Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: Li4dgZ3hshLurDgp+EGWOjR+8KmRO2qerlY5R74N3WY=
Subject key identifier: F2:AC:50:10:0A:0A:45:20:C2:E1:78:19:A9:D2:AF:97:7F:69:5F:00
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 019CE447B7081FA280F593944DED3D53771C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 05B2
Signing time: Thu 12 Mar 2026 23:00:30 +0000
Manifest this update: Thu 12 Mar 2026 23:00:30 +0000
Manifest next update: Fri 13 Mar 2026 23:00:30 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: e0N3cW8KAPbYqU4YuYtJMuRIHqKFQEHExyvfF7KiQuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:b7:08:1f:a2:80:f5:93:94:4d:ed:3d:53:77:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Mar 12 23:00:30 2026 GMT
Not After : Mar 13 23:00:30 2026 GMT
Subject: CN=f2ac50100a0a4520c2e17819a9d2af977f695f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:5d:9a:c6:14:08:11:95:30:03:36:5f:59:
27:e7:b9:c9:1e:87:a5:1f:ab:7d:0c:73:10:4d:8a:
00:be:c6:fb:4e:f4:9f:bd:bb:22:20:37:d6:e2:92:
44:e9:60:07:a7:48:62:e0:ab:d5:04:73:f4:de:4d:
45:ef:cc:4f:88:6a:0d:bb:f9:31:29:2f:8f:d2:17:
7c:5d:d1:9e:98:5c:03:49:52:13:18:4a:56:ea:9d:
74:56:37:79:ff:b6:1d:3c:4d:53:cd:62:fc:a5:a1:
8b:b9:29:60:31:d3:d7:ed:62:2c:d2:1d:9f:f5:41:
05:4a:29:07:df:4a:d4:c4:b1:aa:a4:64:3d:f8:af:
5e:f2:69:95:e0:14:77:b4:b0:8a:fb:d5:0c:5b:51:
38:47:82:10:d5:6b:9b:a9:49:9d:38:95:2b:a9:79:
e8:50:4a:cd:56:4f:5c:53:e5:c0:d8:b5:be:b3:59:
74:df:73:72:e7:7f:e2:24:8b:9e:e4:cd:68:34:2b:
b4:36:3d:d5:86:cc:76:c9:e4:12:16:cf:e5:b3:6f:
5b:af:a0:dd:c5:f0:a2:ac:2f:2d:ee:41:5d:d5:2b:
ab:a3:71:a0:59:12:25:6f:5f:d4:17:60:ee:c9:fd:
3e:63:19:76:c9:36:1a:96:a6:45:ac:11:59:78:9d:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AC:50:10:0A:0A:45:20:C2:E1:78:19:A9:D2:AF:97:7F:69:5F:00
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0c:1e:64:0f:98:7a:aa:b3:27:16:fa:ba:82:6e:b0:74:a1:
6e:4d:d6:7a:61:8a:b4:58:a3:97:80:1d:7e:33:db:d5:fb:08:
ce:c1:e2:49:62:d4:f2:42:1b:ec:69:1a:aa:99:22:a4:a1:47:
21:73:45:b5:19:3d:35:62:8f:80:1c:7d:bd:c7:ea:45:a1:2e:
3c:62:85:e0:24:b3:f2:70:f1:ff:b0:4e:a2:a9:a4:d2:a2:57:
0e:01:88:3c:be:41:cd:69:7d:b7:ea:6d:59:57:84:27:14:0b:
da:05:6d:9b:ec:54:6c:8d:15:47:6e:22:b7:e6:dd:23:22:2b:
6b:84:4e:d9:56:e4:50:a8:df:dd:23:3a:30:e9:88:b4:38:43:
8a:c3:02:a6:20:33:d1:c2:a0:1a:b5:7b:da:40:88:24:eb:83:
68:4f:f9:1a:f8:21:d7:bd:01:74:5b:0f:45:00:5c:68:47:06:
24:89:6f:d0:b5:d9:e4:33:2f:6f:c7:58:2d:a2:2e:42:95:61:
94:13:fd:0b:0f:b2:8b:87:f5:28:80:ed:8b:19:f9:f3:13:ae:
66:98:4b:ad:c1:ff:71:16:f0:e7:14:0c:85:b9:07:aa:f8:7c:
77:a7:5f:57:da:86:13:65:c2:7d:07:a2:8d:1f:bf:8b:33:d7:
42:c9:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:04 2026 by rpki-client