Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: CIyrWllD10MPhtpIt5OjTQrPYDmGLdQfYODrbbGCJw8=
Subject key identifier: 06:80:B0:56:42:9C:C4:1C:E5:BB:F4:54:A6:74:C4:92:27:54:D4:AF
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019EBF23625EEACACBEA3B17776B1C580BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 04:00:27 +0000
Manifest this update: Sat 13 Jun 2026 04:00:27 +0000
Manifest next update: Sun 14 Jun 2026 04:00:27 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: BYCK+FwgHQHdsy/CA27qMlm/Kv0funOu4InQtZ5FbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:62:5e:ea:ca:cb:ea:3b:17:77:6b:1c:58:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Jun 13 04:00:27 2026 GMT
Not After : Jun 14 04:00:27 2026 GMT
Subject: CN=0680b056429cc41ce5bbf454a674c4922754d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:ac:2e:1c:0e:cd:79:9c:71:30:85:76:2c:
80:b5:fc:7f:f4:1f:f2:a8:a3:87:a4:b4:dd:96:e8:
30:5d:a4:20:c4:57:6a:75:f9:41:c0:83:b3:02:aa:
37:a7:ac:07:04:77:4c:cf:06:0c:7d:62:9d:f8:72:
78:b6:24:1b:6c:3d:f1:83:98:cf:ad:18:c5:25:f3:
87:25:d3:4f:80:e7:ec:a7:ff:22:cb:51:59:d8:27:
27:6c:73:29:f6:f0:b3:7e:44:d7:c3:28:6e:77:26:
0b:9e:3d:e1:65:3c:c2:78:a8:09:49:a3:6d:1f:fd:
a3:c4:78:49:de:76:e4:58:e4:96:ae:11:63:25:fc:
0b:ef:ab:69:19:7a:ef:b7:38:a4:d2:3b:d6:1b:88:
c1:77:f6:58:fc:87:d1:9b:0b:90:dc:e5:a9:fc:49:
54:ec:3a:8b:a4:a1:f2:fa:df:65:af:6e:cf:77:62:
78:a6:da:f8:e5:ab:7d:1e:0f:fc:00:7f:3c:27:d6:
a0:b6:8c:24:02:d8:be:14:b9:c6:54:7b:b1:e9:21:
2c:3e:b8:f9:6f:fd:92:ab:ad:5a:65:d7:2c:c2:f5:
cc:01:c1:12:19:39:71:bb:3b:2e:45:79:20:a9:71:
3e:27:98:76:c2:70:95:61:f8:ce:00:4e:c4:4c:6d:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:B0:56:42:9C:C4:1C:E5:BB:F4:54:A6:74:C4:92:27:54:D4:AF
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:88:07:2c:ff:9e:f4:af:44:c0:d6:72:8f:7d:f8:79:80:
f7:b7:cb:b4:bc:93:16:b1:d9:20:d8:52:85:00:5e:6d:9b:bd:
33:43:0c:f8:6f:11:ef:58:1d:9a:e5:58:ae:c0:fe:ff:a0:bf:
3e:bd:ef:9c:29:7a:3b:25:22:ab:a1:9b:42:06:3d:3b:7e:55:
6a:56:ad:2a:79:5b:48:1e:3f:de:df:33:95:64:86:b9:fe:df:
0f:66:31:8c:f3:71:fa:fe:1a:f2:38:c7:95:f8:b6:0a:a0:fa:
70:c5:37:d4:e8:b7:47:c1:cd:9c:ff:4f:8d:86:3a:06:ec:3a:
aa:c1:9f:87:12:4b:39:91:fb:d3:9c:c2:6c:36:0e:90:8b:90:
27:ea:60:5b:e3:a2:68:5b:cf:78:31:da:b1:28:a8:ef:ca:0b:
bb:f4:40:47:33:4a:be:e9:80:b0:c1:27:3c:a0:17:1b:55:20:
e0:a8:be:d9:e1:ae:2b:b0:93:65:8e:a1:75:b4:d0:f6:55:6d:
48:f6:d5:e4:26:ea:83:90:06:08:0e:df:e6:da:6c:bc:64:7c:
e0:d8:c5:b8:fc:62:fe:40:4a:4d:ba:dc:77:43:0b:16:b8:6c:
26:53:08:d9:ad:29:f7:24:10:d5:5e:1d:a3:e0:a6:5a:27:a9:
c7:f0:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:33 2026 by rpki-client