Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: kYf01jwmy8aj6dUxpMrDKpPiGK7gdWIgeomV96JvO+8=
Subject key identifier: 96:B1:8A:98:7C:80:2F:09:27:CD:1E:BD:57:61:90:03:4E:AC:D4:01
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019DA566A6E69824AA7AE1F80A658952CE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 04D6
Signing time: Sun 19 Apr 2026 11:01:00 +0000
Manifest this update: Sun 19 Apr 2026 11:01:00 +0000
Manifest next update: Mon 20 Apr 2026 11:01:00 +0000
Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: hjjXHO2dvdf6hrG8BIyr2KeyezFH4F2MBwYNTyCi2OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:a6:e6:98:24:aa:7a:e1:f8:0a:65:89:52:ce:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Apr 19 11:01:00 2026 GMT
Not After : Apr 20 11:01:00 2026 GMT
Subject: CN=96b18a987c802f0927cd1ebd576190034eacd401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:6e:8d:d6:54:19:3d:9f:3d:5c:1e:66:f8:
46:58:2b:94:fc:6d:e7:3f:06:ce:70:1e:87:2d:72:
ce:31:cd:28:a4:13:0d:58:5c:10:ba:7f:e5:77:e3:
fb:1e:5a:ae:71:89:01:1b:ef:47:ef:b5:39:ca:64:
8a:83:07:f1:3d:f5:34:ef:52:c1:91:bb:ae:07:c2:
d3:84:dc:94:e4:4c:af:db:75:77:bc:9c:a2:21:88:
62:dd:bc:93:6a:2f:ef:e2:49:fa:38:f4:19:1d:a0:
8d:43:9d:a4:93:16:bf:9c:e0:cb:d2:e3:0b:a5:89:
24:6d:a4:52:80:c0:25:cb:7b:33:18:17:32:f8:60:
a8:fd:d3:af:e7:d6:09:d4:eb:2a:4b:bf:9d:53:58:
61:84:40:9e:55:a8:5a:0d:91:86:9d:b3:67:b3:0b:
1c:6d:c4:0a:66:b2:75:5a:9f:e3:76:d7:91:e1:23:
08:76:8e:86:f5:95:ed:b9:15:a4:94:15:98:3b:87:
9f:36:0f:69:31:28:32:af:b3:3d:bc:c6:d3:c3:9b:
d1:44:c5:af:d9:93:9e:f4:a8:07:a1:92:0d:ab:f9:
e5:b0:92:51:26:dd:08:34:9a:9c:20:44:f4:71:19:
0b:20:31:c1:fe:b4:73:60:d2:c5:fa:d8:9e:66:7f:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:8A:98:7C:80:2F:09:27:CD:1E:BD:57:61:90:03:4E:AC:D4:01
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:96:84:02:c1:18:ee:99:8c:0e:3d:71:e1:dc:e9:8a:5a:
ec:9a:b8:88:d3:07:dc:48:81:23:e4:94:d6:62:05:83:1f:03:
5a:26:dc:bb:51:97:3e:d5:12:14:9f:f4:6b:82:db:08:ee:32:
28:e3:6f:b5:e8:8e:54:08:ce:ee:67:e3:7d:b5:92:27:f7:a0:
e6:82:70:7a:02:ba:01:68:0e:0f:e0:0e:5b:a7:a5:f1:de:d5:
44:b6:03:f1:d7:28:15:a3:2e:2c:19:e0:b7:95:51:9f:c1:b2:
e6:ab:fb:5f:f7:4d:b6:67:7d:8c:1e:30:3b:b4:87:ec:f8:40:
ef:6e:e8:a9:53:5f:8b:a8:22:24:60:0e:63:11:9a:72:82:9d:
0b:28:9d:ee:c9:91:66:21:d1:2e:73:39:b9:da:35:2c:c8:fc:
84:ec:c6:a9:94:29:ea:e5:bb:61:fa:fa:96:82:36:25:06:67:
26:48:d0:ef:e5:18:6c:a3:fd:f2:b1:c9:ca:a0:d6:ba:3b:87:
e2:57:2e:f4:3a:7c:57:60:88:bd:47:27:48:8c:ea:a9:91:82:
2a:45:20:d0:fa:27:d4:e1:4d:53:63:29:ee:d8:df:be:ce:0d:
24:4f:fc:bc:9a:7f:a8:91:c1:24:c5:ac:69:c1:6f:3a:8f:30:
91:3a:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:48 2026 by rpki-client