Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
File: aaX4To643Eyfm9j9rug-yK9uAl4.mft (raw, json)
Hash identifier: BVmmmz8nJH0SCEDOTwJLXSzpnFKFe0WrWwa5PLHYYYY=
Subject key identifier: 29:D6:E1:9C:44:F4:10:AC:87:90:CE:A7:49:AC:F9:0C:50:9B:9A:F4
Authority key identifier: 69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
Certificate issuer: /CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Certificate serial: 019D389C3FE02B16F96A8ADE650059F82F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: aaX4To643Eyfm9j9rug-yK9uAl4.crl (hash: 8CPYDBqD7RNJh2D5hMpMWSfYbw32khbCJrwZjt5heZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3f:e0:2b:16:f9:6a:8a:de:65:00:59:f8:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=29d6e19c44f410ac8790cea749acf90c509b9af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:65:16:f5:8e:9e:0d:b3:75:55:64:53:af:
71:89:6b:0b:0f:6e:7b:ea:48:fa:ac:39:9a:b3:37:
b4:d9:b7:f5:90:ef:3e:a0:1a:b3:54:37:61:ed:72:
e2:a7:b0:72:52:e8:47:75:1d:7d:67:12:46:26:1b:
c4:d8:53:85:e1:99:3b:32:04:bd:60:aa:94:c8:a8:
5e:51:ec:42:54:b3:94:ed:6d:f1:a0:2e:ca:1a:20:
4a:c8:52:25:98:47:19:08:16:fc:f9:b1:7a:e3:9d:
f4:98:b4:3c:3c:00:71:92:4d:3e:3c:04:a8:1e:6a:
d0:1b:29:99:e1:2a:b6:d1:24:05:83:40:7e:a2:40:
df:f5:71:51:10:ec:7f:c2:90:a4:63:a1:1a:d4:d7:
62:e4:18:be:87:58:ab:03:fd:ad:a4:83:7b:09:23:
1c:0a:3e:53:49:bd:fc:51:8c:4b:aa:2a:66:96:5d:
e5:d1:3d:26:04:bd:84:ce:37:99:67:a2:c4:0e:f8:
0d:31:15:24:8b:76:72:c1:c9:0e:6f:41:ea:01:f5:
ed:a1:68:3b:ee:49:dc:f0:e5:7e:43:65:75:14:c3:
73:f2:50:f2:19:35:6a:a0:3d:07:85:47:00:75:94:
52:2f:da:2e:e5:18:f6:d0:38:1c:7e:b6:3b:80:70:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:E1:9C:44:F4:10:AC:87:90:CE:A7:49:AC:F9:0C:50:9B:9A:F4
X509v3 Authority Key Identifier:
keyid:69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:03:f3:1d:b8:59:0b:ac:ce:6d:ee:f0:55:da:9b:bc:c6:
98:f1:00:20:ba:a3:a2:da:68:f7:96:fc:9f:a4:c4:00:ba:44:
d7:c5:69:1a:cb:33:6c:c9:83:07:c2:97:78:ef:38:4e:5a:ec:
79:1f:ab:ac:1f:0f:91:76:a4:31:49:03:6d:29:77:f2:c7:6e:
6e:ef:a7:11:e3:d3:49:f4:cf:1e:f6:16:a1:29:c2:2c:38:1d:
66:b8:b7:41:c0:8f:76:de:e4:83:bc:77:01:a8:f1:eb:6e:29:
b3:2e:90:59:d5:8d:c9:9d:df:2a:11:60:2f:45:95:0a:4d:93:
43:ca:3c:62:ba:5e:0c:83:4b:e0:0c:15:ed:9c:df:e7:f7:ae:
86:26:0d:ab:4f:f2:8f:2f:2d:fe:20:6c:96:83:5a:aa:23:0b:
83:46:91:0a:b2:6e:a9:01:55:a3:e8:e3:ef:60:a5:28:6e:eb:
4f:35:79:55:6b:d1:7a:04:24:b8:b6:db:7b:fe:de:00:12:33:
19:7f:dc:54:cd:c8:cd:22:c3:cd:48:80:e0:f4:89:a6:45:54:
79:a9:87:45:b9:4c:2d:e7:c5:08:11:de:fe:73:79:ae:2a:3d:
6f:31:68:79:47:0e:1d:cc:af:7a:27:80:b7:86:e8:d4:99:c2:
8f:f3:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:32 2026 by rpki-client