Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: BIJ/fRtwonWnURlIUEu27mmehoS+hc+D7lxJB7ni49M=
Subject key identifier: 47:AF:97:25:0A:01:77:71:8C:30:69:A0:66:26:B2:80:CE:65:1A:BB
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019D9BF59137F915F10D3B6D722B4ECEDB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 15:00:54 +0000
Manifest this update: Fri 17 Apr 2026 15:00:54 +0000
Manifest next update: Sat 18 Apr 2026 15:00:54 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: fXx5f/PWa9xDRyaz9oghDMuqjt7WXQTo90Ao0zTRRkc=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:91:37:f9:15:f1:0d:3b:6d:72:2b:4e:ce:db:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Apr 17 15:00:54 2026 GMT
Not After : Apr 18 15:00:54 2026 GMT
Subject: CN=47af97250a0177718c3069a06626b280ce651abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:ea:d3:88:28:dc:4c:d8:6d:18:b0:82:c4:
44:2d:35:0f:87:f9:71:3f:d9:35:de:10:a8:08:d9:
59:2a:4c:d3:e7:a2:56:22:5d:09:27:4e:45:ac:d5:
7f:0e:ba:7c:0a:00:ea:08:0e:b0:5c:59:45:ed:dc:
d1:38:05:59:06:c0:5c:6e:f8:35:ac:bb:2a:d6:e4:
e5:8d:5b:03:f1:ba:95:f1:ec:4f:bf:be:e3:72:b2:
35:44:1e:53:c0:db:1f:40:8e:b4:56:ab:b7:34:27:
65:15:6a:b3:61:8d:a5:16:7b:e3:04:f8:ff:00:f2:
8d:1f:e3:0f:7f:f6:70:d0:c1:d8:6c:83:c5:c9:4a:
b4:a8:1a:34:16:98:1a:70:da:92:09:cc:62:11:99:
ae:a5:10:eb:08:b6:1e:6b:46:61:b4:7d:9b:31:b3:
ec:b1:5b:8e:ef:0e:bd:9b:1b:a9:25:7b:c7:9e:fc:
47:a8:2a:31:60:a3:80:02:a2:7e:bd:b9:2e:2f:a9:
d6:b1:e8:6e:96:46:97:32:7a:5a:0b:77:a6:2e:0c:
6a:4b:7d:c6:90:de:0b:0c:43:4b:50:39:a4:fc:3f:
94:10:1f:a1:6a:05:6e:eb:01:32:a3:38:fe:fc:ad:
bb:6b:b8:a9:6a:ec:65:2f:27:ef:60:a7:24:91:cf:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:97:25:0A:01:77:71:8C:30:69:A0:66:26:B2:80:CE:65:1A:BB
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b1:59:78:97:9d:b9:80:f0:ed:a5:e8:05:5e:6d:11:e3:0c:
3d:88:35:d1:e3:de:fd:6f:dc:95:ee:66:3c:90:b8:96:2e:3b:
19:41:10:a8:c0:f2:06:a4:ed:53:48:8d:ed:e2:f7:bd:2b:fc:
57:6d:59:7c:fd:8e:7f:cc:c7:8a:da:96:c2:ea:b5:15:4c:2e:
a0:c6:26:7e:6f:e3:e6:d4:a5:6e:f6:10:e4:4c:b4:7e:db:ee:
64:c0:5f:ca:7d:85:71:13:7e:bc:6c:3c:9e:cc:91:91:61:b7:
ed:93:d3:70:85:4d:67:1a:e8:46:79:b1:87:a9:82:31:7f:2c:
c0:2f:aa:d7:9d:71:40:f8:b1:c8:9a:98:42:37:3c:60:8b:b5:
1e:42:cd:e4:37:05:cc:fb:f5:da:e4:da:61:72:39:5d:da:30:
cd:91:09:80:cb:0e:fb:62:a5:d9:62:68:43:f4:c9:65:e7:76:
69:fa:b9:cf:e7:35:15:d8:6e:25:79:90:0c:d3:f4:00:3d:8a:
19:95:04:ec:2f:2a:a2:5e:73:25:6c:e9:75:17:7a:a6:a3:f5:
5a:6f:fe:8e:93:1f:4c:46:57:e8:8f:66:59:dc:31:c2:9f:ed:
f0:9e:4f:d9:2f:99:ce:39:56:be:c9:ba:91:67:18:a6:0b:8f:
c7:1e:25:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9ZE3+RXxDTttcitOztsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjYwNDE3MTUwMDU0WhcNMjYwNDE4MTUwMDU0WjAzMTEwLwYDVQQD
Eyg0N2FmOTcyNTBhMDE3NzcxOGMzMDY5YTA2NjI2YjI4MGNlNjUxYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8vq04go3EzYbRiwgsRELTUPh/lx
P9k13hCoCNlZKkzT56JWIl0JJ05FrNV/Drp8CgDqCA6wXFlF7dzROAVZBsBcbvg1
rLsq1uTljVsD8bqV8exPv77jcrI1RB5TwNsfQI60Vqu3NCdlFWqzYY2lFnvjBPj/
APKNH+MPf/Zw0MHYbIPFyUq0qBo0FpgacNqSCcxiEZmupRDrCLYea0ZhtH2bMbPs
sVuO7w69mxupJXvHnvxHqCoxYKOAAqJ+vbkuL6nWsehulkaXMnpaC3emLgxqS33G
kN4LDENLUDmk/D+UEB+hagVu6wEyozj+/K27a7ipauxlLyfvYKckkc9/9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEevlyUKAXdxjDBpoGYmsoDOZRq7MB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArFZeJed
uYDw7aXoBV5tEeMMPYg10ePe/W/cle5mPJC4li47GUEQqMDyBqTtU0iN7eL3vSv8
V21ZfP2Of8zHitqWwuq1FUwuoMYmfm/j5tSlbvYQ5Ey0ftvuZMBfyn2FcRN+vGw8
nsyRkWG37ZPTcIVNZxroRnmxh6mCMX8swC+q151xQPixyJqYQjc8YIu1HkLN5DcF
zPv12uTaYXI5XdowzZEJgMsO+2Kl2WJoQ/TJZed2afq5z+c1FdhuJXmQDNP0AD2K
GZUE7C8qol5zJWzpdRd6pqP1Wm/+jpMfTEZX6I9mWdwxwp/t8J5P2S+ZzjlWvsm6
kWcYpguPxx4ljw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:12 2026 by rpki-client