Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: 4/J+MSIRQB3EQqmH/gfXihkUzAi7IqnalBdja6Kcybs=
Subject key identifier: 20:66:AA:63:0C:ED:91:27:02:00:FB:1D:2C:F2:CA:A1:7D:34:AC:8E
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 019D38D380E725AF224F2BE6AC6B6D7EB710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 0711
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: cfsk8xag3zGPcrVyG1/fJ6nc4lwj7PRtv6vI/0A9aZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:80:e7:25:af:22:4f:2b:e6:ac:6b:6d:7e:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=2066aa630ced91270200fb1d2cf2caa17d34ac8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:2e:d3:d5:50:92:7c:aa:32:93:42:d7:3a:
3b:aa:9a:04:43:fd:03:bd:6b:90:80:32:ea:f0:f2:
96:ce:77:11:ec:36:17:86:50:f6:d7:e5:00:dd:dd:
8e:ef:fc:44:62:67:87:3f:38:cb:e7:3b:3a:cb:88:
00:0d:8c:33:d3:a7:3b:8b:e9:53:79:62:65:af:86:
8a:fd:0c:f3:dc:96:57:9b:90:b1:ae:0c:c1:a2:6b:
b1:af:45:00:9a:a2:54:8e:5c:e8:7a:82:be:3c:03:
85:1f:12:dc:16:5f:cb:95:42:7f:2e:96:75:59:f8:
6f:2f:80:74:99:f9:eb:41:09:95:af:18:ac:69:b5:
87:f0:a8:35:ff:11:e5:71:64:44:b9:a8:cd:4d:69:
d9:fa:57:67:d8:74:eb:6b:d4:51:47:96:b3:ae:7d:
88:d0:26:6f:da:e6:59:8e:84:6a:95:1c:40:f1:c5:
e8:52:dc:ef:f2:e3:a2:52:a0:c1:23:45:01:14:19:
8c:da:e8:8f:d2:0c:0a:f3:e6:0e:9c:d2:11:b0:00:
d1:bd:65:39:66:28:56:37:ec:9f:df:c9:30:d9:d9:
57:bc:59:0e:34:e8:a9:25:5a:e2:84:97:4c:cb:04:
7f:36:de:99:39:de:78:63:45:d4:03:75:17:58:01:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:AA:63:0C:ED:91:27:02:00:FB:1D:2C:F2:CA:A1:7D:34:AC:8E
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:10:16:4f:26:ff:e3:06:6c:3e:5b:f7:fb:3e:bf:37:e7:
8b:6e:b8:76:c5:eb:3b:82:b9:61:5a:f9:a0:05:48:f3:64:3f:
71:9b:79:02:ea:90:e6:f9:26:3e:bc:aa:5c:7b:70:0a:80:b1:
5c:19:bb:49:5a:31:92:bf:61:d3:da:74:71:ad:c5:cb:50:15:
7f:0f:12:fe:5d:26:8f:4f:3e:f1:a6:a8:96:9b:90:ef:99:08:
77:39:52:cb:4f:24:ee:28:76:e1:6e:b6:97:24:e3:32:1f:24:
df:d3:8d:77:94:b2:87:bb:b9:53:b6:cb:7f:3c:d7:79:0e:a1:
f0:1d:9f:1a:95:b2:13:c0:20:95:a9:4b:3d:3a:28:5f:5c:35:
50:0c:4d:7a:b4:1c:e3:0d:fd:26:27:f0:17:60:94:3c:6d:3d:
c3:1b:b3:2b:fc:66:1f:c0:7c:b2:98:b4:1c:87:32:10:0d:18:
9f:5a:49:5c:95:8d:ae:80:b9:18:12:b6:17:22:56:61:cd:97:
ab:20:50:94:c0:53:15:96:49:0d:c0:64:76:93:7b:42:67:81:
bd:6d:2a:4d:5e:c3:c2:ce:77:1d:df:84:0b:57:b3:60:e1:31:
60:d3:77:d3:fb:51:39:34:df:88:bc:1a:c9:80:81:da:db:b7:
09:f8:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:37 2026 by rpki-client