Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: oMC2r+6BbBCPUEwr5MwL5JZggC2PkORiUIHg2MO3i0U=
Subject key identifier: BA:44:F0:35:6C:DA:C4:15:A7:87:96:FA:7C:D3:98:AB:29:A5:B4:A5
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 019D38659C2C876411F7FCC28CC89C3F91B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: MN4vulL9z/AODxVJZsHEfNOgLo79uEsvAAywCor7Vdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:2c:87:64:11:f7:fc:c2:8c:c8:9c:3f:91:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=ba44f0356cdac415a78796fa7cd398ab29a5b4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:b6:b6:83:5b:9c:75:d4:ea:39:33:14:f3:
f6:8b:6c:08:68:e9:de:9e:da:f4:a5:44:14:4a:07:
9d:f0:b6:3d:a7:7d:5f:46:7b:49:0d:2a:9a:f2:b3:
0a:b2:f6:43:1f:f2:d2:a6:be:22:3b:29:88:a9:d8:
a9:67:09:45:10:f2:78:58:3f:dd:a3:cc:d4:8d:7a:
b1:a3:97:cd:62:e6:37:71:39:ea:e1:e7:fb:5a:88:
2e:f6:2f:f8:db:8e:ee:d5:97:ca:0a:5b:1e:0a:c8:
cc:2a:dd:91:29:d6:dc:1f:80:73:dd:59:3c:65:c5:
e7:61:55:26:10:64:8e:70:fc:10:cd:3f:1d:79:63:
d9:5b:f3:4d:c6:7b:06:4d:78:64:dd:6c:db:1e:03:
80:b1:7a:c2:d6:d8:c2:5c:4a:11:36:bf:7c:5f:1a:
19:d6:94:1c:1d:4c:86:de:a6:e6:a5:22:2c:09:78:
f5:26:3e:37:0a:06:a8:85:ce:5a:1d:8c:8d:fe:30:
90:5d:0f:23:0a:3f:e1:40:db:4a:c3:06:62:dd:d2:
68:01:4c:6d:4f:2f:2f:bd:65:d4:31:c4:d1:00:d0:
b1:99:0f:3a:55:cc:21:4f:91:bd:18:d2:e5:37:6c:
20:75:47:d2:e2:46:bc:9a:92:88:37:24:57:5d:e3:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:F0:35:6C:DA:C4:15:A7:87:96:FA:7C:D3:98:AB:29:A5:B4:A5
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:ff:fe:4f:d5:2c:8a:af:79:62:dc:d1:79:a0:2b:73:af:
97:4a:29:31:58:2c:88:ae:81:ad:c0:31:24:9a:e3:24:fb:cd:
1a:b8:b8:bb:43:da:67:1e:e1:73:1f:0b:e2:05:3d:c9:71:c2:
1e:5e:58:48:b8:e1:a5:a2:41:be:d4:27:b2:a3:c9:10:64:92:
fb:07:47:bc:e2:09:64:4f:16:08:4c:dd:3c:d7:52:6e:90:11:
ad:b4:48:5f:30:7e:9d:a1:f1:1b:47:a7:8b:87:ed:dd:e4:8a:
a0:35:58:36:0e:73:04:27:00:ee:fe:6c:2f:f8:10:1c:91:85:
42:ec:17:f1:ae:d4:5a:96:25:3e:04:8d:e7:00:98:aa:ce:87:
c2:67:1a:16:3b:0b:03:dc:e9:58:85:0f:da:2f:e5:c0:39:b4:
3e:df:cc:4a:4a:bd:49:8b:c4:21:cf:5b:92:db:b5:18:03:bd:
fa:a8:6c:2f:f8:f7:e4:d4:79:88:64:06:e0:93:02:e1:b2:55:
25:e4:dc:54:c3:c9:0a:5d:4c:58:a5:ab:c9:c9:90:39:f8:2f:
1d:77:9a:2c:eb:df:a5:cb:c5:09:fe:66:ec:25:d7:ae:2f:bc:
0b:7d:4a:3c:44:0a:2e:0e:32:66:2b:2a:97:e8:62:31:eb:51:
09:2d:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:33 2026 by rpki-client