Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: 5GfCRRSO8ByhA0BSdeaSHBB4gUeNnhLrySIMbgYYjAg=
Subject key identifier: E0:C9:2D:4A:5E:37:90:27:AD:3F:A6:A0:D2:1B:E7:33:0D:2D:A6:AD
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019CAA216BE8089E1EE8C5495F5B05CA41C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 16:00:42 +0000
Manifest this update: Sun 01 Mar 2026 16:00:42 +0000
Manifest next update: Mon 02 Mar 2026 16:00:42 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: rYZA0DywREctBGGBBcB49OaIYZnCQPiFIQcx6clVKS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6b:e8:08:9e:1e:e8:c5:49:5f:5b:05:ca:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Mar 1 16:00:42 2026 GMT
Not After : Mar 2 16:00:42 2026 GMT
Subject: CN=e0c92d4a5e379027ad3fa6a0d21be7330d2da6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:05:bd:c6:e0:9b:68:18:d8:15:70:a8:9d:
96:cc:f6:3f:e0:3d:3a:61:78:0e:c4:67:8f:d0:c1:
8f:e3:7b:89:18:9a:f9:07:f4:85:93:da:84:34:77:
8a:62:f3:00:99:38:c9:45:e0:bc:b8:97:49:57:99:
6b:0f:0b:cf:5d:8f:31:8d:f1:86:8d:29:96:74:b4:
9b:34:04:ef:ca:0e:79:b5:2f:a4:67:81:21:35:e9:
3b:b3:43:f5:76:06:ca:92:38:14:49:a5:8a:02:dd:
4c:71:a8:ad:b4:16:12:7c:19:ca:3d:c2:d2:67:81:
02:a2:b7:46:aa:24:fe:b0:dc:bf:3e:cb:68:06:2a:
31:18:31:3c:fc:c1:9f:84:85:eb:68:83:58:49:ae:
5f:f8:c4:95:f6:7d:43:93:5a:8f:34:6d:63:55:d6:
e6:e0:04:f5:8e:c6:95:d4:a2:ee:65:ba:0c:18:2a:
1e:e3:76:65:3e:f4:7e:c7:9b:98:0d:88:b1:8d:82:
41:3f:59:5b:15:0b:e9:bc:74:81:f0:fc:52:ae:e9:
9d:4c:b5:9e:82:55:07:e8:5b:a9:c8:2a:b8:5f:bd:
8c:a6:b3:a0:ed:46:f0:7f:41:14:6e:71:9e:fb:b5:
e3:79:2c:2f:bb:b8:28:f1:4c:37:a6:0d:bc:db:09:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C9:2D:4A:5E:37:90:27:AD:3F:A6:A0:D2:1B:E7:33:0D:2D:A6:AD
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:00:c4:b0:4a:51:a1:8d:ea:69:0e:a7:0c:84:16:a8:c4:
97:f2:82:9d:0a:4b:ce:24:15:15:39:b4:9d:1b:0f:75:67:9f:
e0:82:5e:9e:c5:1e:48:e5:fa:6a:c4:d9:c8:2f:e1:60:cc:48:
f8:c9:7b:68:5e:83:f6:4f:04:cc:e0:a4:d0:b4:2d:d4:fd:e6:
2f:d9:34:bf:ec:99:a1:c3:4b:d3:e8:10:9d:af:c5:a6:bd:bd:
e1:95:f8:99:12:ab:78:42:b9:55:14:1e:7b:cc:c6:22:81:45:
ea:86:69:af:dd:5d:15:b5:2b:40:7a:93:6d:5d:cb:7e:8f:3b:
dd:ab:90:13:88:38:23:88:6f:25:55:e3:0d:7a:cd:a0:54:6f:
7b:df:45:3e:0f:9a:33:15:19:ab:13:cf:41:bf:2e:bc:ce:b7:
56:fd:3b:e8:a9:44:81:49:42:84:71:5c:2b:2a:d6:14:4e:7e:
fa:7a:98:0a:78:31:66:fc:81:90:41:4b:80:23:ae:b2:33:92:
3d:de:c0:ee:e0:7a:71:c2:e9:40:98:65:7f:25:02:89:df:a2:
4b:46:10:90:bd:0c:8e:02:55:33:18:5a:c7:3b:4f:75:4f:31:
9f:fc:ce:9b:bb:bf:12:cf:04:9f:0a:b6:22:01:2a:34:da:ef:
44:f6:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:52 2026 by rpki-client