Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: 9wAQCGeyhVTu+3LMe7Wd1VJKJWQ/n/jBO80bC4SIRrU=
Subject key identifier: AB:92:97:D3:E6:AC:22:E9:0B:E7:30:1B:C9:97:3A:4B:9D:94:31:68
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 019D99D00713D4B6DF36A9EB4C97F9A49791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: pCQlE3EMVONmH1sb73udOFDDLtSIY2fEqA4vCkuYFKo=)
2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:07:13:d4:b6:df:36:a9:eb:4c:97:f9:a4:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=ab9297d3e6ac22e90be7301bc9973a4b9d943168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:11:04:9e:f0:51:90:38:bc:0b:85:99:85:
ce:dc:76:1b:10:dc:d0:4c:69:68:20:ae:fa:75:10:
a4:67:6f:54:f7:73:90:d3:23:f5:d3:96:bd:db:7e:
71:93:c2:3f:42:54:88:69:b1:bd:d1:04:9f:e0:3a:
cc:e5:5d:10:1b:8b:a2:77:f5:8e:be:12:ec:97:1d:
7b:96:68:29:cb:08:37:c3:c5:43:a0:c8:3f:82:c1:
f0:cb:25:32:70:d5:77:89:aa:dc:59:69:a8:44:9b:
96:75:4b:60:e7:62:ef:4f:28:2d:7f:6e:63:13:f0:
f4:cb:12:e4:d6:6e:5a:87:7b:6e:83:d9:22:74:52:
0f:fc:80:61:ac:7f:c3:68:92:24:aa:8b:9b:3a:3e:
51:df:ac:95:a0:25:0e:1e:75:75:7b:ed:27:d6:3a:
82:e5:90:2b:c7:09:23:30:b8:9c:86:3e:c0:eb:50:
1e:52:91:d6:72:ff:f5:e5:16:f7:e5:50:52:23:1b:
d0:c8:d7:6a:2a:3f:a9:4d:55:57:07:b9:1f:4c:25:
d9:da:82:86:2f:e0:8a:ec:5c:d3:c1:f2:77:5b:f5:
f7:74:89:ff:a0:f3:40:67:54:53:2b:a2:9a:5f:3e:
67:c4:f1:8f:8c:ba:ec:69:de:12:70:9d:7d:ab:7f:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:97:D3:E6:AC:22:E9:0B:E7:30:1B:C9:97:3A:4B:9D:94:31:68
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f5:ab:c5:d9:1c:eb:cd:60:0b:35:58:3b:05:75:df:45:39:
24:64:0f:20:40:7f:cf:82:72:b1:24:34:e5:d8:ad:d1:8e:e1:
5f:5d:8f:2f:ba:d5:cd:f5:77:e5:0a:80:d1:59:a5:8d:09:68:
65:fc:31:cc:11:2e:04:64:d9:cc:5b:11:46:ae:f1:0f:64:23:
25:75:d4:fa:27:ce:96:c2:0e:2d:7e:ce:eb:29:0f:fa:54:31:
e3:9b:1d:09:48:4e:81:67:6a:43:00:be:3d:ef:5a:c9:e0:6c:
ca:31:e4:4b:13:5b:92:83:70:57:6b:a7:fb:e8:bd:b2:c2:1d:
5f:c5:57:96:e7:96:5e:e7:54:db:d5:46:8b:20:8b:f3:d3:1a:
78:17:45:5b:28:b3:35:c4:ce:32:37:77:3e:f7:db:84:df:36:
1d:c0:b1:8c:43:2b:c7:23:50:fa:99:fa:12:d2:ab:dd:9b:24:
e3:fb:93:88:09:cd:7d:33:68:29:24:c4:cd:f2:d7:36:60:ae:
1e:21:2d:68:74:6c:f3:9c:21:16:43:45:ec:12:e1:85:ab:39:
fc:2d:c0:29:f2:59:11:b9:7b:77:a3:c2:21:93:89:0b:28:84:
ca:2b:98:66:ef:75:eb:6c:b0:c5:28:e7:e5:19:6b:80:ed:79:
3f:f3:58:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0AcT1LbfNqnrTJf5pJeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOWFkMTgyNGJlNTQ2MTYzYjQ4MWZjNDk2NDdhMDUwOGIy
MjZiZjQwHhcNMjYwNDE3MDUwMDQwWhcNMjYwNDE4MDUwMDQwWjAzMTEwLwYDVQQD
EyhhYjkyOTdkM2U2YWMyMmU5MGJlNzMwMWJjOTk3M2E0YjlkOTQzMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreIRBJ7wUZA4vAuFmYXO3HYbENzQ
TGloIK76dRCkZ29U93OQ0yP105a9235xk8I/QlSIabG90QSf4DrM5V0QG4uid/WO
vhLslx17lmgpywg3w8VDoMg/gsHwyyUycNV3iarcWWmoRJuWdUtg52LvTygtf25j
E/D0yxLk1m5ah3tug9kidFIP/IBhrH/DaJIkqoubOj5R36yVoCUOHnV1e+0n1jqC
5ZArxwkjMLichj7A61AeUpHWcv/15Rb35VBSIxvQyNdqKj+pTVVXB7kfTCXZ2oKG
L+CK7FzTwfJ3W/X3dIn/oPNAZ1RTK6KaXz5nxPGPjLrsad4ScJ19q382nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuSl9PmrCLpC+cwG8mXOkudlDFoMB8GA1UdIwQY
MBaAFAGa0YJL5UYWO0gfxJZHoFCLImv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMt
ZThlMTNiYjBlMDg0LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMtZThlMTNiYjBlMDg0
LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvWrxdkc
681gCzVYOwV130U5JGQPIEB/z4JysSQ05dit0Y7hX12PL7rVzfV35QqA0VmljQlo
ZfwxzBEuBGTZzFsRRq7xD2QjJXXU+ifOlsIOLX7O6ykP+lQx45sdCUhOgWdqQwC+
Pe9ayeBsyjHkSxNbkoNwV2un++i9ssIdX8VXlueWXudU29VGiyCL89MaeBdFWyiz
NcTOMjd3PvfbhN82HcCxjEMrxyNQ+pn6EtKr3Zsk4/uTiAnNfTNoKSTEzfLXNmCu
HiEtaHRs85whFkNF7BLhhas5/C3AKfJZEbl7d6PCIZOJCyiEyiuYZu9162ywxSjn
5RlrgO15P/NYIA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:48 2026 by rpki-client