Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: Ruj1xFuepC9eSWq+n73YVsLpZFEqZyLE1f9nC99uMms=
Subject key identifier: 60:86:D2:C3:E8:45:DB:4F:90:78:6D:33:11:BA:B8:F6:20:87:F2:44
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019CAB6AD4C138208DFF172D5D1B5CD4F71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 12BC
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: /FAuzrYdUJ69SMusTBFgp4f9kXrtLCNpin+666XGIMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d4:c1:38:20:8d:ff:17:2d:5d:1b:5c:d4:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=6086d2c3e845db4f90786d3311bab8f62087f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:84:34:80:24:5c:2f:2e:9a:7a:25:09:b4:
03:6d:8f:0a:bc:2e:a1:64:13:40:cb:0a:0b:e2:33:
ac:e9:ef:9e:c6:3e:92:4f:15:fb:7b:bc:1b:2d:8b:
7e:a7:a6:95:11:e8:36:15:d4:bc:cd:81:66:86:e7:
38:cb:e4:da:d8:4f:fe:32:06:f1:bf:40:0e:88:d5:
5e:fe:1e:ca:d1:a1:2a:0f:7b:de:f6:39:47:1a:29:
8d:06:ed:cc:cb:0a:2d:d2:57:43:ff:df:36:5a:50:
08:82:da:e2:71:e1:ad:92:07:13:b0:0d:38:45:b5:
b0:bb:45:92:21:23:af:30:76:b8:71:1e:ad:c6:f7:
1d:18:0d:3e:8d:53:2e:8f:e4:64:f7:79:74:c7:ce:
38:88:fb:93:1e:5f:57:16:31:77:02:0a:99:c0:f0:
de:82:8d:63:fc:78:bc:b2:b9:b3:55:8b:c5:8a:ed:
c9:10:c4:c2:16:c7:72:a3:56:65:63:be:b2:2e:9a:
42:b9:ef:09:7c:e1:79:e9:7c:69:85:66:bb:e5:5a:
a1:bb:82:62:f6:ba:e1:13:1d:9f:df:d3:f8:db:af:
8f:94:f6:1f:9a:c0:bd:75:a9:3c:35:7e:25:c0:d8:
68:d8:00:88:2d:cf:0c:58:12:d2:4a:00:0a:a2:a3:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:D2:C3:E8:45:DB:4F:90:78:6D:33:11:BA:B8:F6:20:87:F2:44
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:a9:e6:ff:28:42:51:97:da:16:83:43:b8:e7:78:d3:e7:
19:dd:a5:96:86:25:ac:2c:a9:14:38:77:9b:33:73:46:4b:f7:
f7:0a:84:51:66:bd:7b:b3:ca:ce:19:67:49:79:04:0e:5d:bd:
88:51:6b:57:0d:72:65:16:aa:83:d7:bb:b3:b7:bc:8c:5d:5f:
f1:4f:32:05:53:5b:04:8f:fa:03:e1:79:54:d2:14:c6:ab:3a:
90:45:4d:41:4d:46:3e:03:e4:e5:cf:87:4c:0d:71:27:ea:6f:
8f:9e:02:63:97:5c:9b:1c:03:fa:9f:8a:ba:f1:c9:79:9d:44:
cb:1f:74:be:78:7b:4c:3c:20:de:66:bb:31:3e:4e:d2:19:3a:
ae:cc:24:12:4f:d1:31:0b:6a:85:c6:f5:57:b2:34:eb:91:e9:
8e:44:30:76:49:2f:d0:b4:89:d2:61:9c:78:a7:99:0f:6d:4e:
09:26:0f:fc:46:3c:76:b3:ce:2e:9b:5d:85:58:ed:b2:d5:1b:
51:db:39:ca:05:ad:89:ba:62:01:f7:5c:f2:8a:29:e6:44:9f:
30:15:ce:11:15:97:d0:2e:69:5f:11:dc:ca:0c:82:39:b4:5f:
bf:a0:77:8e:76:12:40:ba:dd:25:6e:52:63:de:b9:f9:70:9c:
0e:07:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:09 2026 by rpki-client