Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: Jlz+N77lLDWX5ETmAAk8rUqR4D+4yscKi85QBXaiuao=
Subject key identifier: AE:8F:31:0F:6F:2A:D1:F1:6F:47:B5:B0:DD:41:13:E1:6D:77:28:31
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019D9AE30D26E44C5C37E31A3E7CB3F48ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 1338
Signing time: Fri 17 Apr 2026 10:01:04 +0000
Manifest this update: Fri 17 Apr 2026 10:01:04 +0000
Manifest next update: Sat 18 Apr 2026 10:01:04 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: 2riEv7KwieWEWieFpTD7jmmu4h/eKy962j8Bu3XVaNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0d:26:e4:4c:5c:37:e3:1a:3e:7c:b3:f4:8a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Apr 17 10:01:04 2026 GMT
Not After : Apr 18 10:01:04 2026 GMT
Subject: CN=ae8f310f6f2ad1f16f47b5b0dd4113e16d772831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:c6:84:49:31:60:9e:8b:c4:a5:34:0b:83:
b0:cd:25:e9:c3:73:f0:c0:f3:cf:42:fc:d9:a9:ff:
ff:64:13:f4:2e:20:bd:d0:6f:ea:fa:64:b1:62:2b:
3a:5d:27:58:7d:b6:c2:c0:b1:cc:6f:c5:b4:9c:59:
e7:48:9c:cc:18:77:30:88:b3:cf:b5:af:3f:72:18:
53:37:7d:53:21:f5:5f:87:7f:63:67:27:83:90:c8:
37:3c:3a:1c:76:36:dc:c7:05:a3:42:29:a8:d2:56:
bd:9f:c5:fa:3f:e9:e8:7e:2d:d1:a8:72:36:bd:24:
17:3e:7e:1c:21:eb:17:a2:9f:6e:c2:cf:1d:f7:98:
3d:b4:23:04:f5:b8:79:bc:5a:c0:33:92:38:64:9d:
11:95:d7:d2:d6:e9:59:7a:53:5e:23:3b:e8:60:3b:
62:f2:50:c5:48:54:d6:ca:49:79:a5:50:a9:19:1b:
be:e4:f3:d4:d3:27:6e:ba:68:5c:e9:b1:27:be:22:
1d:66:dc:7c:0c:a2:b9:88:3a:61:ee:ac:8d:80:1b:
f7:a7:b3:b4:f1:5f:d4:83:ee:22:76:eb:2d:09:7d:
e6:8c:e3:11:fe:01:e0:1b:32:64:b2:8e:41:6a:d9:
55:5f:e5:05:29:99:14:bd:04:f0:3e:43:ab:e3:68:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:31:0F:6F:2A:D1:F1:6F:47:B5:B0:DD:41:13:E1:6D:77:28:31
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:14:37:04:39:e5:5e:d3:4b:b2:dd:ad:fc:ca:62:84:fd:
c1:b7:f8:e2:04:81:6e:3d:e0:2c:12:a7:33:a4:26:18:01:17:
3e:e3:b2:3e:b2:76:c9:08:d6:8c:88:2a:e2:77:ba:80:ef:56:
08:00:b4:b5:8b:2a:2e:92:6e:f1:68:5f:83:df:3a:75:f0:c8:
3b:1a:66:da:b2:25:96:9f:1b:64:5a:df:8e:bd:40:46:f1:fd:
df:08:8f:b2:88:c4:5c:70:a9:71:54:52:a4:b2:3b:bf:3e:3e:
69:54:cb:f7:db:84:ca:05:46:7e:35:7c:eb:86:b2:c2:27:9b:
94:e3:3a:cb:42:f1:8d:af:a2:b2:12:19:af:ab:85:cb:8b:ab:
9b:3d:24:fe:44:c0:e8:eb:f0:eb:05:8b:b8:27:cd:63:f0:8d:
2f:14:34:50:b0:00:3f:a6:47:59:e9:c6:51:d1:21:0e:2b:9f:
17:33:70:4c:11:44:9e:e4:da:fc:54:79:99:da:b9:62:92:f6:
8f:18:2c:5f:63:14:0f:c2:9a:9f:35:ec:c2:67:2f:60:53:8c:
d2:09:c7:cd:fe:e5:ef:10:aa:28:4c:4e:e1:f6:09:07:e4:cb:
43:b8:46:00:85:8a:18:73:bf:f4:4d:97:39:ce:e1:33:1a:b0:
fa:d4:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:40 2026 by rpki-client