Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
File: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json)
Hash identifier: 2I2LFB5EqyuGztzPoXGjgnqAQYRZz97ugtMSnXtTdE4=
Subject key identifier: DA:1E:D1:B1:4F:C6:A3:44:F8:18:49:F1:5D:C3:38:4D:3F:DB:41:6E
Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
Certificate issuer: /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Certificate serial: 019CAB6B8019F953372BDE79A37E6729DD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
Manifest number: 182A
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: 8RpMwTOUNgLz8joOaMWns3+bd8gCTPBbZ4hRHPaeiu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:80:19:f9:53:37:2b:de:79:a3:7e:67:29:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=da1ed1b14fc6a344f81849f15dc3384d3fdb416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:a2:00:9b:9d:9c:26:07:6e:0b:e6:4e:f0:
83:99:ce:49:ad:c8:82:b2:78:20:ce:35:bd:77:15:
eb:ad:e9:e8:77:1a:72:4f:c3:2d:46:50:c4:5e:45:
eb:c6:7b:7a:fa:ef:0f:75:fe:1c:5f:32:c5:43:06:
47:f7:7a:a2:bb:f4:80:80:00:df:d7:40:76:95:80:
91:ee:df:ee:e1:19:91:7e:d3:ad:c2:1b:fb:58:d0:
c2:2b:53:f2:f5:84:89:48:2e:a1:9f:ad:d1:06:10:
a5:46:9b:69:b0:22:71:37:b2:16:68:60:31:e3:91:
1c:c8:0a:79:ed:30:33:a1:c2:21:c3:50:fe:49:42:
07:03:f6:65:64:31:6d:f8:80:db:2a:6e:92:ef:60:
50:e6:c9:6b:c6:95:92:5d:3b:e0:9e:fb:3f:27:49:
be:95:0b:3c:20:cd:0a:48:1f:b4:e9:49:4a:9f:89:
b9:68:e8:06:16:5a:08:f9:8e:35:5d:09:64:98:0a:
f7:96:2c:3c:57:41:ed:28:68:38:0f:a3:90:fb:3d:
bb:b1:b9:27:6d:e3:b8:4c:40:f0:14:7d:e1:e9:1b:
d6:48:7a:14:02:d0:4f:5b:e9:07:a0:23:bf:8b:ca:
f4:65:63:95:11:ce:1f:11:1a:25:06:a0:b1:ab:1e:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:D1:B1:4F:C6:A3:44:F8:18:49:F1:5D:C3:38:4D:3F:DB:41:6E
X509v3 Authority Key Identifier:
keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:43:f6:90:a7:e0:5a:6e:e0:5c:ac:4b:dc:9b:b3:c9:42:87:
de:97:ee:01:71:5f:88:05:e5:7a:d4:d2:91:02:f7:3a:05:2e:
c2:2b:be:91:3f:5c:a0:02:b4:63:9b:80:21:d0:0b:ba:8d:fe:
c0:f9:98:55:2a:70:e9:ba:0d:08:ad:97:33:dd:8b:34:64:16:
f6:b5:b3:1a:0d:cc:f0:17:58:d4:8f:10:75:7e:e4:e8:08:aa:
1a:0a:ad:b5:d9:55:8b:9c:d1:04:73:c5:e0:3d:ad:5c:8c:e3:
a7:4c:27:2d:0e:03:54:04:74:6c:29:c4:1a:66:c7:db:44:e0:
d3:5e:f7:e2:26:40:85:74:e6:0e:e8:e3:fe:de:3a:fe:d9:39:
b1:d8:e8:d1:c2:08:c0:fc:1c:62:70:d1:f2:31:3b:54:e8:55:
73:53:9f:ef:86:fa:57:e1:48:52:1c:18:af:a6:0e:bd:f1:33:
7c:16:b3:45:4d:5b:9d:6d:a2:36:e8:d0:09:de:f8:11:f1:0b:
11:e0:66:87:ca:d5:97:58:44:32:7b:9d:8b:40:bf:98:c9:ec:
9d:00:83:f0:c3:1a:4e:d4:14:4d:b0:30:ef:d5:99:07:e7:1e:
db:88:90:fa:0e:a7:bc:2c:c5:6d:fd:d3:9d:1f:36:51:c6:d4:
ea:bc:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:48 2026 by rpki-client