Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: MitTLsfwzrYRppujrnd1p22aegXPYdN8c6SGUoVDrpY=
Subject key identifier: 40:93:61:AF:75:39:56:AC:70:6A:7C:51:5D:4B:C2:C6:E3:1A:AD:3B
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019D98BDDB774FDA229E9F2E56EA675D236F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: EqvKSR9iXegXy1dMoZ2bleJg3E0.roa (hash: vK0XksnitfnobMuyE2LGuN8IoAOExUJuqPdiZ3yM2Co=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: 36tNe/NL47rM2bLYRZKijth8Y0tbD9zwK6QZcBrSqN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:db:77:4f:da:22:9e:9f:2e:56:ea:67:5d:23:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=409361af753956ac706a7c515d4bc2c6e31aad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:04:4b:8b:c3:42:d2:3a:95:f8:26:74:27:
f8:46:76:cd:90:b3:cd:7c:28:96:ec:33:7a:26:25:
77:d5:a7:12:49:49:31:ff:70:b5:a5:25:31:2c:54:
5c:e5:65:a0:20:c9:20:d1:15:e2:b9:0d:6a:f1:a4:
cc:3d:64:3e:ea:88:5a:f1:21:d8:27:12:31:9b:a0:
be:8e:17:ac:80:9a:69:4b:c3:46:9f:bf:7d:19:fe:
db:07:82:70:3e:a4:aa:07:7a:e9:ca:ce:f1:9c:b9:
a5:b0:77:dc:84:8d:2e:37:a3:a2:7f:ec:fa:fb:74:
a0:eb:80:98:a5:31:a4:4e:52:83:ea:23:a1:3b:d7:
8a:1c:56:05:a2:8c:30:ba:bb:fc:bf:2f:7a:09:e5:
b9:01:e6:f3:c0:ef:86:7b:c5:90:3a:a7:d7:3f:bf:
74:3e:96:cb:94:c0:78:84:30:e0:d3:ff:18:26:c6:
0b:69:2a:5e:9d:01:1c:5b:e5:e4:ff:22:5a:6e:5c:
58:4d:2d:cc:1c:8e:a5:aa:02:0d:a2:c2:97:87:c0:
0f:69:4f:76:cb:3a:d9:e8:b5:5e:0c:27:63:65:c0:
98:bd:09:85:87:a5:1e:e4:a5:b4:76:62:83:3e:17:
e2:27:8b:d4:3b:f5:a5:45:30:81:d5:c0:a4:37:a6:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:61:AF:75:39:56:AC:70:6A:7C:51:5D:4B:C2:C6:E3:1A:AD:3B
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:5e:aa:3a:ce:6e:af:87:de:02:91:5c:ff:5c:85:9b:ca:80:
fc:5d:2c:e8:8e:7e:5f:5b:07:0f:11:1e:60:c1:60:d6:da:d4:
8a:f2:49:58:10:8f:39:ef:00:6b:28:80:cc:5d:04:0a:0f:9f:
c7:ec:cb:b4:f7:1e:fd:60:79:2a:f8:7a:4b:2c:ed:bf:1d:27:
7a:35:52:32:20:ef:fb:55:19:fd:f6:d1:c7:f2:ff:3d:31:8d:
d5:0c:2f:11:26:49:f3:49:31:b9:4c:06:ed:6b:78:47:5c:b3:
03:a6:80:e5:16:75:2f:6b:1e:9b:d0:3d:73:d7:c3:89:1d:59:
9b:f4:be:12:0e:4e:8e:04:0a:3a:1a:6b:5d:30:1d:2e:f4:47:
69:40:8e:7c:86:81:a3:33:00:c4:64:e9:a3:2b:16:b8:6b:6f:
a1:6e:ad:28:8f:f7:9e:7b:ed:0f:5d:8a:fc:ab:14:ac:91:a1:
2c:4a:3b:d5:27:4b:29:6c:6d:73:7a:49:af:67:29:cc:2e:9c:
9d:a9:8c:b3:3a:22:08:6a:53:e0:e7:81:a6:f8:11:80:ed:e1:
5d:88:e8:a9:ba:a7:9b:04:d2:ff:8a:5f:79:6b:c1:c8:22:35:
dc:29:f1:c0:3a:66:c3:3c:83:b1:8d:6c:7f:35:c3:22:23:c6:
1d:90:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:59 2026 by rpki-client