Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
File: h679om6egcITEDruPQGowoqv_Pg.mft (raw, json)
Hash identifier: l6oP4RwlMt9UwUA22oONq+RKqB/8tq2wqDsRnmIVmN4=
Subject key identifier: 4A:19:A0:8D:9C:F4:94:C2:15:9D:03:D2:29:B5:7C:30:F5:6A:69:5E
Authority key identifier: 87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8
Certificate issuer: /CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8
Certificate serial: 019D3940EA98A7E126A45495BA8191BCE1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
Manifest number: 0166
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: h679om6egcITEDruPQGowoqv_Pg.crl (hash: aZXha9o8uhETIVtvwqQw6h3rc7PUUij48tCpQBLXo6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ea:98:a7:e1:26:a4:54:95:ba:81:91:bc:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=4a19a08d9cf494c2159d03d229b57c30f56a695e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:7b:88:4e:07:82:85:64:96:42:ae:3b:df:
ad:28:29:20:90:1b:fd:5f:d9:2f:e1:0b:2d:7e:22:
38:95:52:eb:93:dd:8f:94:16:48:b7:58:39:28:35:
e4:e2:76:7b:0e:80:e1:2f:29:ba:a7:11:4c:ba:5f:
48:24:2f:fe:f4:09:63:5a:8d:b5:8c:32:8c:61:67:
13:7b:92:23:0f:dd:95:d0:16:59:62:bf:19:2d:b7:
70:da:14:ca:f3:b0:52:9f:c5:91:bc:8d:c9:c2:20:
6b:71:5f:e3:b9:4e:47:b3:fb:da:c6:c1:f5:35:c6:
2c:40:4c:c5:f0:30:ec:18:e0:e0:5c:94:23:da:6e:
33:d8:01:41:fa:e0:8f:2f:e8:b1:ea:67:0e:0b:4a:
e8:cc:4b:70:e2:86:fe:48:74:b4:26:c7:83:64:19:
ab:94:7e:ba:b8:c8:85:2c:68:9b:3a:96:cd:c5:b4:
9c:22:51:b1:df:31:3d:80:2e:d0:ea:11:c7:d6:ec:
c7:fc:2a:b0:5a:5b:1c:7d:d1:f6:d2:46:c4:ef:16:
d2:22:8e:bd:93:d7:67:b8:e5:bb:7d:46:3b:43:87:
b6:af:1e:b5:e8:d3:d7:1a:cd:fc:b6:c4:69:75:83:
51:49:d2:d3:07:aa:cd:a2:a0:a0:75:bc:e6:a4:b9:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:A0:8D:9C:F4:94:C2:15:9D:03:D2:29:B5:7C:30:F5:6A:69:5E
X509v3 Authority Key Identifier:
keyid:87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:31:3d:29:68:26:ac:0d:89:0f:a9:33:70:b8:25:fd:c0:f5:
68:60:f5:c1:7a:87:fc:31:9e:f5:c3:25:e2:84:6d:c4:d6:0a:
a5:7a:2c:8d:37:d1:b9:50:49:f1:f1:ef:86:ba:fd:09:59:76:
4b:e8:c9:78:c1:96:07:6f:84:fc:08:a4:77:02:5f:f4:2f:0f:
09:41:5c:f7:ad:97:15:c0:7c:e3:49:79:ab:33:7b:16:ea:f4:
97:00:3c:2e:ee:b4:50:2d:a3:2a:11:89:6f:6d:0e:cf:a5:94:
0b:9c:59:f0:9f:30:fb:dd:a6:30:31:68:c4:76:a4:6d:6f:af:
b5:83:6c:37:1d:eb:03:d1:ee:5f:ed:02:a7:0c:9c:da:4b:d6:
4d:a1:ae:81:c5:be:a1:a8:d7:00:6c:f9:6d:cd:15:5e:24:0e:
99:e7:67:26:37:fe:93:c5:56:7c:a3:7b:e5:bb:7d:a4:be:f1:
fd:82:ea:51:b6:39:1f:b0:82:ec:aa:cb:9e:9c:a1:71:05:6f:
aa:eb:7f:0d:41:db:53:f3:69:38:b1:70:55:50:90:45:25:c3:
50:9d:f1:72:1e:8a:2e:a7:25:cb:a2:eb:25:16:e0:81:98:90:
61:c7:3c:e4:81:31:ad:f6:5d:f2:91:99:62:89:b0:08:e7:8a:
28:84:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:44 2026 by rpki-client