Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File: A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier: VNdxY2n+j3hQFuBxDQPid1ASq81ms/afjlBnSKGQ7LY=
Subject key identifier: 91:FE:B1:C1:84:50:C6:E3:CB:ED:5A:FA:3A:39:E6:11:11:48:CA:4F
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer: /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial: 019D9A3E5ED612CB12221C1806C4E2A6A1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number: 13E1
Signing time: Fri 17 Apr 2026 07:01:11 +0000
Manifest this update: Fri 17 Apr 2026 07:01:11 +0000
Manifest next update: Sat 18 Apr 2026 07:01:11 +0000
Files and hashes: 1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: EBt2G3/04vEaj/zSm6ajcJDzhbTcFOCd7lwitjiM7MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:5e:d6:12:cb:12:22:1c:18:06:c4:e2:a6:a1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Validity
Not Before: Apr 17 07:01:11 2026 GMT
Not After : Apr 18 07:01:11 2026 GMT
Subject: CN=91feb1c18450c6e3cbed5afa3a39e6111148ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:aa:fd:f1:73:88:56:02:6c:14:4a:4a:ce:
8b:bb:44:59:63:25:72:1e:13:25:02:4c:f7:ca:c2:
14:ea:fd:99:0b:40:4e:30:e5:82:58:70:c2:81:5c:
78:21:0b:29:9d:81:12:88:77:69:08:cf:5d:94:71:
6f:23:85:dc:49:05:bf:4b:a4:0c:00:28:47:67:71:
79:12:34:f5:ec:2b:46:7d:18:d2:ec:e7:cc:22:b7:
af:e1:68:60:ad:04:97:8f:67:77:28:8c:1e:3d:cc:
14:8a:9e:6f:bd:39:90:d5:f2:c1:b1:28:6e:d2:67:
3b:a7:90:60:44:fc:30:75:b7:97:fc:b9:5b:a0:f3:
8f:1b:65:4f:5e:69:08:a7:31:df:73:53:8a:96:e2:
68:cf:4e:22:cf:d3:51:38:47:82:9e:81:6c:43:9d:
a8:1b:2b:94:93:c5:47:5f:90:4b:55:39:09:14:45:
09:a8:f5:d3:ed:00:b6:bb:c1:32:e3:db:f1:20:76:
de:ca:10:78:1f:0c:1b:35:68:bd:7b:69:ec:fa:0c:
3b:4a:60:9f:24:00:71:6c:49:be:20:46:88:06:41:
26:fd:50:81:c0:7a:20:fc:50:d4:a5:7b:6d:b0:74:
d4:81:8a:3d:48:c0:37:4d:42:26:9e:b8:cd:0a:4f:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FE:B1:C1:84:50:C6:E3:CB:ED:5A:FA:3A:39:E6:11:11:48:CA:4F
X509v3 Authority Key Identifier:
keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a2:fd:0c:37:e6:dd:bc:b8:31:c8:d2:51:a8:aa:32:92:e3:
2d:07:0f:54:72:a9:4e:35:10:52:36:ba:18:20:e3:16:ae:2b:
ba:fd:62:39:80:b4:e9:d3:e5:ba:89:50:ab:ff:12:a6:ad:b6:
ca:76:16:8f:f2:83:f0:c7:f2:ad:28:f0:4a:36:cd:6b:1c:86:
f9:74:09:82:0a:38:34:6b:45:67:e9:46:65:55:6b:83:52:ad:
7f:6f:71:61:4e:98:3c:58:84:b0:bc:9d:d7:e2:93:f5:5c:7c:
f0:d1:67:4d:d6:70:63:2f:7d:4b:ff:76:30:ef:9f:a2:a8:e9:
58:46:4a:1b:d1:bb:f6:85:32:d1:8f:46:3c:bb:4a:5b:ba:76:
f8:ba:27:0e:ad:54:1c:d3:5d:38:48:86:f8:24:f4:e8:e0:fe:
11:67:b9:28:4a:c5:b1:97:40:00:5f:15:95:4c:4c:58:9f:c6:
4b:e5:4a:6f:7e:4d:80:86:94:be:41:0c:07:3f:3a:a5:54:5e:
92:ac:f1:57:bb:bb:b0:33:e3:8a:81:88:d6:52:9b:fc:30:90:
15:34:f5:cd:50:da:4c:b8:fd:87:2d:c7:ca:ab:c5:a7:ca:90:
bb:7d:72:c3:cc:bc:c9:e2:60:8a:f5:91:d1:9b:f0:5a:84:31:
0f:d0:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:13 2026 by rpki-client