Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: O6tX4MC2gCkj/LzxDiLyKulduFLn9NE5pe8wzupsfP8=
Subject key identifier: 45:45:7B:9F:D6:99:EE:F5:87:6F:80:B9:8C:A5:46:6E:F2:63:D9:DC
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019D996310E774E8223C1D61E670DBE4A28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0E37
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: U+JVHbY8eqQt/NWRoGz8fXzoVDJmtwjporSeL+UNjmQ=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:10:e7:74:e8:22:3c:1d:61:e6:70:db:e4:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=45457b9fd699eef5876f80b98ca5466ef263d9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:83:7f:97:fa:6f:ad:84:fe:a2:41:8e:91:
58:3b:e8:d6:af:f6:d6:77:50:d3:08:23:da:e3:46:
2a:31:43:a0:c1:24:51:2d:fc:2c:53:36:76:17:75:
64:d7:0d:79:ce:f7:6b:73:d5:fe:14:40:03:3d:29:
d7:26:f2:1c:27:12:7a:21:81:7b:89:5a:06:b3:ce:
8a:42:af:41:91:b0:eb:bc:0a:ae:49:02:81:73:5c:
58:c8:6c:15:36:23:b8:fa:d9:3a:30:f6:f4:9a:a7:
85:fc:1f:8b:c9:01:4d:ae:b4:5c:3d:cb:9f:46:c2:
44:b1:a4:72:af:2e:5d:6b:41:35:8b:d8:1c:ab:bf:
bb:1b:05:3a:f2:75:59:c2:8a:fe:39:fb:93:ad:10:
e9:dc:e0:02:ee:c6:12:a1:a7:d2:e1:b8:76:e3:be:
92:5d:09:4a:ff:10:b0:d9:75:a3:69:7d:4d:88:62:
90:93:59:55:07:d7:2b:8a:16:f3:94:16:5d:42:1c:
dc:28:97:40:87:e8:fb:67:4e:d3:0f:37:43:57:f6:
3f:b0:d0:7e:7c:66:bb:b2:bf:21:73:0a:24:8d:2a:
bc:92:03:ed:69:a2:4e:68:53:fd:81:cc:02:e7:ad:
1e:bf:f5:2f:84:db:25:ca:fe:d1:19:98:84:0a:25:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:7B:9F:D6:99:EE:F5:87:6F:80:B9:8C:A5:46:6E:F2:63:D9:DC
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cd:fd:b2:62:4a:ae:91:73:3b:1a:b4:49:cd:00:aa:f3:4f:
4b:9c:c0:07:ce:01:ee:1f:61:eb:af:ee:2e:7c:a6:e0:e7:db:
24:51:4a:6b:56:10:ac:99:28:d6:1b:ce:6a:f4:f6:68:53:0a:
36:26:6c:dd:42:45:15:45:11:b1:7a:ec:37:e9:09:60:b1:0c:
18:3c:5c:51:66:86:a9:2c:ed:ef:85:7d:18:08:e8:ed:dd:64:
b9:4a:aa:8c:3b:ca:37:4c:a4:43:30:20:68:88:75:ab:a1:c1:
da:67:15:d3:92:02:61:f2:d4:f8:c5:fd:6e:9f:f0:4a:c1:b7:
f4:5b:22:80:19:85:63:ab:22:80:53:c0:64:20:ba:37:80:48:
36:c9:ef:04:a0:e9:32:58:9d:59:9e:ac:31:f8:e3:e3:c7:49:
c7:67:27:7f:72:6b:1a:81:60:98:94:02:a3:d8:99:ca:54:2b:
f9:68:82:c7:cd:3c:9c:cd:9c:ab:5b:fb:90:bc:70:06:2a:19:
37:4d:f9:da:f8:cb:5c:6a:c2:03:eb:90:a3:f8:25:e7:9f:a1:
37:1f:9f:b6:15:75:fb:ad:8e:4d:0b:6c:22:ce:92:e9:07:60:
92:3b:b5:75:79:79:8b:27:ac:c7:d3:8a:06:6f:d2:e0:0c:4a:
bb:e2:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:59 2026 by rpki-client