Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
File: rryO4V1QIdy_qgXKGDil4KyLfaA.mft (raw, json)
Hash identifier: waQDjVPiA2QuXib4doE8BvU7JXiCPMO3BOoitPPXXPQ=
Subject key identifier: D4:4C:B1:37:23:83:9B:FF:C8:3F:21:60:FE:3A:CC:EA:51:57:C3:15
Authority key identifier: AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0
Certificate issuer: /CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0
Certificate serial: 019D389C5E82856D2F4CEBD870868ED7838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
Manifest number: 0162
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: rryO4V1QIdy_qgXKGDil4KyLfaA.crl (hash: VHgxLnj8ZNUksRAv+ItSY4kHSjekqThuOtaF9heng+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5e:82:85:6d:2f:4c:eb:d8:70:86:8e:d7:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=d44cb13723839bffc83f2160fe3accea5157c315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:ed:59:61:32:92:8e:9d:af:32:6a:63:d1:
30:75:1b:79:4f:ab:e0:78:5a:4c:40:72:0b:cd:2f:
db:9e:91:2f:e1:70:03:f7:26:c3:57:1b:d2:3c:ce:
77:70:e0:e0:55:e7:80:87:3a:4a:33:65:69:1f:98:
cf:dd:3b:ab:c8:1b:ee:5f:d2:d8:9b:1c:b8:e0:87:
12:14:b4:fe:88:66:35:77:fc:b2:f6:8c:2a:57:79:
e9:cd:a4:94:d4:f2:56:76:47:0a:b1:54:61:cf:b7:
10:b6:10:f6:49:05:78:bc:65:1a:c6:97:76:21:0a:
0c:e0:ff:3f:a5:ad:6a:7b:18:58:49:80:fd:cc:18:
69:5d:7e:52:1f:66:d3:54:b6:50:34:45:ea:ad:53:
55:a6:a5:7a:27:a4:b9:73:a9:1c:af:2f:12:05:4c:
5d:30:7a:23:b0:ac:7f:11:17:77:35:de:4a:e7:4c:
4c:8f:89:fa:ef:67:81:0b:77:f1:3f:1d:46:f9:7c:
c0:32:46:11:b3:7f:66:85:2f:58:14:97:01:97:e1:
c1:69:5c:fe:16:8a:b4:55:86:63:88:f0:80:34:24:
e0:ff:ef:fb:12:bd:1d:80:5b:27:fd:43:47:04:71:
da:ec:c9:25:a7:1c:30:bc:72:ac:ef:17:ef:11:5a:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:B1:37:23:83:9B:FF:C8:3F:21:60:FE:3A:CC:EA:51:57:C3:15
X509v3 Authority Key Identifier:
keyid:AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:a9:05:ab:30:15:28:39:10:ab:eb:9c:ea:ae:0c:a3:51:
cf:97:56:a4:a9:84:03:88:db:a7:8c:e4:21:ec:ea:66:1f:d8:
d8:dd:86:a1:f2:53:a4:bc:47:84:e8:66:cf:11:13:7c:94:4d:
1d:67:a7:27:8e:1f:6a:78:67:ee:aa:ac:a9:06:89:1f:4e:3b:
e6:22:e6:2e:e6:cb:67:a6:d6:ab:d4:78:ed:57:d4:94:c6:c5:
38:45:52:59:dd:41:b4:78:18:75:f3:6f:89:7f:7e:57:45:d0:
9d:19:5a:0d:9b:2f:f2:1f:f2:87:45:d9:70:2d:33:de:91:6f:
8a:d7:e4:55:0b:00:38:53:a7:15:a3:f9:98:27:6c:91:f3:41:
f8:ce:52:54:55:e4:72:32:61:14:0f:fb:0d:c5:a9:74:ff:7b:
6f:67:5b:c8:af:67:6f:7c:05:d0:29:cf:49:04:84:d1:31:79:
33:ec:8d:b3:6b:ba:a8:e4:bf:ed:ac:90:ca:88:16:8a:40:1c:
fd:29:4c:80:2b:fc:ba:2a:17:bf:fa:66:ee:02:9d:be:48:27:
6a:06:c5:bc:ce:db:15:34:9b:ff:b2:03:64:70:1e:55:55:c2:
3e:d8:1e:ee:ba:fd:d6:63:20:16:72:30:47:97:ed:e9:ce:d2:
94:2e:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:46 2026 by rpki-client