Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
File: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft (raw, json)
Hash identifier: aM/okIPsWGFv5WH3gjYjaU6TS7PO1EHD+bJ4XgNvCW0=
Subject key identifier: 6C:6B:A3:12:16:B2:34:E9:1E:52:16:1D:F6:F8:F2:F2:C6:DE:AE:5A
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Certificate issuer: /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial: 019D9CD1B28F01DCD071DA054E08639A2703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
Manifest number: 33
Signing time: Fri 17 Apr 2026 19:01:21 +0000
Manifest this update: Fri 17 Apr 2026 19:01:21 +0000
Manifest next update: Sat 18 Apr 2026 19:01:21 +0000
Files and hashes: 1: J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (hash: Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=)
2: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl (hash: ldTXEv0tTnEouyegRqhCOOuPNNBVr4XAv+Ryxxm/tcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:b2:8f:01:dc:d0:71:da:05:4e:08:63:9a:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Validity
Not Before: Apr 17 19:01:21 2026 GMT
Not After : Apr 18 19:01:21 2026 GMT
Subject: CN=6c6ba31216b234e91e52161df6f8f2f2c6deae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:84:d4:8a:81:4b:4e:a0:8c:8d:3e:6c:74:
a3:f1:d3:2f:e2:aa:c2:81:a1:7b:3e:f5:3f:d5:73:
1f:2a:91:0d:59:e9:66:dc:80:60:4e:75:ce:96:a0:
26:82:99:2e:64:98:61:44:fa:41:80:bf:93:37:06:
94:de:f9:51:23:71:c8:f1:fb:c6:dd:e5:5b:22:7f:
d9:a8:de:26:8b:5c:ed:46:6a:ca:93:d9:29:19:11:
b3:c2:dc:88:4c:f9:4d:21:30:8c:88:79:bb:88:7d:
de:24:8c:a0:7d:05:40:c3:c9:7a:3a:bb:ec:32:81:
e5:96:ee:6d:3f:b8:bd:42:37:37:c8:bf:19:2a:5e:
34:f5:0e:e0:f5:68:24:5b:d9:53:f9:2f:58:64:d6:
f4:04:a7:9a:5d:cc:34:a3:a1:c5:90:6b:47:2f:85:
88:5f:dc:5f:12:25:a9:57:a9:17:b4:6d:61:45:a1:
d1:a7:38:ed:00:c9:19:cc:93:2b:64:44:45:3e:98:
35:ff:0d:7e:77:0e:14:a2:eb:ed:bd:22:d6:08:70:
3c:ae:b4:9c:99:61:a6:23:63:59:24:54:06:fa:db:
64:04:35:27:8f:ee:53:91:d5:b3:fa:e9:28:e6:56:
4c:e6:c9:72:b1:ff:ef:3d:be:15:c9:f0:5b:06:5f:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:A3:12:16:B2:34:E9:1E:52:16:1D:F6:F8:F2:F2:C6:DE:AE:5A
X509v3 Authority Key Identifier:
keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:48:bf:b8:d2:7a:c7:f2:6b:71:67:fc:5d:da:14:e2:65:7a:
72:fd:d1:77:98:5f:88:5f:be:6f:73:09:50:12:79:70:0e:f6:
e7:8d:fd:d5:42:b8:e4:35:99:9a:84:11:29:8e:7a:16:0d:9e:
9a:51:0f:72:99:60:29:67:32:d0:4f:82:cf:b3:41:10:22:19:
82:08:57:b1:55:de:35:f7:c0:4f:a8:35:3f:21:fc:00:bf:42:
6d:57:96:b1:4b:94:fd:fe:78:68:f7:2a:c2:d8:58:f7:a5:b4:
14:5f:ec:3d:97:d4:16:66:bd:a8:22:f3:1f:c1:2a:20:b7:ca:
25:6d:e7:fe:56:16:3d:cf:55:13:86:f1:34:60:f4:90:34:ea:
67:3d:52:f5:62:b1:e2:75:2a:33:b7:28:17:f1:af:09:05:26:
b7:fe:f2:bc:fd:31:55:00:b2:14:07:f7:77:ce:88:6c:85:1d:
39:4b:38:3e:7f:32:5b:7f:ba:d2:1c:d8:8d:5b:bd:a8:35:22:
89:60:0f:0f:07:cb:36:85:88:67:34:3a:bf:d7:ca:12:4c:c9:
cd:98:78:8e:bc:29:a5:dc:bd:31:ea:06:88:ec:cb:9c:e4:35:
06:ae:d0:79:d6:ac:19:39:88:57:e9:6c:3f:3a:83:31:a4:89:
03:29:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:24 2026 by rpki-client