Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: oR5fc6g1TTTuqDQ60PiSzSJRS4JVVPp7DVJn6L2wYwo=
Subject key identifier: F6:57:EC:68:38:E6:A1:8A:57:88:4D:D3:90:6A:16:4F:AB:82:67:10
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019D9962DBF268481369FCDA61602BBBC10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 07ED
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: z0k6dSNgsYlDNgdo35kMdQpur7aFnjChw0I+MOnN19I=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:db:f2:68:48:13:69:fc:da:61:60:2b:bb:c1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=f657ec6838e6a18a57884dd3906a164fab826710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:aa:d7:75:2f:bb:3c:1f:20:76:79:23:9d:
30:3a:46:16:65:b1:72:25:ec:c8:3b:25:b0:bd:cc:
39:b8:47:20:af:14:1f:6e:45:28:26:f0:50:bb:94:
22:54:04:e7:60:38:92:33:ff:5d:0c:08:cd:d7:07:
88:34:f5:16:e8:de:dc:6b:37:74:1c:cc:72:cb:12:
0c:5d:4d:f4:0e:f2:00:5e:3a:e0:0a:22:77:06:90:
9b:37:84:da:22:44:3f:58:07:f3:06:92:40:d5:e9:
df:77:8e:bd:b3:11:19:8e:38:ed:a1:07:12:05:7e:
0b:bb:d8:b4:08:93:1f:1f:2f:01:bd:25:2a:79:97:
8f:0f:c9:20:aa:d1:a2:c1:79:45:2c:d7:0f:8b:5f:
b8:3a:91:e6:7f:33:f9:8a:ac:6c:fe:f6:8f:56:99:
f4:52:33:e4:0a:da:a9:6a:b3:5d:c4:bb:cb:57:2a:
ba:b1:3d:70:64:0e:bd:c3:22:a6:0a:f9:29:a1:ee:
8e:39:c2:21:12:88:23:ed:8a:82:14:45:8f:cd:8b:
b7:ff:28:33:86:be:e5:8b:33:f0:be:12:ae:8d:33:
85:bb:df:f1:b2:c6:71:3d:59:c2:45:c2:32:d4:96:
2c:75:62:ed:c7:e2:bc:4b:d2:1b:be:d3:44:01:3e:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:EC:68:38:E6:A1:8A:57:88:4D:D3:90:6A:16:4F:AB:82:67:10
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:23:8b:00:6e:6c:c4:f0:0a:49:42:a2:1d:fd:9d:8a:a1:35:
cf:14:02:3a:21:48:a1:95:3b:a0:ac:0f:b9:bf:44:37:0a:53:
2f:c8:78:03:6c:81:2e:8a:9b:5f:e1:1a:c7:12:c1:e4:e4:1e:
36:81:58:ee:10:aa:76:5b:d9:12:8f:93:05:0e:dd:e6:74:fc:
16:16:45:41:62:8d:54:b2:a5:4d:d2:93:30:49:2a:c9:5e:18:
69:ca:a8:d1:b8:ca:3f:0f:ad:c7:94:a7:5b:6e:c9:45:76:7c:
3b:0b:af:e6:6a:9f:58:e6:d2:37:ca:73:ed:0d:ba:9a:8a:23:
e5:22:49:54:1e:91:4d:0f:53:2d:90:0e:75:0d:3e:83:17:47:
a9:43:a4:7c:b9:4c:01:53:6b:09:5a:cb:e8:1d:d8:d8:27:4a:
85:b2:e2:a6:6a:ae:af:5d:20:0c:58:ef:5b:49:0b:0b:81:c2:
83:20:83:ad:28:01:9e:56:74:ff:8c:7d:dd:f4:57:bc:59:90:
60:4f:b8:bb:7b:a3:2c:5d:d8:40:47:a3:6b:51:e1:1d:b1:f2:
92:8f:16:33:ea:37:3a:07:9e:90:11:27:2b:77:9c:3f:4f:59:
55:44:53:8e:ff:d1:0c:fa:0b:6d:11:d2:21:ba:84:c5:fa:ba:
dc:d9:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:12 2026 by rpki-client