Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: 7YHib9r48bJPt+n4VVgrEY80aIOmUrud3O0m7VHYz1U=
Subject key identifier: 82:82:BC:6C:E7:A6:5E:72:3B:D9:DD:9C:38:95:C0:6C:5A:FB:87:E7
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019D382ECFE5CD4339132177C5469E248340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0C30
Signing time: Sun 29 Mar 2026 06:01:24 +0000
Manifest this update: Sun 29 Mar 2026 06:01:24 +0000
Manifest next update: Mon 30 Mar 2026 06:01:24 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: JPs/jfvQJZk1nfQU+JHzKwOkXhUM0rYxE6S6rE1eaq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:cf:e5:cd:43:39:13:21:77:c5:46:9e:24:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Mar 29 06:01:24 2026 GMT
Not After : Mar 30 06:01:24 2026 GMT
Subject: CN=8282bc6ce7a65e723bd9dd9c3895c06c5afb87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:74:b7:44:2b:f6:5c:58:28:d8:3c:d8:bb:
b3:64:7b:de:7b:3d:89:fc:bc:4c:bd:d3:de:cc:eb:
5f:37:e5:4c:71:be:a1:1b:cf:44:b3:11:55:09:90:
6b:31:67:a7:fd:6a:ab:51:09:b2:c5:c0:77:e6:05:
55:3b:6d:cf:46:9d:f5:0b:7f:f9:f8:46:60:6d:20:
cb:45:39:5c:06:83:a0:33:fa:0d:b2:03:87:59:05:
50:5b:d7:d2:7a:24:2b:cf:1d:94:7a:c9:3e:d6:bb:
3d:2d:e1:91:97:10:29:f5:24:a5:ae:3a:f8:ca:fc:
f7:d4:d7:e8:4d:4e:ae:92:1c:82:cf:a2:96:1d:30:
3b:10:65:4e:bc:17:50:23:81:e8:4c:d5:1b:80:63:
8d:1e:ac:d3:e2:ca:d8:0f:ca:06:a0:13:c6:37:08:
ab:30:92:d8:3d:c5:ee:e2:7f:06:2c:7d:db:c1:c3:
dc:71:30:08:d8:e6:af:b3:f2:87:0e:61:ba:c0:1d:
62:77:e0:63:a9:48:c6:d8:d4:08:14:1a:f6:06:43:
41:21:05:dd:91:4e:77:48:fa:3b:a8:24:87:83:25:
5b:83:28:14:29:fd:2a:6e:ff:bc:98:c0:6e:e9:e6:
d5:41:31:4d:08:7d:1f:39:6a:fe:f5:af:82:c6:a3:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:BC:6C:E7:A6:5E:72:3B:D9:DD:9C:38:95:C0:6C:5A:FB:87:E7
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:c8:73:e6:3c:7d:26:10:64:8e:09:7d:d1:09:62:9c:b2:
8d:be:ee:ca:07:02:64:88:66:37:09:62:39:a6:85:58:fb:74:
b6:52:dd:7c:1a:d9:23:bc:6f:ad:2e:0d:83:64:6e:cf:e1:11:
d8:be:71:8f:c8:68:0d:77:31:2f:e4:46:4d:99:05:55:5a:14:
e8:af:5e:b7:fe:71:36:55:ed:f5:85:b4:ea:5f:84:38:a5:df:
97:d6:18:d8:1c:09:93:52:a8:4a:de:40:74:98:d0:a2:31:29:
6c:05:9f:45:a0:5c:8a:e5:8d:22:18:36:38:00:a6:02:f1:5a:
94:fe:c2:f6:8c:be:3a:76:4c:62:97:c7:73:bb:84:43:9d:f3:
0f:b8:16:e1:79:0d:55:0f:f7:f8:05:3f:1f:e6:d8:b1:ca:1c:
a1:f3:ec:d8:20:04:c8:20:10:16:79:e1:66:a0:95:9e:99:cd:
22:ed:36:7b:b5:e0:c3:08:b1:ef:cf:cf:f1:3c:ad:5f:4b:5c:
dc:50:e4:a6:3c:90:08:5e:70:62:bb:19:9a:cd:31:e5:b8:31:
55:5c:85:c1:09:ba:47:cc:22:3c:ad:a3:c6:95:e6:c6:9b:d3:
98:3e:c1:2e:13:b9:89:74:13:80:fb:15:7f:08:47:5c:5a:4d:
46:aa:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:53 2026 by rpki-client