1a:85:55:4f:ec:98:
47:64:e5:28:6d:7f:c6:dd:59:9d:10:fe:ca:c4:12:
a1:14:90:af:c9:aa:fd:1e:0c:de:c1:3f:4c:ba:2e:
bf:6c:64:b7:a0:3e:5c:d9:43:2b:93:47:98:4a:3f:
59:bf:8b:2f:fb:1f:03:4c:f6:2c:33:ac:d0:06:8d:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:90:2F:D6:3C:8C:E0:F9:E9:D6:F7:FE:5F:6A:70:89:DA:96:CC
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:16:a1:bf:8f:fb:d8:5c:f5:23:5d:58:7d:c2:04:a2:f0:
35:5b:7d:4e:bb:9b:3d:04:65:e6:66:a3:1c:a0:27:3c:7f:e0:
80:7b:e4:6e:7b:28:bb:71:1e:ff:50:40:e9:ad:65:bf:c8:e6:
63:f0:ae:c0:3d:d7:99:3c:73:65:88:2a:6b:02:57:15:7e:45:
53:7e:20:ab:4b:d9:b2:2b:ed:b1:05:68:57:95:ae:a4:f1:8b:
c7:76:3a:5c:96:55:26:46:c7:2a:33:02:eb:5b:3d:05:1d:31:
db:ca:64:9d:de:36:0e:53:bb:aa:d4:b2:77:d6:7f:81:2e:ee:
2a:75:5d:96:65:cc:f6:0f:29:b7:d5:f2:1b:66:9c:ba:78:a0:
c4:eb:1e:aa:ca:f1:20:54:d4:1d:ea:dd:6d:39:ff:96:0a:db:
3e:93:69:d6:d3:56:67:20:d2:8f:02:a5:87:d6:a5:f3:1f:b2:
a0:e6:2d:1a:b5:9c:92:c6:d6:5f:f8:8b:d7:c6:30:86:f2:3c:
fc:ff:01:f3:ae:9c:83:42:b1:5e:05:e5:1a:3d:e8:fd:36:d1:
9d:d0:77:a8:e5:56:61:60:85:61:4b:a7:88:14:33:f2:68:72:
5d:a4:0c:07:72:d5:87:fb:89:6e:fd:53:4a:97:87:2b:14:c1:
1e:96:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:26 2026 by rpki-client