Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: Ouj280h0OCg8JzmMRqbaqK0Wb89EWFcztugBWlymR2o=
Subject key identifier: 85:25:4F:40:A7:33:9F:85:CE:3C:9C:07:A7:64:12:0A:ED:47:5E:6D
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019D988645FA988FB408A8CB9092B6D46653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 23:00:29 +0000
Manifest this update: Thu 16 Apr 2026 23:00:29 +0000
Manifest next update: Fri 17 Apr 2026 23:00:29 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: X9F34VVlpSRbnwYvf6VpEvLInFil/WYXSNTv1Wm2dpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:45:fa:98:8f:b4:08:a8:cb:90:92:b6:d4:66:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Apr 16 23:00:29 2026 GMT
Not After : Apr 17 23:00:29 2026 GMT
Subject: CN=85254f40a7339f85ce3c9c07a764120aed475e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:44:36:22:38:50:01:2f:d3:cb:20:e8:9f:
b9:48:60:af:b6:a5:90:84:77:73:a1:1c:b1:55:5e:
6d:5e:e8:a5:24:d3:4c:de:c7:22:fd:f6:9a:02:99:
5a:64:6e:2d:3a:08:6f:f7:ff:3b:98:3d:03:75:3e:
a0:b5:1f:1e:91:cf:6a:f9:85:1e:d1:d7:ca:78:f8:
89:43:17:ac:92:39:48:f0:0c:fd:87:77:26:e4:54:
bd:35:4d:51:ca:84:29:13:c4:28:14:78:52:a5:fa:
43:1d:7d:6d:21:7e:45:e1:0e:d2:43:80:76:77:15:
fb:af:a0:c9:6d:32:8c:af:44:d2:e6:18:3a:6b:ba:
f2:97:fc:e3:ff:d1:ef:aa:ba:ec:1e:15:ec:e7:be:
6b:cd:61:42:85:8b:3f:7b:c8:aa:e0:75:0e:50:53:
f5:b5:aa:23:f6:3e:bb:67:c7:b5:d7:3e:65:f9:1c:
a1:79:a9:4a:5c:b1:a7:27:1d:fc:ec:86:8d:cb:50:
7f:44:30:6a:ac:55:6a:93:aa:16:52:ce:ed:15:d6:
d1:04:a1:0d:d0:e9:92:64:85:58:b2:16:0b:12:f0:
36:b5:61:12:f4:5f:40:fb:62:78:f8:12:e4:88:fd:
08:b6:dd:94:5a:50:7a:29:ae:f7:c7:bb:20:d3:d6:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:25:4F:40:A7:33:9F:85:CE:3C:9C:07:A7:64:12:0A:ED:47:5E:6D
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:21:bf:c2:1f:14:e0:e1:ef:02:dc:16:71:2e:f9:5c:a9:ed:
10:01:3f:17:71:be:f6:05:be:25:35:c3:b1:0d:cc:aa:fe:0a:
af:eb:cd:57:54:74:93:72:dd:0e:62:71:6c:59:0e:6c:59:aa:
54:dc:c7:ba:8b:01:3c:af:8b:fa:0c:2f:cb:80:0f:7a:e9:4d:
4a:82:b2:46:6e:a2:c3:18:af:e3:7b:0a:22:c5:0f:5f:4d:3a:
44:62:02:dc:39:fa:64:3c:29:cf:10:75:07:95:d6:ba:98:3c:
08:4e:99:ac:2f:56:99:a2:51:d2:a2:5e:48:22:3e:e1:7d:bf:
85:f0:0d:67:96:0f:38:22:35:4a:35:b6:cb:a8:68:70:84:59:
18:a3:5b:b7:c6:33:35:b2:de:56:34:d0:a1:16:28:a3:ac:17:
e1:28:59:f0:f9:84:8d:b0:15:3c:74:1d:8a:c4:03:7f:a2:eb:
8b:78:c8:fb:e2:c1:0d:0b:c6:82:47:e3:5e:10:ba:39:39:12:
26:1a:03:0b:e1:ff:9e:c2:b2:96:dc:d8:b9:78:89:a0:d1:73:
56:6a:4e:91:64:01:1e:a2:69:c8:5d:95:55:ea:93:e0:7a:a3:
0c:ad:8c:54:fe:e5:7d:a6:bc:3e:43:ab:22:84:50:d7:f5:2b:
8a:a5:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:02 2026 by rpki-client