Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: P+/TO2qB2CiNszeohfOULamGq7COgVC4R3EWDY36I1I=
Subject key identifier: E9:14:DF:E0:4C:FE:07:CD:E4:6D:B0:41:A5:BC:54:1F:9B:EA:17:66
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 019D988680721E2E7A2B857AEECFDB11803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: zsiX1kNVgdXCxWVsOwjl6CV7ksTuVzjOFZUt/t1rgFs=)
2: v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa (hash: liANJtLZlExcLcM+/+8RAHwNizw5D6GQaPEdxWVRWPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:80:72:1e:2e:7a:2b:85:7a:ee:cf:db:11:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=e914dfe04cfe07cde46db041a5bc541f9bea1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:43:1b:64:b0:f7:b2:57:25:b5:84:78:7a:
7d:20:ff:1a:61:92:62:34:dc:c2:1b:cb:2a:75:59:
22:ec:27:07:72:af:57:59:a1:b4:3e:ec:82:94:0f:
30:0f:b7:b0:4c:8c:39:9c:a8:02:87:09:77:5b:c0:
83:9d:97:0d:f6:5a:42:2e:57:1c:b9:21:24:a5:e3:
f9:47:8c:a1:5b:f2:64:0b:02:17:03:43:07:99:b7:
f7:0b:d5:cb:3c:fb:22:84:ae:44:5c:e5:1f:c2:99:
f5:8a:37:7e:6d:f1:b5:6b:3d:e6:ff:a0:45:bf:4a:
43:20:88:38:8b:b1:20:52:ba:cc:b4:22:b5:6d:a6:
28:59:0c:a9:83:d2:67:d4:1a:94:d9:95:e8:7f:a9:
c7:77:b0:76:19:7e:be:8e:02:3f:aa:12:be:58:29:
52:71:35:57:b0:c9:db:eb:46:d0:cd:29:49:c8:2a:
20:23:8e:50:22:18:05:8f:50:78:5f:58:32:c2:90:
1f:73:f3:aa:cc:94:b1:1a:07:09:a1:8d:31:d4:fc:
26:6d:34:ba:1e:bd:fd:3b:30:97:5f:db:4e:4a:ca:
19:88:a8:92:ee:d0:57:29:ff:1e:82:55:df:f0:d0:
04:3d:4e:ba:13:77:10:a6:21:dd:8a:e4:f1:33:31:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:DF:E0:4C:FE:07:CD:E4:6D:B0:41:A5:BC:54:1F:9B:EA:17:66
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:33:11:ba:84:ff:a5:d3:f3:e2:d7:16:28:f4:3f:65:96:ca:
a9:e4:e3:ff:2d:08:0c:b1:92:77:2d:64:27:a8:19:f9:9c:70:
14:ea:67:d6:b1:ce:44:54:0a:1e:9b:60:02:2d:98:ae:21:34:
74:cd:21:2a:63:c7:84:e5:09:f0:b8:90:0e:1b:f9:7a:fe:a8:
60:dc:10:e5:91:06:93:8d:cb:9c:b6:e3:4a:e4:91:8f:66:49:
22:d0:5d:b6:12:3c:f7:6d:2d:fb:70:79:f1:7e:f2:41:ce:10:
44:75:9c:91:97:68:d1:6f:80:62:f8:e7:60:ff:3b:7d:3d:dc:
39:72:60:cf:1a:68:63:98:a1:ad:ce:11:7d:e6:6d:b4:66:16:
2f:fb:fd:37:82:56:0f:e5:f7:f6:03:f9:10:ad:98:94:35:09:
d4:3f:6f:5f:06:0a:bf:b8:d7:0b:18:e1:4e:7a:21:5d:c3:a4:
39:f3:36:0e:4f:a1:cf:1d:7d:09:22:0a:bc:7b:ae:a3:d5:2d:
47:84:3a:aa:b7:05:d3:c9:b8:dc:a5:b4:e5:3d:20:5a:a5:c2:
2e:d4:fb:f5:bf:30:6c:08:90:d6:e2:b4:d2:cc:e5:e6:d5:a2:
f1:b2:3c:d2:56:5b:0c:41:d8:75:07:20:a6:5f:5a:e4:9d:f6:
c0:c6:e7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhoByHi56K4V67s/bEYA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1
N2FjMTcwHhcNMjYwNDE2MjMwMDQ0WhcNMjYwNDE3MjMwMDQ0WjAzMTEwLwYDVQQD
EyhlOTE0ZGZlMDRjZmUwN2NkZTQ2ZGIwNDFhNWJjNTQxZjliZWExNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TdDG2Sw97JXJbWEeHp9IP8aYZJi
NNzCG8sqdVki7CcHcq9XWaG0PuyClA8wD7ewTIw5nKgChwl3W8CDnZcN9lpCLlcc
uSEkpeP5R4yhW/JkCwIXA0MHmbf3C9XLPPsihK5EXOUfwpn1ijd+bfG1az3m/6BF
v0pDIIg4i7EgUrrMtCK1baYoWQypg9Jn1BqU2ZXof6nHd7B2GX6+jgI/qhK+WClS
cTVXsMnb60bQzSlJyCogI45QIhgFj1B4X1gywpAfc/OqzJSxGgcJoY0x1PwmbTS6
Hr39OzCXX9tOSsoZiKiS7tBXKf8eglXf8NAEPU66E3cQpiHdiuTxMzH7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkU3+BM/gfN5G2wQaW8VB+b6hdmMB8GA1UdIwQY
MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt
MmQyYjRmNzBjM2EzLzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez
LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzMRuoT/
pdPz4tcWKPQ/ZZbKqeTj/y0IDLGSdy1kJ6gZ+ZxwFOpn1rHORFQKHptgAi2YriE0
dM0hKmPHhOUJ8LiQDhv5ev6oYNwQ5ZEGk43LnLbjSuSRj2ZJItBdthI8920t+3B5
8X7yQc4QRHWckZdo0W+AYvjnYP87fT3cOXJgzxpoY5ihrc4RfeZttGYWL/v9N4JW
D+X39gP5EK2YlDUJ1D9vXwYKv7jXCxjhTnohXcOkOfM2Dk+hzx19CSIKvHuuo9Ut
R4Q6qrcF08m43KW05T0gWqXCLtT79b8wbAiQ1uK00szl5tWi8bI80lZbDEHYdQcg
pl9a5J32wMbn9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:00 2026 by rpki-client