Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: PgnexK0HFSyNhsZfl8PH4quXH4xYSbpQqeTZs6bHUIw=
Subject key identifier: FB:36:B4:50:5A:C3:B8:79:8B:2F:D3:4A:18:1C:85:BA:31:69:68:46
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019D3865866E196C74275F363E88BF727413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 1305
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: vqv506UO3n+dD2HnFQysah/PZ4t+cIIsG/tCqKS6OQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:86:6e:19:6c:74:27:5f:36:3e:88:bf:72:74:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=fb36b4505ac3b8798b2fd34a181c85ba31696846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:c9:47:1e:ed:ef:ff:30:78:c8:30:7a:54:
39:5e:43:f7:70:cf:25:95:33:e3:f7:8a:b8:b3:b0:
42:b2:c3:88:50:af:06:f8:8f:b3:32:e4:8d:0f:dd:
5f:73:3e:5f:ae:1f:f8:38:9b:ec:5c:63:3f:a7:18:
e6:34:77:d3:84:dc:27:b6:af:f5:f3:b1:0b:d1:7d:
8b:3f:fd:8b:4d:69:ed:14:b7:d8:35:2a:16:2e:ae:
1d:c1:8c:3b:f1:16:36:10:40:a1:bb:e2:99:35:b2:
e5:c2:f8:44:d4:08:97:a6:38:f8:3e:b5:17:d8:3c:
1e:8a:db:52:99:5d:bb:2f:22:bd:d4:c2:b4:83:d0:
c3:73:e0:97:24:92:85:72:3f:59:a8:dc:01:6c:e5:
12:1a:80:75:0c:b7:cc:60:28:3d:ef:3b:b3:0e:a5:
50:76:39:98:fc:1e:64:b5:76:2c:f7:3e:c8:c2:a1:
e1:54:90:6d:0a:ad:e5:77:bb:3b:99:e5:0c:58:a6:
3c:4e:bf:b9:f9:66:64:cc:72:db:a0:66:88:b0:d8:
c8:03:38:71:66:77:63:91:e9:ba:f6:16:74:70:9a:
ed:f1:27:89:e0:18:e4:2a:ce:83:be:c3:e1:3e:32:
6b:bd:47:c0:1c:1d:6c:04:c2:a8:0b:a1:f3:3c:11:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:B4:50:5A:C3:B8:79:8B:2F:D3:4A:18:1C:85:BA:31:69:68:46
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:15:89:4b:39:59:80:a2:bf:9f:78:44:a2:da:20:dc:59:
29:a1:5b:0b:60:54:0c:8c:db:36:00:07:7f:bf:a3:23:2b:10:
1f:23:a2:e1:34:96:c9:d2:6f:3c:28:5d:d1:18:a1:65:5e:8f:
d1:52:2b:4e:37:76:a5:d6:9b:f4:65:e7:e9:81:be:26:38:f2:
12:e1:cd:15:0a:54:80:6d:8a:9c:d6:52:47:61:bf:29:fd:63:
37:2d:fb:dd:17:27:07:a0:7f:d6:ce:69:73:44:c1:2c:d1:ef:
0c:9e:0b:ec:2c:26:5d:7c:6b:a4:91:e3:f5:1a:da:51:81:8e:
37:c1:f3:75:94:7d:ab:5d:1f:e4:92:35:45:14:86:ac:14:5d:
89:46:f3:49:e1:56:83:2b:f7:85:52:4d:c6:d6:ca:7d:0b:73:
a8:5f:6a:e8:e7:b4:9d:df:f2:8b:f6:4b:ce:97:f6:5b:94:85:
2f:65:ea:cb:39:41:48:03:58:be:81:be:cf:ac:5f:5b:f3:62:
1d:73:ad:0f:f8:19:05:f6:85:41:ee:28:94:2c:1f:af:37:99:
6f:ad:d7:e3:61:3e:9a:65:2a:d5:9a:40:a5:4f:b5:8e:16:7c:
0f:90:67:e5:3a:8c:39:ba:4a:e0:af:2b:02:95:2d:9b:d0:6e:
3c:63:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:14 2026 by rpki-client