Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier: YxAHHm2gUR67MTBGkDAvk+2pnIxTn9XubrLq7jRP20A=
Subject key identifier: AE:6E:A1:7C:5A:CB:91:DC:4B:26:47:F3:91:F9:2F:89:AC:A6:9A:61
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 019D9886641FAAD75AAFCA38B71F67E6B859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:37 +0000
Manifest this update: Thu 16 Apr 2026 23:00:37 +0000
Manifest next update: Fri 17 Apr 2026 23:00:37 +0000
Files and hashes: 1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: XO5GjWDKi3AfNEu3N1Hnxq0EDS8971NEMxSnS9UYw2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:64:1f:aa:d7:5a:af:ca:38:b7:1f:67:e6:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Apr 16 23:00:37 2026 GMT
Not After : Apr 17 23:00:37 2026 GMT
Subject: CN=ae6ea17c5acb91dc4b2647f391f92f89aca69a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:92:a6:71:72:10:82:b9:01:7a:6f:7f:f9:
8b:fb:7e:f7:16:9f:73:bd:9b:00:db:3f:e5:14:d9:
1c:92:b3:23:e9:43:d1:ce:c5:ed:e1:d4:54:e8:b2:
89:46:bf:ae:fe:cc:cd:52:73:5d:71:b6:34:7d:0b:
d2:32:ad:1e:d0:f4:d7:1e:dc:3d:00:ac:ac:e1:43:
de:94:ad:c1:83:d4:bc:79:07:d1:18:f3:bb:76:df:
cc:d9:b4:3b:89:f3:84:d2:5e:20:4d:b3:a7:e1:fd:
3b:f1:ae:2e:60:ce:bf:5d:b7:c5:2a:86:41:33:23:
bb:9a:19:38:a6:36:23:8d:68:2f:3c:11:79:fb:65:
af:84:95:b2:e0:5a:0e:e4:5d:45:71:dd:49:ab:0e:
19:e6:7e:e9:12:04:ce:33:61:a2:41:7d:02:9f:3d:
7c:70:02:37:06:48:11:d3:d6:c6:45:50:c9:8f:c0:
f7:90:2b:26:f3:7b:b3:b5:97:0a:f0:bb:cc:ae:55:
02:a3:fa:85:52:a9:f3:86:da:74:e0:28:28:e3:d7:
85:3d:e8:9a:c0:13:cb:b6:b8:dc:12:fd:06:06:b1:
8a:f8:10:ad:8e:59:fb:d6:0c:9b:0a:9a:7b:97:0f:
64:7a:9d:ab:ed:2f:fb:58:f1:76:2b:eb:ff:79:c8:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:A1:7C:5A:CB:91:DC:4B:26:47:F3:91:F9:2F:89:AC:A6:9A:61
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:59:84:bc:e2:88:8f:1f:4a:d2:20:e1:2e:c3:0b:c6:52:
d4:66:94:61:80:3e:b3:8d:d8:10:06:f7:bc:0d:6e:65:18:b8:
09:11:33:b6:fa:f6:e3:d4:f2:62:c4:fd:10:00:57:37:ee:db:
1e:54:2c:08:6f:ed:71:6d:26:66:07:4d:94:40:83:71:eb:64:
c3:ff:11:5e:80:5d:48:dd:4b:f4:85:97:49:ce:71:3d:d6:8b:
b4:6e:f6:f6:cb:b8:e6:fa:d8:1e:ce:28:48:47:88:fc:ce:33:
ff:a5:60:c9:99:1d:63:7c:ce:5a:7f:65:a0:69:9c:bd:42:34:
ad:a2:2f:0f:eb:99:96:47:6f:53:d7:ab:77:37:a1:90:d0:f8:
6a:32:a1:25:67:04:13:af:11:ad:7b:51:d6:e3:53:16:55:81:
39:4b:b2:aa:53:5e:fb:49:16:de:2a:17:c2:6b:a6:f2:9f:15:
02:38:c2:95:65:2f:8f:94:f4:7e:bd:7c:cc:6d:77:45:38:01:
3d:61:2d:98:f0:29:ee:73:52:17:8c:17:4c:d4:67:8f:3e:1c:
3a:5a:2c:fb:af:ae:8e:bc:bc:23:38:f6:2a:45:73:4c:43:ec:
af:50:23:cf:0a:0d:e8:30:50:43:20:30:d2:2b:ab:56:16:77:
e2:e5:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:57 2026 by rpki-client