
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File: cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier: XQc7diX96EgmX6ugI1d8EdDgqJGBWXhcud+beJ9oFZk=
Subject key identifier: D4:06:98:9F:E1:7A:80:FF:46:19:B3:3A:C7:BD:52:05:98:86:FD:E6
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer: /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial: 019D9CD113BB64FDC4DD57D3912157AEF9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number: 0301
Signing time: Fri 17 Apr 2026 19:00:40 +0000
Manifest this update: Fri 17 Apr 2026 19:00:40 +0000
Manifest next update: Sat 18 Apr 2026 19:00:40 +0000
Files and hashes: 1: KEev86svpAueO8veqiaCNQVfz30.roa (hash: RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=)
2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: hoXGD7lQThwrrg17lYwRz2LJV/GY362QqcW5lpEuMj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:13:bb:64:fd:c4:dd:57:d3:91:21:57:ae:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
Validity
Not Before: Apr 17 19:00:40 2026 GMT
Not After : Apr 18 19:00:40 2026 GMT
Subject: CN=d406989fe17a80ff4619b33ac7bd52059886fde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:8e:70:56:13:85:24:b4:73:24:9e:a7:61:
af:87:3d:90:dc:42:9e:70:75:a9:46:b0:82:37:62:
f8:ec:00:7d:eb:51:56:f3:6b:73:06:52:eb:5f:50:
3b:a0:e0:ef:ba:13:81:98:30:e5:ee:1d:d7:96:c4:
33:9a:47:81:a5:a7:ce:a3:d4:b7:28:d0:5f:bb:71:
14:22:c4:56:27:d8:fe:bb:f5:0e:45:3b:c9:c5:90:
f8:ec:d2:f8:34:13:da:b4:4f:88:43:11:77:ee:fe:
1b:81:52:ac:79:bf:2e:a1:00:ac:fd:8c:e4:21:8e:
10:49:49:d8:9b:aa:b7:1c:51:b0:77:73:51:07:98:
8e:7b:5e:91:ff:4b:15:9c:44:6e:ae:cc:9b:dd:3c:
c5:f6:d9:68:a5:af:96:1e:e2:a2:48:fc:e6:7a:09:
86:f8:7a:2b:7a:9e:17:f0:8d:49:f3:54:77:88:24:
c6:f0:95:5d:1a:ea:23:c2:cc:46:06:ed:6d:51:57:
bc:25:f4:d8:50:d9:73:4a:82:bd:d1:df:49:71:cb:
71:75:21:0d:e7:4a:af:21:24:8f:6f:89:f3:b7:ef:
d2:c6:42:ff:bf:9e:1b:3f:7b:28:ea:85:ff:a0:63:
63:f5:cc:ea:9f:ea:04:fc:c6:c3:39:62:8c:9d:4b:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:98:9F:E1:7A:80:FF:46:19:B3:3A:C7:BD:52:05:98:86:FD:E6
X509v3 Authority Key Identifier:
keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:e5:64:7a:33:c3:03:ee:e9:d0:f8:3c:ec:18:0d:dc:75:
38:73:fa:bf:9a:b6:3b:d5:24:6b:3d:e2:ea:1b:20:18:a3:c7:
13:4c:cf:87:d8:b3:2d:49:2d:e9:00:97:f6:89:88:e9:e4:a8:
92:22:ca:fd:4a:6e:b4:16:d8:df:9d:1b:4d:38:93:d0:25:11:
6e:e9:a4:37:40:e4:67:29:5f:e8:9f:4e:a1:a1:63:57:88:8b:
99:ec:bd:49:4f:ae:47:dc:ae:dd:cc:b7:f9:44:a1:74:a4:03:
9c:34:17:df:71:31:81:c6:24:fd:26:c3:7b:dd:d8:d1:83:f6:
be:04:67:a0:23:9e:f1:6c:5d:dc:b6:49:ea:2a:f4:59:53:ca:
a8:d9:69:02:13:b9:59:50:47:09:58:e0:5a:86:5d:ff:87:01:
d3:7f:04:78:2d:81:e0:8d:43:4c:b4:fd:79:69:ee:fb:2b:ba:
dd:59:6d:82:55:76:f5:73:67:e0:1a:eb:d8:d5:03:b5:89:5b:
b1:d4:75:01:6c:f4:12:1e:15:9a:ef:cd:7e:32:bc:5a:fb:6d:
71:69:cb:5f:55:14:a6:11:e0:20:b4:69:6a:92:4d:46:34:cb:
c4:44:13:52:90:13:fa:e1:5b:29:b6:86:ef:8c:53:3e:40:d3:
12:1c:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:50:01 2026 by rpki-client