Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: eMRuWJuyADYPyIVpCPAaGr/xVR1QwYhEUzSZ96G3Rpg=
Subject key identifier: 31:13:84:53:C4:BB:CE:23:48:A4:BA:3A:B6:B9:88:6B:91:F7:FE:17
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 019CA945C269B7A9D680EC196EB2635DE7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0BE6
Signing time: Sun 01 Mar 2026 12:00:47 +0000
Manifest this update: Sun 01 Mar 2026 12:00:47 +0000
Manifest next update: Mon 02 Mar 2026 12:00:47 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: cY8EmPkuUX0J5zjJBClBEELdq532K+8nct/Fb7GZWjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:c2:69:b7:a9:d6:80:ec:19:6e:b2:63:5d:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Mar 1 12:00:47 2026 GMT
Not After : Mar 2 12:00:47 2026 GMT
Subject: CN=31138453c4bbce2348a4ba3ab6b9886b91f7fe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:c3:c9:31:04:a0:4c:dd:a2:8d:8e:32:ce:
cf:aa:66:2a:c6:85:a7:de:08:d0:69:f2:44:39:56:
92:90:4c:18:07:24:61:6f:00:0c:6e:33:7d:48:0b:
13:a2:c2:66:9d:20:5b:2e:c5:08:a9:b0:03:25:d9:
7f:b2:13:95:26:73:dd:1b:dd:08:c6:66:3f:ee:c9:
d6:2f:0c:f5:58:f6:8f:fa:67:6a:ca:0d:eb:c6:d4:
37:3e:a0:5b:26:0b:89:19:d1:05:71:87:15:d9:5a:
9a:0d:41:03:2b:3f:dc:f8:72:cf:b0:98:b7:25:13:
11:50:74:c6:a1:90:a0:90:f7:81:7e:a1:56:31:f6:
4b:a7:df:ad:b6:dc:c1:73:ab:a9:4c:13:e4:44:ce:
ec:af:03:cf:03:f0:7f:77:4c:2f:fb:42:8b:68:d1:
5e:f2:7a:02:80:44:c0:5c:77:ba:6f:08:1c:3e:ee:
75:d4:78:ea:9e:d5:66:66:c2:21:7c:f1:1c:21:26:
77:d8:17:49:b6:9e:2e:08:6b:9d:39:7e:38:88:9d:
34:98:40:4a:10:67:79:a7:78:05:a9:25:bf:ce:08:
a3:55:21:50:af:01:b0:d6:a1:ac:ae:3e:34:1c:3f:
63:a0:95:f7:05:8d:8a:6f:d7:3d:42:e4:64:1c:f5:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:13:84:53:C4:BB:CE:23:48:A4:BA:3A:B6:B9:88:6B:91:F7:FE:17
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:c3:98:3b:47:c5:81:a2:e5:d2:b1:58:23:77:fc:48:49:
0c:9c:22:88:94:eb:92:e8:d5:08:cc:20:d8:b7:e6:f3:44:29:
76:ec:2f:74:b7:94:ef:59:66:c8:cb:08:ef:3f:21:4c:1f:64:
51:a6:83:a6:7e:6e:7e:f9:20:6c:27:ae:e0:63:e7:08:13:21:
10:a3:68:fc:ee:35:cc:2a:14:ad:b0:a1:b2:6e:5f:03:b8:30:
d3:8f:db:91:4a:f5:07:07:84:18:94:34:c9:e6:fb:d9:30:a2:
d5:2d:34:66:cd:36:93:27:c7:6a:f3:36:67:38:da:7e:47:bb:
2e:6a:ac:70:44:03:6f:5e:a1:4d:35:60:a3:a8:a0:f1:42:30:
53:d6:1c:51:21:20:0d:b5:58:e7:e8:cf:61:e3:5e:09:65:30:
ea:55:2c:ea:5d:b9:23:53:68:26:41:32:1c:fb:c8:20:79:a3:
e7:e5:9f:ab:14:b1:ea:ec:7e:6a:9f:4a:ea:ba:f0:fc:53:59:
a4:e5:bb:5b:bc:72:13:a4:d7:42:fb:a2:6f:8a:9c:5c:85:0b:
81:a6:8b:ff:d4:02:1b:f8:5b:62:1e:2a:35:b7:97:36:0c:f7:
f3:e4:5e:b2:07:16:2b:2e:ec:9d:0d:cc:d6:a8:de:89:b6:af:
54:e2:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:58 2026 by rpki-client