Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: LpNWMOXSzUcsSkNuJpe27fG4cGgqPtoUCfvn4KC6it0=
Subject key identifier: 81:92:4C:EB:56:1A:8B:C6:24:11:FF:7E:62:87:DD:0C:85:13:6A:CE
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 019D9B87CA622D753D839C5C4DE4680FD891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 13:01:00 +0000
Manifest this update: Fri 17 Apr 2026 13:01:00 +0000
Manifest next update: Sat 18 Apr 2026 13:01:00 +0000
Files and hashes: 1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: G4gKwmXItrp32mxrBoNmOvNxhoci5FsZtrkikzW9+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ca:62:2d:75:3d:83:9c:5c:4d:e4:68:0f:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Apr 17 13:01:00 2026 GMT
Not After : Apr 18 13:01:00 2026 GMT
Subject: CN=81924ceb561a8bc62411ff7e6287dd0c85136ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:6f:e1:d2:74:be:5a:ca:6b:8d:b3:72:10:
4b:58:cf:f0:d6:8b:7d:48:6a:6f:db:71:78:be:9b:
ce:d1:23:fc:8b:6d:92:9f:8c:53:14:eb:f2:e5:94:
4b:78:e2:93:17:f1:47:b1:75:89:12:72:cf:30:67:
f4:21:b5:b2:20:5f:51:6e:ad:7d:75:15:c3:06:a0:
3b:62:99:43:7c:ac:c9:1a:48:45:90:cf:6d:11:33:
57:69:da:56:59:c0:7d:4a:4e:d2:d9:82:94:76:33:
81:34:22:fe:24:3d:4a:4b:77:cc:fc:e7:10:5e:c7:
22:5b:b5:16:c7:6c:86:4b:99:fb:ec:0e:89:6a:e5:
d4:70:7e:84:59:cb:89:97:53:67:20:a0:5f:66:bc:
5d:e8:ac:cd:a8:09:1d:d7:dd:c4:19:4e:a9:fe:92:
4a:9d:35:34:17:5c:10:06:c9:44:4f:35:f3:3c:4a:
b2:5e:f0:41:fe:b5:af:80:58:a5:e9:c0:b6:3f:f2:
ef:fc:aa:f5:1d:2d:5e:92:2d:5a:cc:08:85:36:a1:
91:e4:3d:7d:ff:45:b7:18:9c:42:17:13:a3:fe:e1:
f5:eb:8c:b1:61:9c:14:3c:5c:29:db:dd:54:fe:2e:
9c:f7:b0:a5:fd:c7:75:12:35:d2:7e:ba:b8:ac:33:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:4C:EB:56:1A:8B:C6:24:11:FF:7E:62:87:DD:0C:85:13:6A:CE
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:26:80:87:b9:86:89:5a:0c:6a:97:cb:43:ee:9e:ee:0b:
1d:1d:2a:10:2c:76:cc:cb:e3:b7:0b:35:ca:7a:0f:f3:8b:f9:
18:61:16:43:12:9d:4b:5d:59:82:14:0d:f7:af:3c:50:47:d2:
d5:c8:3d:e5:b4:99:46:c4:cb:f9:96:27:0c:19:58:2f:87:30:
f0:74:34:03:47:e0:30:13:c1:57:ee:3e:cf:65:9f:b3:1f:0e:
cc:00:cf:be:35:70:fc:3e:4f:79:2b:d9:a0:9d:a7:a1:9c:7b:
35:5c:c6:0d:4e:19:2a:d1:63:55:12:2b:69:19:79:eb:f6:f4:
11:11:2f:42:9b:18:f1:b6:a5:db:48:50:cb:88:51:aa:fd:6c:
1d:26:42:36:67:2a:e3:52:dd:e1:da:89:ca:6d:6e:a7:2c:06:
98:95:c3:16:55:61:d4:3f:6f:01:36:1e:fc:5e:05:7d:e0:02:
53:65:3b:a3:74:81:ec:0a:87:45:ff:f1:4a:ab:fc:a2:f7:78:
d5:2d:07:a9:97:bf:43:ca:1c:a9:fc:16:b7:ef:01:f6:6e:a7:
66:13:d2:30:f4:8a:cb:9d:00:44:2b:56:b9:b7:d2:ed:91:10:
00:9f:27:a4:c7:f8:96:75:b7:6d:cc:d0:39:f3:52:dc:ed:ad:
38:32:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:12 2026 by rpki-client