Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: qms9opQsUB/GmrV/aKqvgbhoi0sMyxDlZRK+vp3irlM=
Subject key identifier: 5E:44:18:52:1D:BD:94:F9:9C:DB:55:C1:A9:6C:03:B9:DA:5B:10:9F
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019D9B87F525A8F1599BB80A9310302AB70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0789
Signing time: Fri 17 Apr 2026 13:01:11 +0000
Manifest this update: Fri 17 Apr 2026 13:01:11 +0000
Manifest next update: Sat 18 Apr 2026 13:01:11 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: 1aVE71U/VWJ+UEhndY7HyRi6lTRBOGD0RXjeCbLtXOk=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:f5:25:a8:f1:59:9b:b8:0a:93:10:30:2a:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Apr 17 13:01:11 2026 GMT
Not After : Apr 18 13:01:11 2026 GMT
Subject: CN=5e4418521dbd94f99cdb55c1a96c03b9da5b109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:f2:69:79:b1:3b:4e:58:49:5f:72:6b:80:
9b:90:ac:28:3c:56:e6:c2:97:78:58:99:86:fa:56:
a9:35:ac:45:d1:be:2c:01:5e:09:29:da:f8:54:66:
3a:a9:71:fd:30:76:b0:73:50:72:9d:31:ee:74:4b:
20:b0:3a:e1:2b:0b:03:3f:aa:e1:66:1d:ba:a3:d5:
f3:79:96:aa:32:b8:e4:67:20:28:79:bb:8f:ae:5b:
1b:d5:48:27:38:d3:bc:88:14:16:53:44:44:e6:eb:
5a:6c:6f:5a:0c:c1:57:8a:fc:2f:2f:f8:c4:44:8f:
a1:f0:06:31:4f:30:18:48:3b:8e:be:3a:79:c6:65:
cb:64:a0:68:50:45:fa:e9:0e:5a:e5:21:27:5c:5f:
bb:e6:c3:88:1d:34:6e:fc:61:db:f0:85:92:e0:69:
c1:6b:c7:89:39:9b:a1:b1:04:1c:64:db:8a:1b:78:
4a:b2:a9:0c:99:0e:77:14:5d:6d:76:67:b6:f1:1d:
9d:46:3b:3a:70:66:5a:41:25:d5:ed:d8:29:cc:a2:
fa:b4:90:62:76:04:48:73:f6:6f:c7:4a:29:0f:81:
2a:5c:e5:03:9a:f2:8d:89:a3:3c:50:0b:75:83:65:
76:e9:5c:53:af:0d:e3:a3:a7:c2:7e:ef:87:89:93:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:44:18:52:1D:BD:94:F9:9C:DB:55:C1:A9:6C:03:B9:DA:5B:10:9F
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5e:08:32:68:ac:66:13:4f:8f:00:d6:26:a0:1b:63:09:f1:
d8:3e:8d:28:5e:ee:d3:b1:eb:f5:4a:b9:7c:11:44:ba:71:26:
1b:d6:31:b2:36:97:c4:4b:47:ef:3f:11:9a:59:8d:c8:21:08:
96:95:3c:80:d5:81:2e:d6:76:d4:6e:3b:e1:19:48:f8:a1:bb:
5e:61:a0:47:f6:6e:25:ba:be:ea:87:31:a4:e1:74:e7:70:a5:
4a:78:c3:6b:d8:01:72:b8:54:ef:44:98:0f:f6:4f:47:71:46:
e7:bc:92:63:b9:85:02:ff:da:94:44:46:45:93:21:c1:18:0b:
cf:96:2d:c3:36:f9:6f:de:42:91:fe:40:ca:a6:80:41:df:7c:
95:5f:2a:55:a3:39:27:4e:9b:ee:a3:6e:5a:fa:23:f2:2f:22:
b5:7a:a0:ee:b5:b1:12:9a:e3:38:25:f1:82:aa:dd:e3:5e:69:
be:13:3e:0b:57:c2:41:13:ef:14:7d:2b:ca:c8:e3:35:28:23:
d5:e0:3d:7b:65:1e:20:37:2a:3a:a0:06:85:56:57:c6:63:52:
50:fc:73:46:25:09:6d:48:a9:32:17:1c:82:5c:f1:93:f5:79:
38:e4:b4:ee:4e:9c:0b:30:af:d6:2a:f5:c7:46:c0:d7:13:b4:
01:5b:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:27 2026 by rpki-client