Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: 2eIHb6g8Vqk6IpXg/10thULF0i2Qgpc1dUHHVdCJ6Mo=
Subject key identifier: E9:17:13:EE:FF:01:79:31:8A:C1:B4:EF:D1:FC:A2:D2:9B:0B:13:84
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019D9C2CDA09BFDBBDB34955F920DE4854F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 1325
Signing time: Fri 17 Apr 2026 16:01:18 +0000
Manifest this update: Fri 17 Apr 2026 16:01:18 +0000
Manifest next update: Sat 18 Apr 2026 16:01:18 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: +S1OEOv74E/EziQo26JVdHW9J71XzLgYi8FdGcvosCw=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:da:09:bf:db:bd:b3:49:55:f9:20:de:48:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Apr 17 16:01:18 2026 GMT
Not After : Apr 18 16:01:18 2026 GMT
Subject: CN=e91713eeff0179318ac1b4efd1fca2d29b0b1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:5a:03:fe:bd:02:38:a6:29:c0:e1:69:98:
d7:c5:e1:65:f1:d7:7d:d8:e1:df:0f:48:d0:99:df:
27:73:83:a4:cb:12:e3:6a:5a:dd:f6:ce:53:cf:34:
e0:01:62:da:8b:47:77:60:24:fc:20:cd:d9:67:b4:
5b:e1:df:62:93:e6:f0:fc:e5:2e:e0:30:bd:c5:56:
da:d7:54:7f:ac:9d:ca:3d:37:92:fa:2a:dd:41:cd:
34:44:89:68:08:53:e2:03:d0:a9:36:28:2b:8b:e1:
c5:b6:21:22:8a:98:97:0f:7b:89:90:a2:26:06:10:
71:dd:c2:ff:54:8d:70:81:29:74:de:a5:ec:60:b9:
f4:f8:36:ca:0d:5a:73:01:df:ef:da:72:56:e0:60:
5d:19:a2:8e:a0:61:84:41:1c:96:3f:03:42:64:db:
7b:5d:42:1e:42:94:64:11:de:1b:6c:43:c1:2a:b5:
25:86:a2:f2:f2:41:61:8b:28:a2:10:ea:f3:af:67:
f4:a7:ee:c2:76:15:5c:ad:10:3d:d4:f6:2e:da:1f:
8f:5c:34:de:86:2d:4c:36:95:71:3e:23:a1:92:3a:
74:b8:e9:ae:45:d0:9a:54:ae:15:d3:5f:4f:85:c8:
99:75:25:56:47:6c:0a:49:c2:2f:88:b3:da:bd:b5:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:13:EE:FF:01:79:31:8A:C1:B4:EF:D1:FC:A2:D2:9B:0B:13:84
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:52:a6:4f:db:34:f9:0d:ef:71:8a:24:32:45:9b:50:e9:9c:
ad:67:1b:34:85:f3:b4:28:c1:13:cd:9f:e0:6d:d0:34:f7:d0:
71:bb:a5:1c:7f:90:0d:3a:68:8f:c4:16:51:3f:7e:25:bc:7e:
ea:4f:78:9c:25:3c:89:b6:00:48:34:94:0e:f5:0b:23:97:cd:
07:d5:a7:ff:d5:f7:93:79:1b:93:c4:1b:b8:cb:90:28:79:e2:
5b:d6:39:7b:57:6b:f0:05:43:6e:2b:4d:7b:33:5a:47:1c:de:
88:bf:71:f6:05:8b:5d:d2:2c:79:22:14:8e:f1:40:eb:31:1e:
c6:e5:1e:3a:2f:bf:4c:63:75:ba:0a:63:42:8d:a4:63:77:ba:
73:49:d7:11:c9:d5:50:e9:0b:70:81:a9:03:47:e1:6a:f2:0f:
b3:2f:d1:7c:da:b1:8c:36:35:99:0c:af:24:fe:c3:4a:35:8d:
48:88:f2:d7:34:4e:6c:c5:76:c1:18:3e:24:47:d0:38:f1:4f:
d2:4e:9e:92:f7:e2:a8:86:d4:19:4b:33:da:95:94:75:8f:d0:
3b:7a:65:9c:c7:8f:d2:5d:cf:eb:3f:95:ba:24:49:1c:d3:85:
65:ab:4b:54:65:5d:62:b4:2b:06:bf:b4:c3:37:98:f1:c1:e4:
42:e4:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:34 2026 by rpki-client