Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: j2DP180uZA8VuHmLNjeyx8YIb/cY9YkCYLT/9uJoOUA=
Subject key identifier: 1E:33:AE:9B:0A:DD:76:67:3F:B3:90:9C:A1:2F:5B:E9:E5:58:97:EE
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019D996254A83DB10FC887C95AED93FBF0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: MJpJhJuAS7UorBBzZU1JdG24Y5RFo3PpFcMcQ4aGjM0=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:54:a8:3d:b1:0f:c8:87:c9:5a:ed:93:fb:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=1e33ae9b0add76673fb3909ca12f5be9e55897ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:f6:69:97:73:0b:cd:b7:5c:04:1d:96:eb:
27:9b:20:98:69:6e:64:35:c6:59:ec:a4:d6:46:cd:
39:5b:fb:8e:48:62:44:82:f5:37:8d:6a:49:b7:c9:
29:cb:5b:b6:fe:cf:9f:40:c9:62:4e:3f:19:59:01:
98:bf:11:68:f5:d7:3d:af:b1:8d:05:39:0e:e6:ee:
89:4b:b3:05:c9:7c:6a:a5:f7:0d:e9:9c:28:59:7b:
43:c8:b0:81:6c:ae:ba:0b:e3:60:e6:18:40:5d:63:
e6:52:b2:be:e5:5f:99:c7:b3:0c:62:d5:16:1c:24:
4b:fa:52:62:7e:e5:80:0b:c4:ba:c4:4a:cb:83:80:
5d:7a:b4:5a:2e:dd:16:1b:9f:ed:57:42:7a:a4:7d:
47:83:3c:16:91:9b:04:5b:6c:dd:ae:e1:00:a6:71:
c7:8b:c4:1d:cd:1b:4a:b7:ab:7c:68:9f:07:bf:91:
ce:b0:d5:c3:a8:0f:94:ce:8c:93:a8:0e:83:cb:e1:
ab:7e:6c:f8:6f:1a:5a:c3:23:d8:49:7b:41:7e:6b:
7e:be:cf:0b:e3:05:29:63:d3:57:48:14:91:27:64:
07:0d:26:8f:a6:48:b3:c2:04:68:cf:d5:d8:ff:d4:
2d:1b:66:69:ea:30:cd:83:55:dc:d9:8e:6d:4e:33:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:AE:9B:0A:DD:76:67:3F:B3:90:9C:A1:2F:5B:E9:E5:58:97:EE
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f6:5c:60:dd:d6:42:77:5c:23:49:43:23:c8:6a:4c:3b:96:
bd:75:b9:19:c7:90:bf:ea:fe:c3:37:90:ca:4d:89:a9:c5:e3:
b7:8b:1f:ce:ba:53:8c:e8:b5:9f:a9:36:d3:15:1a:7e:13:d0:
fd:14:9c:7c:71:f8:d2:dc:89:d6:b9:61:1b:7c:7a:4e:32:69:
f4:50:0c:06:2e:63:8a:73:eb:c4:67:48:1c:d2:39:1d:41:eb:
ad:1a:5c:8c:f4:78:bd:a4:60:48:87:e3:b8:40:f1:5e:ed:44:
48:8e:58:f6:a0:74:44:75:ba:02:ac:b8:fd:81:77:c1:57:0c:
ab:8c:03:c9:59:0b:77:d4:92:5b:8b:a6:6c:45:a7:b1:fd:60:
96:db:5c:fc:c6:b6:48:d4:99:31:e6:b9:c6:5e:66:b5:2f:05:
be:a1:d7:5f:5a:83:a1:6e:bd:c1:c9:7c:15:97:00:7d:0e:ba:
9f:09:30:82:be:4c:44:1c:9b:a3:f6:d6:80:b7:88:16:53:ff:
7b:04:c8:35:83:2f:4a:29:76:9a:a9:20:94:c6:f5:50:6b:08:
5f:50:f8:d2:5e:1f:bb:d4:32:ce:d6:ae:d4:0c:e0:d4:6f:ce:
6f:6e:2a:db:97:4d:c6:6c:3f:9d:21:9f:0c:4d:9c:2e:ce:e9:
d7:e8:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:57 2026 by rpki-client