Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: Dhv6txxC9GfCCP27C7ODVeKNV09aiTViIkkWKoZJGQw=
Subject key identifier: 25:47:2F:F6:D9:C7:4E:79:06:E2:FE:81:C1:D5:F2:A6:E8:3D:5E:8E
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019D390A0E256EBD9A619C4E5284D68F6829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: CeNRAIG1WS90JqHhzcKt7SG+3ssgKHsbHLqg/lmg0gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0e:25:6e:bd:9a:61:9c:4e:52:84:d6:8f:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=25472ff6d9c74e7906e2fe81c1d5f2a6e83d5e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:71:79:69:9d:46:b2:67:19:3c:9a:49:73:
d5:e0:45:4d:47:20:02:c9:08:74:54:0e:59:e1:c3:
91:10:a8:5a:5d:ab:bc:76:22:17:88:f8:7a:42:4b:
a2:67:5e:f2:c0:83:6c:75:29:6c:65:e0:3f:bd:5f:
7c:a8:3f:93:a1:b7:c3:66:ff:d2:28:e3:9a:6c:6e:
16:96:bf:28:10:98:d4:1a:65:c4:24:e0:3a:07:96:
e2:97:ad:15:47:91:a3:ad:a3:bb:b9:5c:5b:b7:68:
63:5d:5f:7d:53:3e:65:d9:c5:a1:27:8f:15:c6:a7:
10:42:f4:6f:4e:11:27:e3:62:e0:4f:4f:74:78:9c:
b7:2b:e4:2f:60:79:7b:ea:1e:a8:15:f6:6d:ff:77:
d2:db:c3:ce:8a:36:c5:a3:f1:d7:3d:cc:4d:be:e3:
d5:bb:66:0f:ec:64:42:ac:25:db:cb:2d:f8:d4:ee:
7f:a9:9d:14:37:8b:62:44:e0:77:a4:b4:cc:7f:e5:
28:c1:04:2e:84:9b:4a:ff:94:96:e5:d3:78:e3:a8:
d0:d6:22:6e:0b:fd:0d:4a:41:5a:fb:84:9a:35:68:
f2:55:b7:34:15:a5:76:bf:b9:7a:e2:d1:c3:9e:72:
09:e8:d3:69:67:42:1f:a1:a1:a7:50:9c:58:b4:49:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:2F:F6:D9:C7:4E:79:06:E2:FE:81:C1:D5:F2:A6:E8:3D:5E:8E
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:98:d1:7f:fd:0b:c2:d2:80:b8:fb:9d:8c:b6:ad:5b:41:1e:
9b:15:4d:11:5f:84:b9:cf:c1:18:77:4a:33:7c:9a:78:e0:63:
07:38:07:46:12:9d:2b:2c:ff:ea:4d:06:32:25:dd:30:01:eb:
05:b1:ee:76:12:cf:09:76:b9:5c:5d:01:f9:d2:4b:02:94:87:
76:a4:48:64:38:b7:52:7b:af:09:0f:73:a2:41:c9:34:51:2a:
20:67:aa:07:18:ab:bf:b2:ac:89:e7:07:6b:d9:0f:a3:ad:c0:
3a:c0:7b:35:26:68:99:22:8f:b8:9a:ca:24:2a:34:06:bf:55:
c7:52:b0:ad:b0:8a:f2:c9:ae:8b:59:3e:58:63:5e:ac:24:cd:
90:e5:63:8b:0d:e6:c7:ef:4a:51:d5:a3:9e:43:f8:4d:ae:9c:
83:d0:d4:97:01:6d:9c:f3:b5:7a:c4:33:bf:76:9f:ca:44:26:
33:4c:c4:b8:d4:14:8c:1e:f8:73:a5:a4:e5:dd:ff:f7:74:b7:
68:9a:74:76:2a:ac:68:41:ab:a4:83:73:4c:22:52:29:52:a6:
70:d7:dd:c3:f5:60:9c:03:24:1c:81:8a:cc:0d:11:ed:4a:87:
6d:34:b4:59:81:31:8f:f5:d5:bc:53:d9:10:db:c3:6c:8f:7b:
0d:83:76:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cg4lbr2aYZxOUoTWj2gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh
ZDU5NDIwHhcNMjYwMzI5MTAwMDUzWhcNMjYwMzMwMTAwMDUzWjAzMTEwLwYDVQQD
EygyNTQ3MmZmNmQ5Yzc0ZTc5MDZlMmZlODFjMWQ1ZjJhNmU4M2Q1ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9xeWmdRrJnGTyaSXPV4EVNRyAC
yQh0VA5Z4cOREKhaXau8diIXiPh6QkuiZ17ywINsdSlsZeA/vV98qD+TobfDZv/S
KOOabG4Wlr8oEJjUGmXEJOA6B5bil60VR5GjraO7uVxbt2hjXV99Uz5l2cWhJ48V
xqcQQvRvThEn42LgT090eJy3K+QvYHl76h6oFfZt/3fS28POijbFo/HXPcxNvuPV
u2YP7GRCrCXbyy341O5/qZ0UN4tiROB3pLTMf+UowQQuhJtK/5SW5dN446jQ1iJu
C/0NSkFa+4SaNWjyVbc0FaV2v7l64tHDnnIJ6NNpZ0IfoaGnUJxYtEnxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVHL/bZx055BuL+gcHV8qboPV6OMB8GA1UdIwQY
MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut
MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm
LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5jRf/0L
wtKAuPudjLatW0EemxVNEV+Euc/BGHdKM3yaeOBjBzgHRhKdKyz/6k0GMiXdMAHr
BbHudhLPCXa5XF0B+dJLApSHdqRIZDi3UnuvCQ9zokHJNFEqIGeqBxirv7KsiecH
a9kPo63AOsB7NSZomSKPuJrKJCo0Br9Vx1KwrbCK8smui1k+WGNerCTNkOVjiw3m
x+9KUdWjnkP4Ta6cg9DUlwFtnPO1esQzv3afykQmM0zEuNQUjB74c6Wk5d3/93S3
aJp0diqsaEGrpINzTCJSKVKmcNfdw/VgnAMkHIGKzA0R7UqHbTS0WYExj/XVvFPZ
ENvDbI97DYN2dA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:20 2026 by rpki-client