Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: Ft//Sz5bQDOUBMweTdWLYHuksdg73b1TkwA2GRw7YYo=
Subject key identifier: 14:90:0F:D1:51:B6:AD:59:87:DE:3B:9A:F9:21:86:1B:C4:C0:28:84
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019D9962DB5F6A7D68C3B52EFDFF2E3E8327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 07AA
Signing time: Fri 17 Apr 2026 03:01:25 +0000
Manifest this update: Fri 17 Apr 2026 03:01:25 +0000
Manifest next update: Sat 18 Apr 2026 03:01:25 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: Znd9MRUr06i54WASKyvuYiVjfQXV/KSyeKOC8wTz0Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:db:5f:6a:7d:68:c3:b5:2e:fd:ff:2e:3e:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Apr 17 03:01:25 2026 GMT
Not After : Apr 18 03:01:25 2026 GMT
Subject: CN=14900fd151b6ad5987de3b9af921861bc4c02884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ef:ee:27:db:9b:36:25:d7:0b:04:3e:86:25:
8e:38:26:e5:cf:f2:7e:50:98:25:d3:60:fc:d0:31:
d3:58:d2:c7:65:42:e6:87:7c:95:51:e6:2c:32:1e:
51:41:85:83:95:d8:43:e4:e3:34:39:be:76:8b:65:
bf:32:54:a9:9c:9c:c9:a3:27:8a:3a:e6:0b:9d:11:
32:cb:be:04:ea:04:2d:cd:f0:4e:03:9c:e2:b2:6c:
cb:30:40:cf:cd:79:2a:bb:b6:4d:de:fe:3e:65:07:
46:d6:33:94:31:c6:a2:55:35:44:c7:c6:be:8e:30:
45:44:1e:2d:3b:da:f6:11:70:8a:31:c4:72:2d:b0:
d0:56:42:92:e3:8d:51:6c:54:1b:d8:b2:c9:53:2b:
3d:d6:77:43:cd:e7:46:dd:93:0e:02:74:b7:3b:5a:
92:ff:b1:d9:28:37:10:37:d1:1c:6d:f8:e6:4d:96:
53:c5:cc:7a:79:47:57:b1:65:6f:63:ee:7d:a6:9b:
18:29:1c:77:67:c4:e9:d5:61:af:8e:2d:a4:62:52:
b9:bb:9c:4a:3a:0c:40:1d:08:c7:ce:f5:32:c4:54:
b9:0f:2c:3c:c9:ef:0b:cb:d9:3f:58:65:32:1e:ed:
0f:15:1a:48:e7:c3:c2:ad:6b:50:2f:fb:10:f1:fd:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:0F:D1:51:B6:AD:59:87:DE:3B:9A:F9:21:86:1B:C4:C0:28:84
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:0e:86:e6:25:4a:4f:22:9e:f7:b2:6e:90:d4:e0:45:b1:
5d:8f:c6:01:c5:44:de:65:67:5a:42:85:92:a8:53:4a:96:a8:
f2:d1:8c:70:b6:0e:8d:69:9b:28:98:36:4e:16:92:69:a2:1d:
62:20:b0:cd:2b:44:e5:05:a1:d7:a5:cf:91:e3:38:5b:46:d1:
4a:81:ff:06:9f:7d:84:ce:45:f9:e4:a7:5d:3d:60:ed:8b:c8:
47:67:a8:37:0c:63:93:b9:1b:7d:67:bc:97:de:3e:8b:d8:b6:
88:c0:86:50:c1:86:10:8f:21:25:6b:41:97:32:5e:8b:8c:63:
18:ea:d0:c6:4b:d4:9b:e6:9a:53:81:a8:6b:e7:66:89:f6:02:
88:72:4c:4d:87:68:bc:e1:df:81:4a:28:ee:50:25:d6:c1:fa:
20:0c:92:99:50:5b:56:8b:c8:47:f0:b3:82:54:15:6f:e3:87:
fd:c4:e5:59:f4:5c:fc:bb:c6:a9:1b:7e:e8:c6:52:c8:3b:53:
26:02:80:a4:36:c1:59:36:19:e0:fb:e1:bf:29:25:62:81:ee:
8c:17:74:94:d4:17:f7:38:56:9f:d6:32:b0:86:2a:bc:70:a3:
18:70:18:a7:7e:b4:79:76:bb:9f:7c:21:af:cb:a3:1b:6d:ab:
28:0d:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:16 2026 by rpki-client