Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: XY+f6lggXTj0MLb4ycfxhqi6C6Yu65Wk+q/pjIwB0M4=
Subject key identifier: 37:18:2E:EC:45:F6:DF:C9:A7:40:28:05:D2:07:96:7C:54:51:A5:E0
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019DA4544BBB9A2AA72A81A516B154D6FEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0F68
Signing time: Sun 19 Apr 2026 06:01:20 +0000
Manifest this update: Sun 19 Apr 2026 06:01:20 +0000
Manifest next update: Mon 20 Apr 2026 06:01:20 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: b7w8hY1crUkFFmyGF+r6XLCPC+skJrW3bDb7BBOTCAw=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:4b:bb:9a:2a:a7:2a:81:a5:16:b1:54:d6:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Apr 19 06:01:20 2026 GMT
Not After : Apr 20 06:01:20 2026 GMT
Subject: CN=37182eec45f6dfc9a7402805d207967c5451a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:9f:d0:12:8b:54:79:3d:d4:ef:25:8c:8b:
0e:2a:ac:25:f2:28:3f:5d:b4:3a:aa:29:54:5f:09:
b8:8d:08:34:bf:55:c9:2d:0d:33:59:74:29:a8:64:
cb:15:69:d9:8f:59:1e:59:75:ff:13:28:56:c5:58:
f8:f9:d4:87:26:d1:b0:de:cf:f0:b0:06:7d:e4:7b:
05:a1:67:c8:34:35:0c:f8:ad:a1:1d:ff:ba:79:ac:
e9:c1:5e:00:bc:54:21:8a:3b:44:43:38:c3:e4:fb:
28:52:43:05:55:51:62:3f:88:35:97:f0:4c:03:4b:
24:fb:fe:39:56:d3:4f:71:14:00:2b:b4:5e:c0:1d:
aa:63:e3:65:ce:88:aa:e1:54:49:99:83:d8:7a:2b:
32:66:70:68:b4:20:2e:fc:3f:54:7d:8b:a7:05:8d:
97:9d:15:63:b6:ce:73:87:f5:8b:5a:af:89:6c:35:
19:b3:03:aa:6f:ab:4a:f2:4b:61:a2:49:67:92:d0:
39:5d:d9:35:0a:a7:3d:85:7a:f1:ac:b8:5c:d5:cb:
58:88:e5:58:ef:0c:bd:0c:9f:02:55:53:7a:f5:8c:
79:68:84:1b:99:5a:14:37:32:20:e5:7d:41:d0:f9:
ee:d6:d3:78:5f:87:1f:bd:68:4a:ff:53:26:49:97:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:2E:EC:45:F6:DF:C9:A7:40:28:05:D2:07:96:7C:54:51:A5:E0
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:d3:17:05:ca:0a:db:e5:af:cb:e9:ef:15:40:35:15:6f:
66:4f:ff:d7:38:99:a0:23:cc:15:ea:34:58:23:a5:03:c8:e7:
e9:1b:19:03:e8:f8:23:64:ac:e3:de:f0:56:6b:ba:e8:5d:10:
74:f1:48:fa:14:3f:7d:d3:05:46:8b:8c:d9:0e:36:a7:0c:ca:
de:b6:52:05:e2:bd:48:51:30:e5:77:e2:c9:67:a0:86:3e:92:
10:88:22:f2:69:25:8e:58:43:67:92:07:a1:17:2e:2c:87:1d:
fb:9f:e9:a4:66:84:07:54:4b:e2:5d:54:d6:95:06:b9:9a:c4:
98:77:5e:2b:8f:ad:83:50:9c:18:9e:ee:09:16:87:56:9a:47:
06:ed:79:1f:be:c6:f4:f9:86:df:ea:aa:9f:75:60:a8:19:77:
c6:76:a9:78:d1:4b:36:5e:bc:9f:7a:ad:f8:bd:33:b6:f1:97:
4f:4f:42:9f:c1:5c:3e:81:ca:f2:3f:89:11:93:3c:34:d8:9e:
82:b4:0b:05:af:0b:bc:27:f8:60:bb:08:94:28:30:4e:59:43:
1e:38:e5:1d:f6:e7:fa:49:24:da:e1:66:ca:dd:f3:87:50:eb:
2d:cf:85:2a:d0:04:43:01:e2:23:05:bb:61:b6:aa:12:37:3a:
e0:03:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:13:21 2026 by rpki-client