Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: kRQinSIlKv1RWwtqICIw74xknJAvn0ZZVqYG+N6UDdg=
Subject key identifier: C6:BF:17:40:6B:78:01:B7:44:23:73:B5:9A:18:2F:0C:F1:C1:30:87
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019D98F43E994AF936837C9CF94DB47CB781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0F7A
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: UR/AwjAJ+iUpwoVO3+MQ6kA4G07McoKtV1cjRY91xY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3e:99:4a:f9:36:83:7c:9c:f9:4d:b4:7c:b7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=c6bf17406b7801b7442373b59a182f0cf1c13087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:99:c4:b9:47:23:5c:53:fa:9f:4b:c9:ca:
83:32:60:d4:30:50:88:8f:67:e0:51:14:a4:f3:4a:
97:d9:1f:21:39:f3:5f:e6:ee:65:6c:a8:ac:1b:1c:
7b:61:b4:fe:b7:4e:d5:f3:a9:f0:4b:70:a3:ef:25:
d6:9a:ee:80:dc:60:d7:f6:2e:bb:61:30:60:40:21:
fa:9a:8a:46:40:ae:38:62:e4:79:5d:fe:67:ae:55:
a4:c1:e6:32:b0:af:c3:11:a0:17:33:51:c5:46:8a:
4f:f7:a8:eb:a2:52:9c:de:3f:16:81:e7:a3:1c:a1:
a2:6f:71:a3:5d:d2:62:6b:80:ab:93:94:45:6d:12:
d5:96:d2:b6:69:fa:53:d1:4e:dd:e3:ee:9b:23:ac:
e4:77:14:54:bb:66:17:b7:be:e8:4e:99:4a:0f:46:
31:4e:28:4d:ff:1a:15:b7:80:e6:f7:86:1c:74:1f:
5a:ab:83:14:90:85:f4:fe:c8:63:da:fa:59:1b:8c:
30:9d:78:e1:ca:eb:10:ab:3e:27:a0:26:44:21:b5:
1f:fd:fa:39:ef:80:cd:de:22:b1:e1:29:fe:d9:bf:
c7:d0:a7:d7:ea:3d:e5:91:bb:56:ac:b6:f5:9a:02:
2e:43:60:3b:0b:38:d6:0c:6c:da:94:ab:47:54:29:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:17:40:6B:78:01:B7:44:23:73:B5:9A:18:2F:0C:F1:C1:30:87
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:d0:1c:ab:fe:bb:d4:d8:72:72:f5:b8:7c:42:df:30:d9:
e0:65:5c:be:10:91:de:3b:3c:38:ef:5f:ad:ed:14:34:57:54:
cc:00:ba:1d:f4:9b:26:dd:4d:15:37:ac:4a:42:b2:06:5c:24:
9d:4d:96:e4:65:e5:8c:ce:1b:93:17:2e:c3:b4:58:10:7e:06:
47:32:fa:dd:f4:df:f7:ac:f4:bf:e0:a6:68:b4:fd:fa:3c:98:
61:a4:d0:95:06:bf:b7:86:e6:06:c6:56:b1:ff:de:1f:19:2a:
b5:c2:42:cf:65:0f:99:a1:1b:4c:1c:13:c0:78:f8:7e:2f:89:
20:2d:49:b2:a6:1b:c7:96:69:b8:0e:45:78:d8:bc:e2:e1:75:
81:56:4e:f7:6a:99:8f:c9:e3:04:1a:1f:c7:58:e4:98:5f:bf:
17:1e:70:a4:57:ff:db:61:80:d3:a7:b7:10:8c:1e:56:74:b0:
5c:b9:32:16:7a:e5:a1:f0:c3:fe:e2:37:b4:52:65:31:e4:ef:
67:2c:f8:76:18:ae:d8:80:c2:d6:30:3c:7e:73:dc:f3:93:36:
7e:dd:05:ac:dd:3f:bd:b9:d5:a8:39:c1:3d:70:e7:ec:f2:9a:
14:fb:2c:0f:60:de:a6:0b:fe:3e:c8:2f:4d:75:79:3c:f1:69:
48:6b:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:59 2026 by rpki-client