Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: jHuNmtHOh6IHlRC8C37PzGDqWj0u9pFWS13nRLlJB3k=
Subject key identifier: 57:6A:04:1D:7C:01:4A:73:33:B0:0C:66:95:1B:70:B9:D7:63:56:19
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019D9AE30AF1A0A3AB92AF1634EB180E8E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0A20
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: TWL0jpurPtgvLzBYG05DTMYXk1BS4MflPzFZ1WI6IDw=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0a:f1:a0:a3:ab:92:af:16:34:eb:18:0e:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=576a041d7c014a7333b00c66951b70b9d7635619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:79:03:f2:7e:68:15:ab:88:24:06:2c:f0:
02:af:8e:7d:11:df:82:60:ff:23:b8:09:19:de:86:
65:40:cf:ac:5e:67:cb:5a:11:00:4e:68:43:07:67:
58:70:b7:03:3d:b2:d3:23:78:d5:cc:da:ba:25:9e:
23:64:cd:09:33:86:fc:24:09:cb:01:ef:e4:09:02:
94:b3:23:70:72:6e:31:cb:3c:ff:90:02:4b:ba:e9:
95:1c:38:1b:de:4e:e9:0f:68:47:05:66:f0:d3:7e:
bd:a9:b0:d2:8c:0f:6b:53:d6:3a:81:5e:1d:0d:c3:
91:ae:b8:08:7f:16:1a:41:35:37:6e:13:a5:07:e6:
c1:21:18:60:10:d6:a0:c9:b7:7d:7c:20:db:9c:ae:
97:cf:e4:9f:1a:86:92:a4:26:87:39:24:73:36:c5:
d8:2e:bc:18:9e:03:49:cc:a6:32:eb:d3:e7:e8:6d:
de:0f:2e:a5:bc:ee:ca:40:02:29:41:5c:6a:67:26:
ca:cd:3b:99:1a:c0:20:8c:1e:ff:4b:7c:2e:0b:22:
4e:e3:c6:0b:e1:d3:a1:db:0c:e4:6c:d3:d7:05:3f:
7b:a0:c6:9f:20:b5:da:31:d1:67:ea:07:fd:9c:99:
7a:48:a0:75:54:99:fe:25:91:93:4d:c2:39:8e:b2:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:04:1D:7C:01:4A:73:33:B0:0C:66:95:1B:70:B9:D7:63:56:19
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:a2:a9:67:b1:d4:3e:39:91:2d:9f:08:d1:3d:8a:fe:75:
fa:86:6b:1a:ec:61:2d:fe:ec:68:d8:14:73:17:71:0a:a8:8d:
93:40:87:e2:9b:34:1a:ef:b6:a4:07:f2:fd:08:db:c6:b9:84:
80:87:20:7c:00:a6:92:72:4a:b7:55:0e:b8:1e:d9:c9:96:a4:
21:30:69:d0:c1:37:a9:e1:27:25:7f:40:69:02:fb:37:e2:1f:
14:0d:41:6f:52:7f:c3:82:78:aa:ac:75:f1:08:7e:6c:50:62:
5e:04:8c:d3:0d:cf:e2:a7:12:20:d1:f9:19:4c:d4:06:49:cc:
98:55:4f:2e:c5:79:b8:97:01:df:1a:33:61:a3:d6:4d:5a:23:
45:d5:46:04:b3:0b:87:e2:48:5e:f4:4d:4a:f6:ab:58:27:ef:
49:55:78:16:3e:94:d8:2c:a3:b6:89:a1:0e:75:9f:0c:f1:fa:
d5:72:65:a3:dd:9d:51:57:8f:7d:6d:a7:43:80:7b:e6:c4:27:
78:73:59:ec:02:d8:dd:12:d2:5e:e9:62:7b:55:6e:1b:2a:81:
8d:e1:fc:50:75:df:ee:b1:a6:77:17:46:62:62:e6:49:84:7c:
84:1b:8c:65:a3:da:0b:ef:22:33:47:15:0a:5a:09:15:78:4f:
60:47:25:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4wrxoKOrkq8WNOsYDo5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjYwNDE3MTAwMTAzWhcNMjYwNDE4MTAwMTAzWjAzMTEwLwYDVQQD
Eyg1NzZhMDQxZDdjMDE0YTczMzNiMDBjNjY5NTFiNzBiOWQ3NjM1NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc15A/J+aBWriCQGLPACr459Ed+C
YP8juAkZ3oZlQM+sXmfLWhEATmhDB2dYcLcDPbLTI3jVzNq6JZ4jZM0JM4b8JAnL
Ae/kCQKUsyNwcm4xyzz/kAJLuumVHDgb3k7pD2hHBWbw0369qbDSjA9rU9Y6gV4d
DcORrrgIfxYaQTU3bhOlB+bBIRhgENagybd9fCDbnK6Xz+SfGoaSpCaHOSRzNsXY
LrwYngNJzKYy69Pn6G3eDy6lvO7KQAIpQVxqZybKzTuZGsAgjB7/S3wuCyJO48YL
4dOh2wzkbNPXBT97oMafILXaMdFn6gf9nJl6SKB1VJn+JZGTTcI5jrLH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdqBB18AUpzM7AMZpUbcLnXY1YZMB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIuiqWex
1D45kS2fCNE9iv51+oZrGuxhLf7saNgUcxdxCqiNk0CH4ps0Gu+2pAfy/QjbxrmE
gIcgfACmknJKt1UOuB7ZyZakITBp0ME3qeEnJX9AaQL7N+IfFA1Bb1J/w4J4qqx1
8Qh+bFBiXgSM0w3P4qcSINH5GUzUBknMmFVPLsV5uJcB3xozYaPWTVojRdVGBLML
h+JIXvRNSvarWCfvSVV4Fj6U2CyjtomhDnWfDPH61XJlo92dUVePfW2nQ4B75sQn
eHNZ7ALY3RLSXulie1VuGyqBjeH8UHXf7rGmdxdGYmLmSYR8hBuMZaPaC+8iM0cV
CloJFXhPYEcliQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:06 2026 by rpki-client