Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: 0/8F3dL0mJT/TgEOsfGKpGNAQF11C2CKYGBoTyQCpv0=
Subject key identifier: 00:44:4F:77:CB:CE:CE:35:20:3F:73:AD:41:38:1B:AF:E1:90:34:1C
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 019D996212395988D339FC1AA1926B7F9B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 1851
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: UnqpObNJuwB/JptOV+mhNnvBHwpNf3GDmOQYa4CRLPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:12:39:59:88:d3:39:fc:1a:a1:92:6b:7f:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=00444f77cbcece35203f73ad41381bafe190341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:3f:ae:15:d1:98:ed:84:40:85:3b:8c:e1:
f3:75:95:d0:a1:04:de:aa:d2:d3:31:28:0f:3e:d6:
9a:d2:ba:4c:7d:0e:a1:7f:9f:3f:65:cd:8c:c0:5c:
74:9c:6e:c5:3d:72:de:84:09:32:fd:ec:47:a2:f3:
18:9d:80:f8:04:30:4a:f0:c0:db:4b:45:f7:b3:21:
f5:4a:00:eb:2f:99:1b:42:3c:c9:b1:f6:72:b1:cf:
86:76:ec:78:84:61:cf:5c:87:6e:1e:79:12:81:4a:
a1:44:da:09:da:fb:1a:6d:a9:c8:82:a1:ad:fe:e4:
2a:08:af:78:07:2f:fa:07:bb:b2:6d:79:75:8e:22:
2e:0d:d2:73:3c:6f:42:ce:32:8c:2a:bc:21:c4:13:
e5:9f:ee:c0:a2:b0:25:54:6d:59:37:56:2a:55:24:
74:f4:3f:e7:39:f5:fb:46:73:86:86:96:fa:21:34:
1e:42:58:59:d2:ff:92:94:51:78:97:9a:c0:83:c3:
58:f4:c1:c4:f4:27:ad:e2:dd:c6:03:9a:61:1a:38:
cd:eb:a9:38:66:10:a0:75:39:9d:7d:76:f1:36:be:
f9:63:31:d1:fc:f9:9e:01:83:db:5d:ae:80:c0:af:
41:33:bd:73:61:1f:ec:2a:2a:ae:0b:1d:7d:f8:3b:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:4F:77:CB:CE:CE:35:20:3F:73:AD:41:38:1B:AF:E1:90:34:1C
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fb:35:35:36:12:c1:59:fb:68:7d:8e:02:64:f0:bd:3f:ad:
4e:14:59:e6:9f:8a:16:3f:71:da:69:24:1b:3f:d7:ef:f9:ee:
d3:96:b4:6c:77:07:83:84:c6:92:a0:08:15:75:7b:d5:88:19:
86:a0:82:61:46:db:48:2d:cc:82:7b:62:f7:1a:38:a6:c2:9c:
3b:c3:a0:8d:9c:4c:c3:e9:49:df:ff:e9:07:df:47:3b:bb:35:
72:c9:4a:21:31:b8:b8:a7:f7:40:7c:a3:76:74:45:4b:e0:83:
e9:46:e8:21:ba:6c:b4:f5:6c:2c:21:0c:6a:f4:b0:00:57:d4:
2f:9e:09:aa:60:7a:f7:c7:43:d7:30:1a:94:82:1e:77:be:b8:
f1:eb:bd:6d:ee:1c:b3:10:5e:69:cb:b5:f1:5b:dd:ec:1f:7f:
7d:20:a3:d9:00:af:05:58:c4:31:38:92:98:7c:6f:1c:e4:25:
8d:96:de:54:2d:e0:ec:70:32:10:a8:01:6c:9a:91:2d:33:4f:
e7:e2:98:4e:66:c2:56:37:78:f0:55:54:81:e1:5c:37:c6:5f:
0a:e8:62:36:85:f5:01:9d:89:1c:a9:bb:5b:6d:18:48:03:31:
61:c6:7d:a6:00:8a:aa:a0:d8:03:12:98:df:62:83:b0:5c:1b:
07:00:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:35 2026 by rpki-client