Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: rUW4m7yIBiG5j0sGq3CdJiu5Q2mAUCjX+TDvmShCmRY=
Subject key identifier: C0:C1:07:C5:04:4F:31:08:B2:D5:F9:9D:42:0B:01:AC:89:69:DD:4F
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019F17F94A2331BA3FC11349C4C7E8CA53AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 10:00:41 +0000
Manifest this update: Tue 30 Jun 2026 10:00:41 +0000
Manifest next update: Wed 01 Jul 2026 10:00:41 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: gTriZ3PhvyX6+mwwY1gskSrSRfbQ16eIi85nm8tXWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:4a:23:31:ba:3f:c1:13:49:c4:c7:e8:ca:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Jun 30 10:00:41 2026 GMT
Not After : Jul 1 10:00:41 2026 GMT
Subject: CN=c0c107c5044f3108b2d5f99d420b01ac8969dd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:37:85:69:1d:f4:7f:de:6f:00:e2:61:47:
a1:a9:6e:9d:e7:c0:ff:e8:3f:58:73:95:7c:8a:27:
6e:d4:de:73:f4:b8:17:6e:41:df:df:8e:e1:b3:9f:
74:0b:0d:e3:f6:33:48:f4:06:b6:1d:8e:bc:dd:1d:
da:a1:05:48:70:69:79:29:9e:0e:16:a1:d3:cc:7e:
2b:b7:0e:fa:c5:97:07:cc:c4:77:3b:30:0e:69:1e:
9a:1b:11:e3:73:65:b7:dd:1a:1b:fd:c5:04:ab:13:
e1:3c:02:3c:1f:07:79:86:4f:e1:f8:81:ab:51:15:
8d:3d:2d:70:46:03:28:bf:9e:8a:89:fe:49:e1:69:
fc:04:b9:71:0a:93:4c:0e:fb:0b:7b:12:c5:c4:46:
30:12:c3:dc:df:fe:06:57:f4:40:91:4e:c6:c8:56:
21:24:11:f8:22:3b:48:4b:f5:6a:f3:de:69:d6:c2:
67:b9:17:d1:66:9f:71:e1:88:80:03:53:76:cb:0c:
45:8b:b1:1b:5c:f7:35:6a:41:7b:69:92:ee:f3:12:
90:0c:1e:45:07:c5:e5:2c:c3:f9:9d:5c:61:d9:88:
70:2d:ea:83:19:ea:f6:c5:3f:da:73:2b:4a:56:ff:
84:b6:35:95:27:87:2f:ad:2e:e1:3d:aa:38:3c:58:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:07:C5:04:4F:31:08:B2:D5:F9:9D:42:0B:01:AC:89:69:DD:4F
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1b:55:b6:b7:01:7a:54:79:69:08:07:05:36:79:93:11:f2:
59:b4:74:4b:4d:59:1e:ce:5d:52:0a:63:cc:49:44:4c:10:26:
d0:92:64:ac:98:d6:9e:98:4a:98:2d:b4:d6:3d:5a:7d:56:64:
2a:16:ab:c5:40:56:8e:23:e2:60:b0:e0:83:57:dd:78:8f:ad:
68:4a:4c:bd:df:ca:63:17:06:54:e6:c8:de:6e:2d:48:df:47:
4c:04:2c:76:9e:a7:c0:8c:e8:55:ee:36:b4:85:74:b9:e4:12:
0e:d4:70:2c:71:9d:da:74:51:2a:48:1a:af:f2:45:bb:56:2e:
63:33:4f:b4:3f:1a:18:44:70:58:02:24:e3:e6:ed:9c:5b:ea:
46:8b:d0:89:98:27:46:87:4c:ea:63:8a:25:87:87:c8:44:b2:
81:19:c9:4b:62:76:d4:c7:90:14:bc:c7:a3:1f:ca:d7:e6:71:
8e:a1:82:cc:58:f0:af:84:45:e9:eb:6e:1a:c9:29:57:7a:c3:
a7:f6:c5:0a:b6:0c:3c:31:4f:64:b9:9d:21:39:47:5d:c3:b8:
bb:ef:37:dd:5a:13:5d:5a:c4:f6:03:65:e0:4d:19:a7:08:83:
96:1a:fb:b0:a6:67:87:02:a3:23:13:32:3d:dc:d0:25:9f:47:
cb:d8:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:12:29 2026 by rpki-client