Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: aSEilOgm9zqYP7bP9DM6ANcVJueXTAM10VJZKB5KJds=
Subject key identifier: 63:32:F4:A7:85:40:B1:0E:A4:1F:6D:32:D4:96:20:4F:29:B5:E5:CE
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 019DA48AAEB2D8553BAF33B6BC1C9D878BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:00:45 +0000
Manifest this update: Sun 19 Apr 2026 07:00:45 +0000
Manifest next update: Mon 20 Apr 2026 07:00:45 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: mbi8uDuHngZzGH/1GRfZPE5EEQG0vBK1b5+cmJy0IBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ae:b2:d8:55:3b:af:33:b6:bc:1c:9d:87:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Apr 19 07:00:45 2026 GMT
Not After : Apr 20 07:00:45 2026 GMT
Subject: CN=6332f4a78540b10ea41f6d32d496204f29b5e5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:ce:1a:c7:13:58:a2:56:c9:19:e0:0f:dd:
0f:36:17:11:00:82:f8:2d:b0:37:b9:98:a3:1f:4f:
af:61:75:d3:76:df:ab:67:6f:1e:6d:1e:29:ed:c1:
ce:be:a5:0e:64:f2:12:d6:ed:de:88:2e:d0:c3:de:
80:49:60:15:15:3d:2a:d6:3b:e3:9b:40:e6:05:c1:
56:20:36:8c:91:a5:ed:1f:82:bb:82:66:c9:f0:06:
15:5c:2d:78:de:ac:96:2d:7e:6c:38:32:db:6b:bc:
b4:87:e0:9c:73:8c:49:b6:af:0a:03:35:d4:4c:82:
08:0d:ff:da:5d:82:cd:c4:4a:bd:9b:b7:ec:dd:6d:
51:11:9f:8c:52:91:b9:60:4a:97:31:05:66:a7:9d:
a9:c0:0d:f5:97:3d:47:4c:e7:8e:cf:7d:ef:3c:ed:
90:74:f4:d4:82:62:5a:35:0f:59:79:a6:36:dc:f3:
b1:7a:d8:bf:43:d7:0b:0b:7a:f8:c5:2f:54:2c:91:
32:96:27:f2:73:f6:36:f6:4d:46:cd:30:ea:c6:19:
e4:a6:a3:06:7e:55:dd:68:36:10:91:47:2e:9d:15:
d8:5d:ef:63:97:de:6b:aa:3e:d6:0c:27:9f:37:fd:
03:2a:bc:69:e5:d6:eb:57:bb:58:35:ae:ec:a5:94:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:F4:A7:85:40:B1:0E:A4:1F:6D:32:D4:96:20:4F:29:B5:E5:CE
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:96:8b:f0:d2:ca:56:64:8a:fa:54:62:16:fa:fd:b0:d1:
26:84:69:ce:d6:3d:99:d0:52:69:a3:cf:21:68:33:8e:76:fc:
14:26:b7:1a:b0:4e:ca:46:da:94:98:71:72:1d:6c:bc:95:2e:
57:3a:25:71:2e:d6:d5:50:a0:78:eb:ec:a2:bb:84:d2:25:eb:
79:f6:04:5c:4a:2b:24:21:e6:c9:61:c5:af:e2:3d:41:bc:35:
d1:b9:b9:b5:d0:07:43:01:0e:d7:9f:1c:aa:4e:7a:cf:2e:92:
ab:a7:97:3d:f6:c2:a3:ab:a5:d1:c0:7a:43:13:b3:a8:cb:06:
24:5a:f3:f8:67:31:48:8c:6f:24:a9:6b:cb:57:6c:ac:16:90:
53:27:ae:22:9e:57:d1:21:95:8f:d6:2e:34:17:82:d6:73:9d:
05:04:21:59:af:15:38:af:82:a8:df:21:08:cb:0a:30:11:45:
38:ab:5b:f5:36:66:10:9a:b4:46:fd:c8:fa:8d:cf:2b:4d:13:
75:e7:c9:d0:9c:54:20:26:ee:f7:ce:f0:94:3c:5c:a7:d0:13:
27:58:b8:1b:9d:e1:cc:68:65:a8:c3:80:c9:b3:77:12:74:78:
70:b5:26:d5:57:2e:20:2c:33:45:08:1b:68:35:8f:97:12:f7:
13:9e:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:21 2026 by rpki-client