Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: jRtI5FMGrNBtahvtxzlRbog5GyFTSlH17/jYyOcZYZs=
Subject key identifier: 97:1E:34:AB:D6:90:92:5B:E3:41:AE:51:DA:33:AE:FF:15:1A:18:65
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 019D9AE38F0AF3AAED90A915CA556A5E372E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: LodXBDdXNzgLU1vcBMTCxVUZqZ8PIWWemHh4uQwQPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8f:0a:f3:aa:ed:90:a9:15:ca:55:6a:5e:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=971e34abd690925be341ae51da33aeff151a1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:ef:01:ac:cc:4d:86:a7:75:0d:c0:22:f1:
ab:59:fa:15:b5:b0:9b:e7:33:b1:ef:ec:bf:4d:1b:
21:01:43:b7:01:31:75:4f:c0:bf:e0:30:e1:11:5a:
18:6c:46:8b:7d:d9:9a:8f:37:d6:dc:0f:6e:b7:17:
ed:a1:04:38:f7:25:c0:0a:4f:df:a5:53:1f:b4:5f:
92:e3:a7:9a:59:24:26:af:43:e8:c2:11:b9:92:2b:
00:55:5f:f7:df:0a:9e:0f:f9:7b:8a:91:0a:0c:5c:
c9:c8:46:0b:13:21:e5:42:e8:b1:85:1d:ec:60:66:
ca:d6:e7:c1:94:8e:d6:15:c2:a8:08:f7:ad:88:04:
f5:2d:9a:c6:99:db:6e:27:fe:26:49:f9:4e:70:29:
82:42:6c:b3:dc:fb:dd:df:2f:ea:08:c4:60:58:18:
bd:5a:20:5e:80:be:1c:cf:39:e0:f3:6e:c2:98:cb:
95:ed:3b:7a:14:01:73:e2:30:92:20:8b:90:2d:81:
ce:11:b6:d4:8f:24:be:e9:d2:e7:81:c6:df:83:96:
e3:2f:d4:af:66:01:b3:4d:32:3b:85:c6:fe:7c:5c:
40:51:ce:75:92:fe:9a:4e:58:f5:4e:94:e0:5a:20:
ad:42:66:30:da:ff:7f:f4:25:ac:67:a9:7e:0c:26:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:34:AB:D6:90:92:5B:E3:41:AE:51:DA:33:AE:FF:15:1A:18:65
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:eb:29:0c:18:4f:d2:a1:69:fc:b3:1b:09:e3:8d:31:d7:
ef:69:2a:5f:3f:74:b5:07:75:ca:a0:dd:c1:e7:df:1c:ad:db:
b3:9e:70:0e:a6:b7:18:72:cd:d2:89:ff:6f:dd:56:5a:99:41:
6d:79:72:5a:06:ae:85:00:fc:97:a2:08:11:9b:6a:09:b7:d6:
32:87:e1:ec:20:ce:5a:3a:83:13:49:59:38:1b:16:b6:69:ad:
06:0b:e2:45:20:6f:f4:99:0e:38:e2:35:31:f9:58:cd:35:7a:
f0:78:00:3f:0e:ca:27:92:83:ce:a3:d8:bc:99:0d:5d:d4:c5:
5e:f2:92:e3:e6:dc:9a:1d:12:71:15:1a:e4:62:b8:85:df:49:
ec:c3:d5:71:b8:70:4d:76:32:d7:f0:ae:bc:0d:1b:5e:c4:9e:
8c:d5:0a:d2:8e:a9:44:0a:43:ba:fc:49:c8:df:8e:9c:da:fa:
cf:e6:a8:e4:e0:bc:1e:22:ae:bc:e0:38:40:ab:0b:d5:12:75:
2f:a3:46:23:ba:6a:61:97:5e:0c:84:4d:9b:aa:53:f7:d8:03:
f7:8c:57:c5:68:f7:9e:f8:0e:a9:cc:ed:bb:2f:66:cc:65:9a:
6a:23:c4:87:f6:39:ff:62:53:05:d0:e2:ed:82:4d:2c:d6:e8:
c0:fc:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:21 2026 by rpki-client