Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: 9am/iU+LF2QnY/BYj8iwC8Ng3fjzduZNFOYsjRCY3t0=
Subject key identifier: 14:9C:DF:05:46:19:3B:03:FE:CC:AA:CC:63:72:BB:7A:31:4D:AB:B9
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 019CAAC65CDFEEB57DDF618D951B24DC5524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 19:00:52 +0000
Manifest this update: Sun 01 Mar 2026 19:00:52 +0000
Manifest next update: Mon 02 Mar 2026 19:00:52 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: x/6L/HhYuKTKIioRkrt5P4XOYrIcdlbfFNCL8zA5CFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5c:df:ee:b5:7d:df:61:8d:95:1b:24:dc:55:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Mar 1 19:00:52 2026 GMT
Not After : Mar 2 19:00:52 2026 GMT
Subject: CN=149cdf0546193b03feccaacc6372bb7a314dabb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:73:2d:72:de:23:ad:fc:4e:e2:4e:6a:41:
5b:f8:43:5f:98:f9:29:b2:4f:f6:44:f4:66:cf:3f:
66:99:84:9f:a6:91:e7:90:ff:1a:b9:be:95:8d:04:
db:da:1c:de:a6:b0:a8:9e:5a:5e:a2:cb:b1:c1:27:
7a:08:22:5b:dd:a0:2f:af:dc:47:c8:4e:f5:43:12:
80:0f:bf:15:ea:32:50:2e:18:d5:30:9c:cc:50:35:
05:7e:a2:17:bc:2a:67:c2:79:52:70:12:8b:34:e4:
49:67:21:18:f4:4b:a0:c1:2c:3c:8a:f4:c0:d2:f2:
e5:1d:8c:79:54:a9:c4:2e:29:00:44:92:46:5f:4a:
86:91:0d:b3:67:55:03:91:f8:a8:92:c9:c3:2f:2f:
c9:70:0f:48:cd:b2:e2:3c:0e:a1:30:06:24:40:f1:
26:f8:4f:a0:d4:88:5e:1e:d8:3e:4b:92:41:a8:9d:
12:39:42:f9:b7:70:c5:9c:b8:ab:f0:07:78:79:2b:
c4:68:af:23:70:5e:79:90:99:e6:ac:54:0b:c1:17:
44:66:9e:b6:f3:47:a5:98:74:45:e9:da:c5:db:15:
11:df:45:67:f3:e9:a4:26:6f:6d:6c:5e:f1:53:73:
ff:a5:85:4f:0d:e2:32:16:e4:ee:38:96:56:e7:d3:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9C:DF:05:46:19:3B:03:FE:CC:AA:CC:63:72:BB:7A:31:4D:AB:B9
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:25:2f:3a:b7:92:5f:e2:0c:86:8b:23:b4:f5:9f:44:01:bf:
d6:44:8d:ef:dc:90:68:d0:4e:6f:52:7c:80:f3:7e:c6:9c:8c:
b9:6c:46:7b:0e:fe:5b:e3:f4:86:33:e9:e2:a8:a7:58:c2:7c:
f4:1e:ff:64:2d:ea:5a:2a:18:5d:dc:d8:58:15:70:a6:6d:31:
4e:4b:7b:0e:8b:cf:f0:8a:22:f3:42:43:cf:e2:06:69:d7:3c:
97:1b:05:f0:cd:fe:12:cc:9e:86:6d:38:06:ea:70:d8:1c:fa:
95:cb:ed:b5:d4:5a:fd:23:dc:e1:bc:2d:75:55:be:5a:0d:6e:
fe:19:1a:52:ff:f2:10:aa:53:6e:15:33:ea:26:4b:2a:24:27:
d3:3b:63:45:42:bf:a4:d8:ec:35:98:d3:85:2b:b0:8e:1a:97:
f7:00:5a:e6:2b:4e:48:ba:67:1a:76:c3:80:ed:54:4e:1d:7a:
ee:d0:2f:a0:04:4e:d3:5c:29:fc:78:b2:a1:30:2e:5d:fc:8b:
d5:c4:73:b5:b8:59:50:69:21:d8:70:a3:0e:e8:09:3a:b5:8b:
f8:cf:69:71:6a:5d:69:69:49:34:75:cc:00:7f:ae:53:1a:4f:
e0:4c:b9:4f:78:11:54:db:e6:46:cf:b7:85:61:a0:81:42:0b:
df:be:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:51 2026 by rpki-client