Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: sUCaVrdU9M16Fb8DIMdbT4Z1FoOLMqw+OdHJpE8hOAk=
Subject key identifier: 6C:84:AB:00:3F:86:E1:BB:DD:39:A7:56:87:94:D0:53:84:3E:D5:7B
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 019CAD5994FC27338AAC51EF6E00F75E37F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: gZ0su6gWu/XAQshyrmHXIekxshAtOVyo6h9rWYDMVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:94:fc:27:33:8a:ac:51:ef:6e:00:f7:5e:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=6c84ab003f86e1bbdd39a7568794d053843ed57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:d6:13:2d:46:6c:35:f2:cf:f1:3d:dc:5b:
e3:b6:34:09:a0:9c:4f:c7:b9:0b:9f:d5:10:23:41:
fe:f9:51:2f:e3:2b:76:91:ae:3d:89:57:ac:6d:a7:
0f:3b:4a:3e:ca:36:e2:51:9a:22:9a:2a:f6:c9:c6:
af:35:ee:d0:ae:20:7c:f4:79:99:dd:92:07:3b:55:
c0:d2:c1:44:12:c2:71:87:14:5f:95:d7:61:56:fb:
ad:f9:da:00:17:ac:2a:5d:2a:68:77:70:1a:4c:f6:
1b:c9:e3:80:b2:8d:4f:f8:a9:bf:43:95:db:0d:55:
51:78:6f:c2:2c:d0:50:b0:e0:96:e1:f8:cb:0d:14:
0a:fe:05:0b:15:4c:bd:3d:4f:e0:55:e6:2b:09:15:
48:d8:59:f7:1d:d0:4c:0b:b0:ce:c6:f7:69:93:46:
45:ac:63:c5:e6:fa:90:ab:ec:ca:89:92:b7:c1:d2:
77:c3:2d:c5:3b:52:0b:1f:c9:84:3f:a9:94:d6:f0:
13:30:6f:fd:6e:c0:1b:e8:72:6d:ee:85:67:bb:20:
47:d3:1a:c2:11:d6:dc:15:3e:32:2f:0a:5d:18:fc:
50:ee:c9:41:c0:3c:0e:d7:1d:3d:4e:da:f4:eb:70:
92:c5:2b:21:b2:3d:31:37:9e:d5:05:f0:8e:90:35:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:AB:00:3F:86:E1:BB:DD:39:A7:56:87:94:D0:53:84:3E:D5:7B
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:96:9d:d3:be:99:f1:fe:ac:ed:df:40:ce:2c:d8:cc:99:e9:
35:81:15:b2:99:c5:45:38:b5:0c:b7:09:93:80:27:ba:a5:66:
b9:c7:fe:45:42:6e:7d:c7:31:a6:59:07:05:0b:88:90:5e:dc:
80:a4:83:78:c4:e7:d5:fc:dc:ff:15:a5:ec:78:f5:61:2f:13:
bb:3c:1e:d0:e2:ca:2d:e6:76:d4:b6:d1:56:47:d3:f1:89:47:
ab:71:46:58:53:a4:45:21:1c:a7:b2:89:c0:ce:df:d0:cc:0d:
6a:b0:1f:eb:a0:77:c4:ca:2a:e9:ad:ec:08:ce:45:a3:95:c9:
30:1e:15:1a:b5:82:49:9e:5b:de:e6:bc:57:a1:98:76:9c:a5:
3d:8f:f8:06:5a:0f:fc:7d:20:fa:83:29:e8:90:bc:e9:84:ef:
8c:8f:2a:e7:ff:63:a9:f7:be:e6:9e:48:05:c0:99:d6:01:92:
0b:08:81:6f:97:85:b0:cf:f0:14:61:20:fe:86:ed:83:0a:4d:
81:c0:c8:59:6d:c5:77:b3:d3:26:a7:7e:8e:a6:dc:b4:05:ba:
e0:e3:d1:2c:1c:11:54:ac:68:ec:dd:94:bf:36:24:a1:35:0c:
69:1c:d2:cd:8c:82:ad:be:cc:ab:7f:8c:ed:70:66:53:62:3d:
42:6f:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:32 2026 by rpki-client