Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: ucnP2a0XADQGdQFgzz9K27PbzgTXyV0P+vLoIGATBcY=
Subject key identifier: FC:B3:CE:F7:96:D7:C8:F1:04:9C:27:E9:FA:6F:BC:F5:EA:9F:D3:AB
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019D9AE31C638780818535A2C0A128446018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: 1VLDPn9/Q9fqvp5QA6UWMo/5asO5eBBYJvhRtgQ8i9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1c:63:87:80:81:85:35:a2:c0:a1:28:44:60:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=fcb3cef796d7c8f1049c27e9fa6fbcf5ea9fd3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:1f:de:3b:2e:b4:27:f0:bd:a1:2e:19:f0:
20:07:41:e0:5d:2e:65:33:b1:a0:55:ac:5a:5b:ab:
33:4c:41:1e:a7:51:68:04:05:7f:e5:31:00:69:f6:
3b:65:3a:10:bc:a3:6a:ff:e3:e4:9d:22:e1:46:ef:
c3:c1:20:34:12:ad:41:59:f8:1e:d9:b6:b7:f6:1c:
ba:f2:3a:6b:35:50:90:35:fe:83:6d:86:09:2a:9b:
87:39:15:92:c5:0f:27:86:09:f7:e9:c5:26:d2:c0:
04:f6:b8:83:02:95:40:52:28:16:30:76:34:6b:a2:
3b:78:e9:28:70:8a:10:d5:35:d9:c6:3a:c4:45:cc:
31:a9:3f:0a:3d:1a:25:3c:28:3c:be:97:c6:de:a4:
0d:f3:89:54:c0:17:3e:ba:8a:35:61:f4:63:ae:0c:
1f:b1:59:91:2e:b1:9d:76:ed:d4:47:d7:02:99:2f:
dc:36:52:4c:c0:ad:a3:f4:7e:ed:a8:59:07:74:f2:
f4:a4:d5:61:76:bf:63:f5:d7:0a:ac:86:67:e5:b6:
bb:13:dc:17:bf:70:1e:c5:4b:cb:a5:94:0a:65:c1:
78:7f:1a:25:a8:d1:02:f5:69:f7:b1:12:85:ce:8d:
ae:34:06:92:06:83:07:75:01:13:36:fb:46:b5:27:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:CE:F7:96:D7:C8:F1:04:9C:27:E9:FA:6F:BC:F5:EA:9F:D3:AB
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:49:fe:c1:51:82:7a:27:28:9c:18:45:25:e8:d6:f4:63:1e:
31:dd:06:9a:4d:92:c8:28:14:cd:57:97:00:ca:9c:1b:ba:95:
91:e2:8a:e6:e9:b8:37:f7:59:a4:b3:da:0d:31:36:5f:a2:11:
83:7c:66:fe:5d:b9:75:b7:13:fb:46:fd:89:3f:5a:11:04:78:
f9:15:ab:1a:e6:b5:c6:59:d4:c8:d9:80:1d:e3:f5:94:2c:98:
13:31:79:80:49:f8:1c:c4:7e:3f:cd:09:02:48:66:0c:0e:25:
9d:2f:55:d7:d6:f2:ea:07:c6:d6:c2:ce:67:04:d7:51:57:af:
55:a2:27:5e:39:86:f7:96:3e:55:c1:16:ab:4f:89:97:f6:a2:
7b:f7:81:a5:b2:a7:75:13:4c:a9:77:d3:1e:08:d7:07:a3:05:
7a:9c:39:4e:d2:2c:fb:bc:ec:d1:5c:7a:8a:01:9e:a0:c9:e0:
ba:c5:e3:ed:63:1e:bb:5a:a4:65:35:b1:fe:cb:be:2e:13:da:
92:02:40:ff:fe:cb:dc:31:42:53:2f:aa:0c:9f:04:15:a7:ce:
77:2f:dc:39:d4:95:bb:d7:76:7b:3e:ea:55:52:bb:ad:f6:9b:
5f:c0:a4:fb:d3:5c:6e:71:64:be:b8:0e:f0:31:b1:08:6a:82:
07:bd:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:39 2026 by rpki-client