Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: mqcIINB0uCoxt7aoAiBgCPKf+xqcr/W5QWL3yC2ZjAU=
Subject key identifier: 0E:90:C4:13:8A:92:84:3D:15:6A:4E:15:02:31:C1:C9:AE:18:C0:B3
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 019D9AE288CC5350800F1598B36819360394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:30 +0000
Manifest this update: Fri 17 Apr 2026 10:00:30 +0000
Manifest next update: Sat 18 Apr 2026 10:00:30 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: XFBGa6TZDgpS0N1M7BJi5BjOY3YzSVAT4Wlw1iwzInw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:88:cc:53:50:80:0f:15:98:b3:68:19:36:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Apr 17 10:00:30 2026 GMT
Not After : Apr 18 10:00:30 2026 GMT
Subject: CN=0e90c4138a92843d156a4e150231c1c9ae18c0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:27:f0:89:fb:36:84:0a:7d:8b:5c:c4:91:
f2:05:f8:98:fb:7f:25:fd:ff:53:ea:84:88:04:93:
4c:7e:db:15:80:68:7d:26:93:44:35:ca:f8:56:34:
c4:ce:35:b9:6b:8d:f4:71:cf:56:d4:4e:51:af:07:
29:96:01:39:ed:77:94:29:84:f7:d9:52:41:87:2d:
b3:63:ff:5c:51:3f:14:70:25:b6:7b:50:14:bc:56:
fd:12:6b:69:bc:ec:10:90:f9:bb:e1:a8:3e:9f:4f:
db:a2:69:8d:d1:b4:62:bc:bb:56:63:33:89:0b:ed:
15:9f:fc:ee:ba:33:bb:d4:ea:e2:64:fc:1a:47:6a:
28:f9:cd:0e:ee:f1:4f:46:0c:76:d5:13:45:23:c6:
29:13:ef:e0:8b:23:19:6d:7e:4a:b5:45:6c:87:2a:
24:e6:5f:48:1e:f8:a3:34:f8:85:2f:68:cc:7a:ef:
d2:6a:9f:fd:96:9b:a1:ea:f5:86:da:16:4c:7e:46:
b6:50:b5:f2:81:1f:5b:54:f5:0a:d5:5d:60:e5:06:
97:15:07:b9:63:14:22:9d:ce:ce:b2:7c:69:23:d5:
5c:d3:53:99:e2:21:79:64:1e:d6:dc:a5:1f:97:fd:
8b:a9:5d:d7:d8:e0:d8:f3:c2:eb:53:0b:f6:24:73:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:C4:13:8A:92:84:3D:15:6A:4E:15:02:31:C1:C9:AE:18:C0:B3
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:49:dc:f8:52:71:68:e7:27:fd:2d:84:c2:ce:cd:b1:76:
f6:d5:7f:2b:0c:65:64:9a:2e:a8:cb:7e:fe:38:b9:10:64:d6:
71:10:e4:de:2a:df:41:cf:42:ec:d0:5c:d0:11:74:4d:92:e1:
73:a4:3e:f3:54:f7:f8:25:f0:1c:da:1e:98:9c:81:58:62:3c:
ef:1d:4c:bd:e7:76:2a:a4:6c:93:47:eb:13:a9:83:d3:26:23:
aa:e0:7a:02:10:67:4b:c9:0e:fd:75:8d:4d:e3:56:71:9d:aa:
f9:29:c6:44:88:4f:68:8d:87:b3:29:a0:49:23:7b:89:5a:fb:
cd:6d:7b:a0:ee:bb:a4:2c:12:18:1f:23:e5:dc:05:80:1f:05:
33:08:51:36:1c:c4:b0:76:03:a7:d1:a5:e3:d3:44:ec:04:64:
58:52:ef:60:9d:2e:14:d1:cd:67:be:80:b6:11:e7:52:7e:34:
69:ad:4e:d1:01:fe:45:0e:08:72:57:7c:46:14:c5:9f:41:48:
de:c5:53:19:53:32:8d:cf:ff:d8:12:18:71:6d:1b:ee:77:6e:
89:c3:a5:23:6a:34:da:91:1d:f1:f2:5d:09:e1:0e:83:6d:4c:
b8:8a:5b:e9:79:e8:27:1e:bf:c3:ac:f9:45:ce:3a:ef:e4:7f:
10:e1:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:06 2026 by rpki-client