Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: BKpAj9H5ZBbtA5hHDi3h6AUHUgzs4OtmNHbbOTwsHWI=
Subject key identifier: F7:9B:0C:B6:59:FB:E7:7F:FE:1B:94:1C:DF:C9:AF:FF:1D:9C:C7:4D
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019DA3E67FB61C712546B20EB8C70011EEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 18CD
Signing time: Sun 19 Apr 2026 04:01:25 +0000
Manifest this update: Sun 19 Apr 2026 04:01:25 +0000
Manifest next update: Mon 20 Apr 2026 04:01:25 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: Rx1KG4XFdOkOMs+kwo1KUZxCEzL4h5o23JTgyAEvfqc=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:7f:b6:1c:71:25:46:b2:0e:b8:c7:00:11:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Apr 19 04:01:25 2026 GMT
Not After : Apr 20 04:01:25 2026 GMT
Subject: CN=f79b0cb659fbe77ffe1b941cdfc9afff1d9cc74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:17:19:15:33:c4:61:60:50:6a:60:32:99:
65:20:d7:a5:9f:36:e7:bb:e3:9f:e4:a0:bc:bb:ad:
c1:23:25:47:e8:10:1a:6d:fc:c6:17:4a:59:62:db:
d8:d5:4b:1d:22:43:62:a9:74:8e:89:ca:65:60:59:
5c:a0:3f:a0:f9:db:d7:6b:62:a8:54:19:c6:37:84:
de:86:11:d4:2f:25:ff:3d:82:b3:05:2c:59:d0:4d:
52:68:45:24:ea:4d:f2:e9:6b:4b:be:b2:44:67:0f:
32:00:3e:f5:da:d3:4b:2e:8d:e6:0c:a9:29:0d:a9:
40:8b:7f:1d:ee:aa:b4:ce:50:5c:03:dd:96:b1:f6:
80:03:af:6b:ba:ce:4e:16:62:5b:c2:24:cf:18:da:
ae:04:11:96:c7:07:75:82:e0:b7:83:79:8a:48:31:
5e:4d:56:57:a4:9b:6e:ef:b3:b5:fe:52:41:ac:76:
ac:fa:28:81:6b:83:3c:33:fa:86:36:cb:95:89:d7:
3c:50:37:6c:a9:21:71:fb:1f:c5:2e:74:96:aa:52:
38:aa:28:35:7d:c9:ed:f8:05:78:6f:f7:f2:b5:c9:
e4:f5:1f:42:c1:09:cb:56:4d:78:44:e4:56:43:d4:
3a:06:c0:a5:3b:95:dd:17:c6:db:e9:1c:c6:ff:af:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:0C:B6:59:FB:E7:7F:FE:1B:94:1C:DF:C9:AF:FF:1D:9C:C7:4D
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:72:1d:ae:a5:3c:46:6a:13:2d:c8:ca:cb:7b:2c:88:b0:
96:bd:c9:e9:e8:84:4b:1e:27:ca:cc:a4:59:b5:c2:7f:c8:b1:
0f:88:d1:f1:fb:fc:ae:b0:11:2b:55:b8:44:37:ea:bd:36:6a:
e5:7b:c3:ca:64:aa:c7:28:59:e8:b7:94:1f:12:3a:6b:6a:d4:
34:65:86:1f:88:2e:db:f9:e7:ae:e2:c2:a1:f0:02:55:2c:91:
09:d5:eb:24:7e:ec:56:9d:13:e3:eb:bd:4a:31:ed:9b:37:f7:
20:2d:1e:29:d0:f6:a8:8d:de:00:63:71:96:51:b5:38:7b:17:
36:59:7b:ce:0e:0f:a7:64:03:d7:82:72:2a:b0:5b:1b:d1:96:
71:6b:40:d8:64:12:19:b0:de:3c:b9:e5:8d:28:8a:9d:eb:e1:
c3:a6:26:f1:35:a5:a7:a5:bb:58:b3:50:38:17:c8:08:78:ba:
22:48:c3:60:b7:c9:00:fa:14:39:84:b4:8f:a0:96:b2:cc:5e:
bb:71:f8:97:32:06:ca:57:12:98:38:41:dc:ac:42:b3:e7:bd:
35:1e:7d:2f:16:ed:6b:93:8a:20:72:62:89:6a:40:cc:60:50:
91:75:27:be:e2:25:4a:2b:98:96:c3:1a:ab:6b:74:9f:f7:4d:
f9:2d:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:07 2026 by rpki-client