Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: 1YvRaWnRW7QaGwsBDyD1lgpijGaAfitSXEqaY/GUPXY=
Subject key identifier: 6B:FF:98:BB:0D:13:5E:8F:C5:F8:BC:D7:B2:7D:72:CD:27:3D:27:BE
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 019CAC7DEE5F9DE9BFDBABBB1ED488D8FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 0448
Signing time: Mon 02 Mar 2026 03:00:59 +0000
Manifest this update: Mon 02 Mar 2026 03:00:59 +0000
Manifest next update: Tue 03 Mar 2026 03:00:59 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: T8blY7o2VBLgXkXtGzWbCUJHzaXjEi7zwxDJGdSvO+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ee:5f:9d:e9:bf:db:ab:bb:1e:d4:88:d8:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Mar 2 03:00:59 2026 GMT
Not After : Mar 3 03:00:59 2026 GMT
Subject: CN=6bff98bb0d135e8fc5f8bcd7b27d72cd273d27be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:d7:46:34:ae:f4:61:16:2a:18:e9:f2:9b:
f9:9e:b2:ef:dd:a8:26:f3:5a:83:fb:22:27:e2:e4:
5d:4c:f4:13:68:67:70:27:7d:66:77:18:29:8b:db:
af:5a:61:14:6f:47:36:37:27:69:74:9f:3c:04:6e:
93:be:7d:ab:3c:38:8b:b9:7c:41:1d:ce:63:1d:94:
c7:9e:f7:f7:25:ca:19:5b:30:b4:e9:c7:45:50:17:
db:7a:3b:75:a2:ab:61:76:14:f6:5e:bd:af:7f:69:
c5:b0:a1:58:88:62:fd:cf:1b:e0:a8:24:26:b5:e5:
2b:d0:5e:3f:28:ad:74:10:cf:59:eb:fd:e4:0f:4e:
a4:ab:2c:47:82:a1:0a:bf:84:db:db:09:75:dd:91:
a8:45:37:92:15:21:9b:44:ee:42:4d:ef:c7:1f:aa:
62:9a:b6:86:5e:09:c2:65:10:c4:8a:4c:8b:98:f0:
91:cf:21:0e:74:f2:44:48:63:0b:12:55:74:66:a3:
bc:78:2e:50:5a:2b:a4:d8:25:10:8f:f7:bc:41:b7:
90:df:ae:97:4c:6f:9c:1a:bf:46:ec:c3:6d:92:6c:
e1:1e:3d:c0:97:9f:b2:d8:f6:4b:6d:ca:68:da:bc:
27:35:51:d4:a9:5e:8b:2c:e3:d2:d6:b1:50:8b:6f:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:98:BB:0D:13:5E:8F:C5:F8:BC:D7:B2:7D:72:CD:27:3D:27:BE
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:77:21:74:8f:e6:e4:0f:14:50:9c:cb:c7:22:d9:c6:46:fd:
34:5f:9c:85:6f:83:e1:ce:95:aa:b2:34:2a:5b:12:24:d1:9f:
b0:d5:07:dd:61:4f:e5:67:44:59:b3:80:48:19:e9:ec:09:f3:
f9:14:c9:14:e3:00:62:4c:65:58:88:72:cc:14:79:c7:82:96:
84:ca:5d:a8:21:3e:29:a1:1e:f8:ef:f8:d2:19:0a:30:db:db:
55:ee:d9:af:91:c5:a7:00:b3:10:8a:0b:6a:3c:01:c6:53:d7:
80:a7:e5:94:c6:2c:1d:c5:af:a1:65:33:0b:68:a7:a6:2d:9e:
35:7d:00:09:b9:08:05:6d:f1:db:72:e1:c6:0a:3b:28:b3:70:
7c:8d:3c:c1:13:10:34:57:84:ce:41:0f:fe:b0:8d:cb:17:92:
e8:0c:78:96:3d:a3:ea:9d:f9:e0:a7:b8:cc:ac:9a:76:c8:f5:
c9:ce:1e:a7:c9:ea:3a:60:6f:03:86:42:5f:ce:76:f2:55:eb:
7f:24:8b:21:66:13:a9:db:67:36:62:0a:bd:75:74:3f:b7:93:
75:34:50:b0:68:79:8c:2f:3e:2a:11:5d:90:e4:56:c5:78:a3:
ba:89:c8:82:85:ae:35:54:dc:9e:b8:f9:af:14:43:0d:22:61:
5e:66:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:50 2026 by rpki-client