Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: TprEWz36r/3c07IRepP3MydhOr3UueTSoLcTCcifBr4=
Subject key identifier: 49:25:D0:4B:53:5D:BD:85:81:45:DE:A0:2F:26:AA:8C:73:DF:6C:5A
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019FA8D0707BCC495854831A61C94CF69809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 13:01:00 +0000
Manifest this update: Tue 28 Jul 2026 13:01:00 +0000
Manifest next update: Wed 29 Jul 2026 13:01:00 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: HWQ0g6iARTLcI7CV/a8kxZNAICEK1ajMc/hxKFzNBqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:70:7b:cc:49:58:54:83:1a:61:c9:4c:f6:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Jul 28 13:01:00 2026 GMT
Not After : Jul 29 13:01:00 2026 GMT
Subject: CN=4925d04b535dbd858145dea02f26aa8c73df6c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:6f:50:c5:7a:74:c1:0a:6b:c5:c3:8d:25:
0f:67:e9:b1:bd:45:9a:33:46:5d:0f:fa:6c:f0:82:
57:6d:8e:32:a4:0d:74:21:20:6c:c2:46:04:25:ae:
17:63:be:9b:00:03:90:3c:1f:16:b5:f4:7b:9b:9b:
fd:fb:28:1c:5c:b1:4b:35:84:52:9b:bb:bc:5f:9f:
23:35:47:22:b2:7f:b2:e8:61:44:5b:72:ed:27:fc:
49:fe:98:42:d9:d4:2c:d5:58:e0:05:93:a9:0e:a9:
f7:52:7b:c0:c8:1b:ae:fe:30:4a:61:96:bf:a4:b9:
c6:72:8e:9e:6e:06:70:7b:79:02:2c:9e:bf:81:6f:
48:91:5f:d0:e6:fc:9a:5a:2f:ef:f8:e0:db:c2:00:
2f:c2:95:c1:ba:43:56:47:d3:d7:75:4e:06:41:5f:
28:db:35:af:47:12:72:d6:4a:35:6d:b2:07:d3:a4:
e9:6e:a7:a0:52:dc:3f:c6:9a:c4:5f:c3:ff:a2:24:
c2:5a:e4:4e:d4:9c:03:d1:8c:22:6e:dd:92:21:f4:
87:d2:6e:b9:91:23:be:44:fe:06:48:f2:3c:8c:90:
0f:ee:be:62:19:3b:2e:74:b9:d2:c8:d1:97:fb:84:
e0:24:7a:66:49:45:d6:8b:ee:6b:9d:99:59:23:33:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:D0:4B:53:5D:BD:85:81:45:DE:A0:2F:26:AA:8C:73:DF:6C:5A
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:f9:c6:df:87:00:2a:1d:b6:0b:b3:79:4f:b2:72:5d:b6:
2b:3a:bd:91:b9:36:f5:f1:b6:ac:b3:17:86:33:12:20:c3:92:
55:e2:9a:1c:54:35:06:b5:eb:74:07:13:e7:1f:16:2e:cb:fb:
68:43:68:c7:48:69:c0:ce:50:8a:6b:14:bf:f1:13:17:88:da:
18:54:ac:ba:da:86:f0:c7:57:6c:85:0a:f9:59:42:2f:11:9c:
7c:4c:e9:b6:71:9c:e0:cc:ee:58:20:da:2d:ea:e9:90:df:13:
c6:39:ff:2b:8a:3b:2c:57:6c:4b:c3:47:55:af:3c:35:23:fd:
58:33:4b:1a:bb:61:9b:0f:4e:c6:fc:af:e7:21:d6:61:5c:27:
01:f2:28:d6:3a:15:20:4f:83:95:67:3e:e9:03:12:4d:8b:88:
74:53:0e:c7:47:ef:a9:8b:74:58:87:5f:a4:b0:5b:94:54:cc:
f2:97:6d:d0:ad:a4:26:d8:b1:db:56:b6:35:41:f9:65:37:26:
4e:e8:86:fd:cf:9b:8e:1c:b4:eb:b5:e9:da:7b:b9:d0:fc:76:
4f:a4:4f:06:87:63:20:97:7a:4d:f1:94:25:e9:f0:89:8b:53:
d8:f3:96:b4:80:d1:28:c9:fe:a0:8a:24:62:8f:2d:ca:1a:c0:
cb:0b:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:42 2026 by rpki-client