Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: wAVKVJqq0XlwPcqbdCs4aJKs5bog+e450sdDxcW6icc=
Subject key identifier: 18:6B:D4:BD:AA:DA:E6:B2:44:70:06:78:75:72:2F:82:4A:53:13:BD
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019DA59D2700E56BB38FF04BF6C697F4B72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 9E
Signing time: Sun 19 Apr 2026 12:00:32 +0000
Manifest this update: Sun 19 Apr 2026 12:00:32 +0000
Manifest next update: Mon 20 Apr 2026 12:00:32 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: VwHF6+JOltB4R+Cp0nI/Qr2tsPZMgJEh/Zwpk/7dZSo=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:27:00:e5:6b:b3:8f:f0:4b:f6:c6:97:f4:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Apr 19 12:00:32 2026 GMT
Not After : Apr 20 12:00:32 2026 GMT
Subject: CN=186bd4bdaadae6b24470067875722f824a5313bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:83:46:ca:7c:70:79:f8:54:fd:8f:d2:5f:
d4:e0:8a:c0:fb:db:e6:6d:09:0d:08:58:c8:4c:ce:
92:8d:03:fe:4c:de:7f:b7:e5:99:77:20:01:65:ab:
f5:80:c9:78:28:dd:fc:a2:72:14:36:aa:c3:3f:71:
88:25:94:0a:95:6d:50:cc:60:84:bc:cb:b6:f5:f0:
94:98:02:a7:ac:98:df:a1:e9:1b:52:c9:d4:cc:2d:
2d:af:a2:fa:5f:11:f0:06:fc:bd:e3:02:82:8c:f3:
5e:66:8f:3d:20:88:fe:e3:63:1d:4a:fb:fb:66:6d:
85:e7:b4:94:b8:fb:06:44:81:1b:b3:98:e8:93:6c:
e1:d6:7e:a4:63:92:87:03:2d:70:56:33:97:91:71:
01:25:f5:24:c4:00:e1:6f:be:7c:f2:95:e7:98:15:
f6:fd:47:81:96:cc:cd:b8:28:77:8e:81:c6:b7:50:
a8:df:81:6a:34:87:9b:71:a8:2c:64:18:7d:7b:38:
95:c3:d4:75:84:1e:03:75:9a:c7:1e:3c:4b:5a:30:
ef:c0:90:03:ea:66:20:f7:04:71:e3:f2:24:f8:1c:
6b:fd:e2:3a:90:48:fc:06:ba:e0:35:65:2f:04:ed:
98:36:e5:a6:14:f2:fb:dc:40:af:bc:d7:4f:93:5b:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:D4:BD:AA:DA:E6:B2:44:70:06:78:75:72:2F:82:4A:53:13:BD
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7c:a9:e8:75:d0:af:80:1d:c0:6a:38:6b:96:d8:b7:db:38:
3b:b5:e2:67:30:04:35:26:ba:9a:6e:bc:b0:a3:48:ab:8c:21:
4b:20:0e:aa:6d:3a:12:15:2b:64:7c:6b:8b:5f:1a:14:9d:d7:
83:14:5b:7d:68:73:ae:90:97:2c:c4:5f:91:da:f7:ae:4b:f5:
9a:dc:c5:d5:43:30:95:11:ac:7c:69:44:61:3a:3e:ec:04:9e:
a5:3f:06:04:94:89:e0:f1:37:e5:15:00:8b:4d:96:62:55:07:
cb:be:f6:38:eb:43:02:75:0a:1c:8d:87:e6:d9:27:ff:a1:c1:
76:46:01:e9:e2:e3:b0:7e:19:36:42:e3:59:78:9f:db:e4:20:
d7:15:d4:59:dc:56:f7:d7:f4:c0:1b:04:a3:46:1d:c3:8f:19:
a9:72:1b:d5:40:0a:ef:1f:4c:8c:a0:6a:43:ca:5b:98:03:c1:
9d:d2:41:90:6b:09:e5:45:9c:c2:40:ac:49:04:d6:79:d8:fb:
cf:9d:43:00:5d:96:7f:6d:b2:f1:0d:30:15:3c:33:c3:9a:8e:
e5:13:a0:89:de:e8:89:79:1e:1c:c1:a3:f0:1a:f9:d1:89:a6:
41:ce:3f:1a:6b:50:44:e1:b0:a2:ce:7a:33:61:bb:f6:41:42:
fc:39:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:12:08 2026 by rpki-client