Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
File: rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft (raw, json)
Hash identifier: 0CUkjrVAHFhCPgO1bWYBPlMaXzyAbYxvnR2DITgCSFY=
Subject key identifier: C2:12:CE:65:4F:FA:AD:0C:61:D7:6C:18:8D:BC:23:22:CC:AB:EE:7E
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 019D9A74A4B01D0C3AE8033F07A86EBF5295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
Manifest number: 0CD1
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: 24WxHxaeAmm5E1Q3Id3rg_qvvPY.roa (hash: cVrKb1vSqi82yPVZCgvu5xU3xXbeXHexmU9eyiwbU3E=)
2: rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl (hash: WIkO3xqiIHPULiPE9cqdxWqW1XBNpQv5veRO0xcQ9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a4:b0:1d:0c:3a:e8:03:3f:07:a8:6e:bf:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=c212ce654ffaad0c61d76c188dbc2322ccabee7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:64:cb:d7:af:84:94:31:7f:45:3d:c6:da:
b6:98:8a:4f:70:56:3f:62:cc:65:77:a7:82:56:0a:
5c:22:38:10:0c:4d:41:e1:2a:0a:03:cd:a7:6d:e5:
d0:6f:d4:a9:39:d6:05:fb:f6:b1:34:34:93:21:58:
f0:b4:7d:53:f0:cc:15:37:aa:f6:fb:6d:b9:97:01:
33:d4:de:f8:26:85:d3:98:30:7f:bc:75:e9:a7:b5:
9a:d7:41:ce:f0:9a:21:77:7a:62:ae:66:54:4b:1d:
1b:70:00:a3:ef:63:07:2c:6f:fa:57:d0:e0:b3:ab:
2f:e5:02:c6:97:53:74:85:04:03:7a:3b:91:2c:a7:
63:99:ec:98:06:24:0e:45:2a:93:1f:7b:45:b5:fa:
66:58:aa:cc:aa:97:9e:ef:19:90:ea:b6:b5:95:40:
ec:2f:42:d2:90:56:8a:5b:cf:ec:8c:2e:a7:dd:ee:
a4:cc:52:6a:5a:c5:c8:a3:7f:9e:c6:bb:75:5b:07:
2a:cc:f3:05:97:60:bd:72:3b:8d:c7:c4:d9:a0:17:
82:40:2b:59:c9:d4:47:16:84:3c:f5:62:1f:cf:4a:
be:09:72:b9:c8:9d:da:e6:24:01:84:bb:8e:f8:87:
f3:f0:be:c4:be:27:a7:33:56:b3:ca:a7:78:e4:2f:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:CE:65:4F:FA:AD:0C:61:D7:6C:18:8D:BC:23:22:CC:AB:EE:7E
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:36:69:13:ee:68:5d:50:3b:bd:2c:3d:fb:1c:4c:ae:80:8c:
5d:9b:96:3d:e9:36:ef:86:10:8f:20:58:63:a9:d2:42:82:e7:
09:4e:3a:10:a8:f4:d3:e3:26:7b:47:73:b5:82:c2:1c:cf:70:
a7:16:c3:98:2f:ad:8a:73:6a:a9:a3:be:c6:af:41:14:4f:a3:
95:b5:a7:83:46:84:25:1d:74:ea:a3:26:91:d8:ba:49:f6:1a:
f1:04:6e:75:c5:82:e9:25:fd:8a:fd:d5:4a:6d:a5:f4:b7:99:
12:ec:cf:45:b8:55:fe:a9:a9:99:73:a6:33:b5:a8:dc:2d:7d:
bb:3f:61:3e:dc:f7:7c:57:c7:ca:d5:38:f9:68:ec:12:78:ad:
36:25:db:8d:8e:5c:12:08:6c:3f:3b:d3:71:89:d5:da:c5:08:
b5:87:04:b8:8c:4c:a7:c1:5f:04:40:92:08:55:1f:bc:52:32:
a6:63:22:b3:86:96:31:25:2b:40:59:53:31:e1:74:f0:ff:11:
62:91:c1:99:66:20:2a:42:15:db:a9:3b:91:49:2c:5a:b7:79:
c8:69:c0:b4:65:b6:64:93:cf:b5:ed:76:ee:90:0c:4d:e0:0b:
6e:69:e3:d5:de:6e:6c:70:5c:d9:40:3e:e3:7c:cf:45:22:f3:
57:3b:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:38 2026 by rpki-client