Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
File: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json)
Hash identifier: g+NT3em5MaAWV30cFsUtJcE6mzqPKfu70Ainez2ge74=
Subject key identifier: D3:12:6A:63:5A:ED:6F:79:D9:AA:70:70:2D:BF:8F:C5:5D:A6:A0:D7
Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
Certificate issuer: /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Certificate serial: 019D98F4DE9942DAF10831D1B429CBFFB274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
Manifest number: 18A5
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: TyJtKjXttbscNbLwrM6mO7Z+9c+gmhUAyu7Rv2PSC4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:de:99:42:da:f1:08:31:d1:b4:29:cb:ff:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=d3126a635aed6f79d9aa70702dbf8fc55da6a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:23:1a:ab:c0:93:fe:c1:53:f0:bd:e6:47:
10:17:22:c1:e2:c9:6a:05:ca:f9:42:c7:77:67:ec:
27:e1:80:1e:7c:63:76:a9:be:b9:f9:5d:88:3d:26:
71:30:48:28:c7:e5:da:a0:90:8f:2b:cb:59:ec:8d:
ab:21:8c:77:80:12:98:56:7d:6d:9f:d4:63:bc:fe:
89:a4:90:66:0f:a3:77:98:1e:24:36:df:a0:ed:e0:
46:e4:ae:44:47:b3:d9:8e:c8:69:bc:10:4b:de:38:
6e:3d:11:c1:fe:53:28:00:f5:4c:c6:fc:bd:90:57:
c1:55:e7:98:af:c6:28:49:cf:92:c6:61:b3:3c:60:
ba:5c:3c:d9:23:65:e6:b1:88:6b:76:24:d2:99:68:
25:bc:95:21:56:61:54:cd:08:d9:4e:50:f3:3d:73:
d2:2a:2b:54:05:b6:61:41:4a:e5:51:2e:e9:3e:be:
88:64:b8:27:df:70:8b:6c:99:fe:d9:66:8e:78:21:
23:80:1d:15:24:1d:bd:57:5b:f9:4f:95:63:f2:c5:
27:0d:6e:f1:c4:74:a3:6c:8b:82:7f:ad:62:82:58:
94:a2:73:59:bb:dd:0d:f5:c4:18:90:d8:68:0b:68:
5f:d2:8e:cb:1e:8d:0d:de:00:34:30:78:85:d0:b3:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:12:6A:63:5A:ED:6F:79:D9:AA:70:70:2D:BF:8F:C5:5D:A6:A0:D7
X509v3 Authority Key Identifier:
keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:cd:a5:03:ee:bb:7b:44:58:63:ad:08:87:b2:87:0b:a2:
0d:e6:f6:13:fc:0f:ad:86:a4:4e:bb:a1:29:d5:52:ad:e8:6c:
89:6e:11:c7:91:78:45:68:0d:99:f3:8a:31:75:b5:c7:f4:71:
41:82:0b:4e:b7:7b:e3:79:37:5e:cd:71:ec:18:e7:ed:20:3e:
b3:c2:68:b5:dc:96:e9:31:20:76:5b:7d:46:f1:16:19:4a:bc:
eb:fe:77:19:2f:dd:c5:65:34:32:7f:7d:a9:ec:37:bc:ce:e9:
9a:8f:65:ee:55:5d:3b:2b:91:2d:1a:6d:f7:35:bd:5d:28:2a:
e2:69:48:e8:90:ec:6b:81:fa:e4:cf:9c:a4:23:f3:27:e1:b9:
81:e6:f2:e5:ed:54:d7:84:fa:d9:82:12:15:62:59:01:9f:8a:
c3:8d:60:4b:de:74:dc:c3:f2:87:da:cd:66:c4:e5:7e:c3:80:
b2:e0:7b:cc:b2:e8:1b:f5:09:35:e8:b7:53:f9:63:c1:73:e8:
94:5f:c2:fd:e3:dc:d1:09:e9:61:94:1a:fe:11:ea:a3:fd:22:
ab:79:4d:09:d1:48:83:0d:9e:25:70:b6:d6:5a:be:2c:4b:de:
6f:cd:83:fd:ff:2c:80:72:48:ea:32:6d:dc:2c:cf:ce:55:3a:
04:3f:32:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9N6ZQtrxCDHRtCnL/7J0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTFlNmVhNTI3ZGMzODVhNzlhM2UwODgyN2RiZjY5MGM5
MWM0YzIwHhcNMjYwNDE3MDEwMTE3WhcNMjYwNDE4MDEwMTE3WjAzMTEwLwYDVQQD
EyhkMzEyNmE2MzVhZWQ2Zjc5ZDlhYTcwNzAyZGJmOGZjNTVkYTZhMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkIjGqvAk/7BU/C95kcQFyLB4slq
Bcr5Qsd3Z+wn4YAefGN2qb65+V2IPSZxMEgox+XaoJCPK8tZ7I2rIYx3gBKYVn1t
n9RjvP6JpJBmD6N3mB4kNt+g7eBG5K5ER7PZjshpvBBL3jhuPRHB/lMoAPVMxvy9
kFfBVeeYr8YoSc+SxmGzPGC6XDzZI2XmsYhrdiTSmWglvJUhVmFUzQjZTlDzPXPS
KitUBbZhQUrlUS7pPr6IZLgn33CLbJn+2WaOeCEjgB0VJB29V1v5T5Vj8sUnDW7x
xHSjbIuCf61igliUonNZu90N9cQYkNhoC2hf0o7LHo0N3gA0MHiF0LNDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMSamNa7W952apwcC2/j8VdpqDXMB8GA1UdIwQY
MBaAFGjh5upSfcOFp5o+CIJ9v2kMkcTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4Mzkt
MTdkMDk3ZmY4OWMyLzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85MzMxYzktZTE2NC00ZDJlLWI4MzktMTdkMDk3ZmY4OWMy
LzEvYU9IbTZsSjl3NFdubWo0SWduMl9hUXlSeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLTNpQPu
u3tEWGOtCIeyhwuiDeb2E/wPrYakTruhKdVSrehsiW4Rx5F4RWgNmfOKMXW1x/Rx
QYILTrd743k3Xs1x7Bjn7SA+s8JotdyW6TEgdlt9RvEWGUq86/53GS/dxWU0Mn99
qew3vM7pmo9l7lVdOyuRLRpt9zW9XSgq4mlI6JDsa4H65M+cpCPzJ+G5geby5e1U
14T62YISFWJZAZ+Kw41gS9503MPyh9rNZsTlfsOAsuB7zLLoG/UJNei3U/ljwXPo
lF/C/ePc0QnpYZQa/hHqo/0iq3lNCdFIgw2eJXC21lq+LEveb82D/f8sgHJI6jJt
3CzPzlU6BD8yWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:09 2026 by rpki-client