Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: Enmq92/MlByOGq0czmJ3QbxXfYyIbzi4lB15Cmh4xUo=
Subject key identifier: B8:CF:EF:4F:64:96:D0:2B:46:D2:7A:11:73:8A:86:B1:1F:D8:B7:6B
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 019D9850BD4C67BB46C91547AD408E65B5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 1484
Signing time: Thu 16 Apr 2026 22:02:01 +0000
Manifest this update: Thu 16 Apr 2026 22:02:01 +0000
Manifest next update: Fri 17 Apr 2026 22:02:01 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: GLdTSEbykr3LNtH9Xqbolpe2e2JUs3srd6gSbd4Wsd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:bd:4c:67:bb:46:c9:15:47:ad:40:8e:65:b5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Apr 16 22:02:01 2026 GMT
Not After : Apr 17 22:02:01 2026 GMT
Subject: CN=b8cfef4f6496d02b46d27a11738a86b11fd8b76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:c1:f5:07:5e:9a:44:6b:99:d6:05:f0:6a:
82:77:f1:90:01:fc:ac:98:fa:7b:a0:46:47:ef:7c:
a9:31:40:6b:93:85:8c:78:24:57:31:bd:23:ab:25:
d5:2d:70:d4:fa:b7:78:29:8f:1c:41:df:9a:68:92:
74:79:7a:22:88:51:ad:b9:bc:88:33:2a:4f:45:aa:
b7:58:30:f6:11:ad:9e:e4:f8:cc:91:97:fd:0d:0b:
39:a9:43:45:67:69:43:12:4c:ba:32:63:69:de:99:
70:ef:09:bb:4a:49:55:9d:8c:fe:1c:fc:b1:40:a4:
9f:f2:16:c7:3f:8e:4a:8c:77:00:1c:b1:bc:61:db:
63:fc:e9:3f:bd:fe:5a:21:97:8c:65:fa:96:11:04:
24:a5:97:ff:74:fd:99:e1:5a:a1:f5:4b:7d:b2:9f:
8d:a6:56:07:d2:e4:bc:c2:5d:a8:40:de:b7:4a:01:
2c:8d:7b:cb:84:2e:20:4c:c0:9c:0f:55:01:91:be:
b7:cc:e6:b6:57:84:dc:24:83:a7:1f:1b:80:9a:0b:
16:de:4f:69:aa:2a:ab:b4:18:42:10:2d:9f:ae:5e:
65:b9:3f:c1:c0:36:75:56:49:7c:bd:82:b1:3c:6c:
d7:d9:f1:f1:a2:e1:9b:e1:3c:c6:50:b1:cb:24:57:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:EF:4F:64:96:D0:2B:46:D2:7A:11:73:8A:86:B1:1F:D8:B7:6B
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:ef:04:f3:ca:e2:39:06:55:de:7e:fd:9f:94:05:84:3a:
e6:20:ad:8d:49:14:c2:32:45:4a:ea:1f:d6:35:7c:41:74:9e:
97:80:38:39:89:81:b9:ef:48:9d:7a:12:59:3c:b4:3d:49:33:
e3:32:ec:92:c7:16:cc:2a:30:66:29:f0:6e:9a:d5:2d:1f:3f:
9c:87:c7:e6:6f:22:fc:e0:6a:90:9d:25:88:69:fd:e9:d7:d8:
87:93:75:aa:d0:86:64:95:f6:fc:67:89:0f:16:bc:c1:0f:11:
0f:e3:c5:04:ab:74:d7:64:21:d4:90:b6:d8:c8:9e:ac:d1:ca:
a8:d5:06:91:53:2c:dd:f0:28:cc:9d:73:d3:6d:46:a3:2b:bb:
c6:cd:dc:c8:96:83:98:df:35:e9:ed:fe:2c:ba:41:36:a9:98:
e4:c7:19:8d:1f:1c:79:0e:9f:14:2d:1d:dd:63:f8:b8:2b:9a:
d8:ed:72:16:19:e7:a4:93:dc:6f:52:24:c4:0c:10:7a:7f:28:
20:d8:ac:8f:f2:7d:8a:c3:db:12:19:04:5c:8b:2c:c2:da:af:
46:ba:aa:57:5b:fb:2f:7e:92:5b:0c:28:0a:05:1e:b3:11:ee:
0d:6a:6a:27:0a:70:ed:f6:a0:f3:ae:46:7b:55:9d:90:8a:9c:
08:49:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:03 2026 by rpki-client