Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: 3K+Q27cjN8H3rks9YT0KDPyAvoqpcWpRXv+EXSwkmTE=
Subject key identifier: 47:A9:18:9F:F8:65:25:F3:03:0C:FD:4E:71:A2:2B:CB:34:D6:64:9C
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019CA97D9194F95788C5B958AC569CF214AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0EFE
Signing time: Sun 01 Mar 2026 13:01:44 +0000
Manifest this update: Sun 01 Mar 2026 13:01:44 +0000
Manifest next update: Mon 02 Mar 2026 13:01:44 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: a9WAxuWBYz5yEJ3DgfKa5xoMs7XmNbFjMbF8xOsGfj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:91:94:f9:57:88:c5:b9:58:ac:56:9c:f2:14:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Mar 1 13:01:44 2026 GMT
Not After : Mar 2 13:01:44 2026 GMT
Subject: CN=47a9189ff86525f3030cfd4e71a22bcb34d6649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:86:62:31:a9:81:92:2e:95:e9:69:6d:60:
df:e4:a3:5b:eb:52:0f:9c:42:e7:18:ee:22:af:c6:
98:da:07:95:fd:e5:06:bb:99:00:00:de:77:ee:c0:
bf:49:b3:27:35:0d:29:ec:fa:1e:04:f5:fb:a1:b4:
65:83:9f:eb:bd:c2:c4:18:92:ed:66:ea:a6:b4:e5:
e6:75:8a:0a:65:d0:fb:03:0a:94:4f:67:23:66:54:
cd:a9:62:f9:11:a5:a1:f9:4d:d5:ff:d7:97:7d:95:
e8:5f:5e:65:f2:55:9c:29:3f:9e:15:52:c4:b3:29:
ee:b6:47:b9:7e:d4:06:bb:02:a0:23:b0:fe:42:19:
1e:0f:87:90:e8:41:f6:d4:64:48:f8:79:59:79:ec:
d1:b3:d1:fc:31:9a:32:f6:64:ba:36:08:5a:c7:2b:
e8:87:9b:5d:06:e7:da:53:9f:cd:a1:52:6d:aa:77:
1b:67:38:16:2d:5b:bb:36:50:69:3b:dc:bc:e1:6e:
34:25:f9:49:43:ed:7f:d0:1d:55:e7:5c:b1:cf:67:
73:30:00:95:89:6c:76:d8:29:96:fc:88:2e:3c:30:
26:2d:a6:df:d4:7d:96:9c:8a:3b:57:45:0f:53:34:
74:b1:15:47:a9:ac:36:0d:84:66:33:58:6c:dc:9b:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:18:9F:F8:65:25:F3:03:0C:FD:4E:71:A2:2B:CB:34:D6:64:9C
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8c:8e:a1:ae:d2:9d:f7:15:46:c1:22:dd:d3:50:f8:4f:ae:
e3:03:06:a7:b6:7a:bf:0c:7a:4b:38:46:b7:a6:a6:89:98:6d:
6a:56:de:53:01:47:0f:3f:60:ad:89:b9:ac:cc:da:dc:55:4a:
25:29:58:28:68:0f:a6:b9:95:1d:88:1c:31:95:a7:34:f8:2d:
cc:7b:25:dd:46:42:3e:86:eb:0b:20:ae:d5:2e:38:8a:50:42:
57:56:51:d2:6a:20:35:1c:ca:ae:98:55:38:27:a0:43:6b:1b:
f9:b7:d8:47:9d:bb:b6:9b:e8:1f:e2:13:43:10:10:ce:1b:4f:
79:01:c8:d7:34:c9:5e:c4:6f:47:00:5b:2a:e3:5c:bb:59:ba:
0f:70:29:46:ea:f7:00:f3:b7:7d:96:df:ae:bb:17:b9:69:0e:
ca:1e:de:d8:12:71:58:42:80:94:45:6e:63:f9:06:83:01:87:
22:21:59:33:c0:a0:c5:14:d4:23:f1:2c:7b:1b:6e:d4:22:d6:
54:8f:b4:56:85:78:53:62:e7:59:24:88:4f:d3:38:b0:8f:f2:
65:ad:86:26:1f:e1:ec:3b:0e:db:59:ad:12:82:24:8a:db:fc:
a6:3f:e3:69:03:7e:02:4f:9e:a1:7e:58:98:4c:67:0b:81:c5:
66:16:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:54 2026 by rpki-client