Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: XdIIta2raNgcOuFRPw/f4xxaxJCHcZWBJPibBGtbVhY=
Subject key identifier: 96:53:29:61:5D:8D:5E:09:F0:24:D0:F3:97:12:C6:A3:7D:85:E5:F5
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 019D9A06E41EA43960DFC8985011F98607EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: MA3knFAmoYmt6nyAlHn8ItDFrI2kxpMFJSDRY6Ry3GY=)
2: cBk3ZWq1jJ5c0Xw6pclTJe1ARUQ.roa (hash: tIaWypa+2w3+EhClID+rbKASz6IrpIfwCtlLXu1+XIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e4:1e:a4:39:60:df:c8:98:50:11:f9:86:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=965329615d8d5e09f024d0f39712c6a37d85e5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:df:bd:9a:1c:10:5e:7f:56:e9:23:b0:a7:
aa:70:58:eb:8e:de:e3:ba:4d:84:20:32:61:14:e9:
7c:8d:40:81:d2:41:25:93:53:ef:ea:35:c3:ee:bb:
03:73:f3:db:08:12:91:1e:42:49:56:f7:cf:e1:e1:
2d:03:03:87:fc:45:7d:97:67:a3:a3:62:ee:e8:33:
02:bf:3d:d9:92:5c:0d:09:19:2c:02:3d:d2:8d:af:
59:7f:07:ae:a1:2a:db:11:6e:0c:0e:d9:1d:ef:2a:
19:a7:66:48:80:7d:67:4a:cd:e9:f0:99:4c:63:cf:
69:b1:f6:1e:9b:b6:55:28:f2:33:e4:5e:01:73:8c:
73:0b:da:b7:75:c2:17:e0:f8:a8:91:ad:72:bc:75:
31:01:b5:2a:e2:aa:78:4e:3b:b9:09:f3:ee:74:41:
39:5f:e6:90:7e:13:9c:99:0c:90:17:3a:6b:df:2f:
fb:7a:2f:67:b5:0b:a3:15:fd:b1:b2:d7:ab:f0:a3:
92:de:f2:ee:4b:ba:50:3b:e5:96:28:2f:56:c7:57:
0f:7f:e1:fe:92:a8:f3:3d:c8:77:3e:4b:a6:14:d5:
bd:bc:92:1d:c2:bf:2e:50:79:b9:5a:b9:b5:c1:cc:
db:c5:14:03:dd:ff:31:fe:36:d8:90:39:f8:7b:53:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:29:61:5D:8D:5E:09:F0:24:D0:F3:97:12:C6:A3:7D:85:E5:F5
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:48:1e:1c:34:1a:78:c5:1f:4a:a1:e4:8a:65:7c:08:ec:
0c:c4:b9:95:dc:e8:d2:59:6a:b4:84:e8:88:7d:57:bb:d1:b5:
26:8f:f3:db:87:99:90:68:91:0c:42:ae:7f:6b:c6:ef:35:f6:
38:fc:6c:fd:fe:51:9b:7f:a6:84:9b:e0:ed:43:f7:6a:1e:23:
c2:d5:15:a0:80:10:e7:e9:c8:3a:6c:bb:1a:9e:3e:56:14:20:
f8:f1:ba:3a:12:a8:59:14:54:98:b6:1f:8c:a5:2f:34:59:3e:
fd:37:b2:37:ec:74:2c:58:71:be:80:c3:e6:ba:a2:ee:33:0c:
12:ac:49:bc:59:29:ac:35:e2:e4:e0:2b:c2:81:b5:ec:1a:bf:
79:06:52:5f:2d:f2:35:71:a6:cd:b1:9e:57:48:ae:44:be:30:
e8:19:02:d1:f7:6b:ec:14:5a:5b:16:c8:02:50:09:de:0a:13:
59:f4:09:1a:25:83:c4:c5:e0:de:62:ca:92:f8:99:cf:00:9d:
ed:4b:17:f5:f6:6d:80:06:0d:78:a6:fb:18:09:0a:c7:fa:e5:
68:a2:73:6e:f1:ff:e9:ac:c2:bd:e8:8d:4b:bb:33:7f:fa:5d:
79:92:d7:5a:50:db:f8:b2:00:d7:e7:0f:27:66:8e:9d:14:d1:
f6:54:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:16 2026 by rpki-client