Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: GIGJG835rQPRP/jk4UqJpD49i1LuieIXWvG0tqxqOSA=
Subject key identifier: 98:1F:5D:A3:92:64:2B:0C:6C:1C:9C:39:B1:B4:B7:5E:AB:25:CF:82
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019DA3E6808C2B6A5D3F60D1215261E27953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:01:25 +0000
Manifest this update: Sun 19 Apr 2026 04:01:25 +0000
Manifest next update: Mon 20 Apr 2026 04:01:25 +0000
Files and hashes: 1: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
2: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 6FvqAAsTkABY721dJdDnd5mmMj0+d+Vs/0Lxeq1avgY=)
3: rXih05-yjhK1RRUZMN39mSUsOFU.roa (hash: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:80:8c:2b:6a:5d:3f:60:d1:21:52:61:e2:79:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Apr 19 04:01:25 2026 GMT
Not After : Apr 20 04:01:25 2026 GMT
Subject: CN=981f5da392642b0c6c1c9c39b1b4b75eab25cf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:22:67:79:5e:1f:47:38:95:d7:0d:3f:e3:
b5:85:10:56:30:23:52:5f:cd:30:c2:56:f6:12:fa:
6a:e8:f7:c9:fc:34:22:94:5d:c6:2b:90:ed:69:7c:
d7:cf:ad:39:8c:e6:d4:1d:c2:e0:a9:4a:a3:b7:e9:
2c:e8:5d:04:b2:b3:62:5f:39:ff:11:82:a1:c4:6c:
94:4b:0e:68:30:02:0e:91:07:0c:52:a8:71:9f:75:
a0:88:ad:5b:94:15:ac:89:de:ea:5f:44:49:9f:23:
67:8b:fe:66:63:e7:56:03:ba:c4:6c:2f:62:3f:2f:
6f:92:a9:14:87:09:8b:05:44:0e:f0:66:f8:46:86:
c4:0f:20:99:0d:37:2d:ad:88:fd:8e:86:06:d6:49:
5d:4f:e6:ba:ec:81:23:57:8e:30:26:36:f5:cf:cf:
00:1f:2a:96:ca:e8:b8:84:eb:04:91:ef:02:38:a8:
7e:cc:7d:9f:d3:85:b1:d4:c0:2a:41:05:e0:e3:d9:
e7:d0:77:ed:d0:8f:2b:3b:3f:cb:7a:44:26:75:cf:
6c:52:cc:fa:11:e1:14:dd:68:9e:bf:ac:44:01:00:
58:3f:bc:26:bb:ef:8a:f5:bb:12:d7:a7:5f:df:a0:
f4:a3:29:69:9c:d2:c8:42:e3:12:00:00:18:2c:3b:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1F:5D:A3:92:64:2B:0C:6C:1C:9C:39:B1:B4:B7:5E:AB:25:CF:82
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ce:45:63:fd:25:f0:41:74:99:32:0b:aa:3b:79:8c:69:52:
7d:16:db:98:f2:c8:94:25:9b:95:1e:1d:4f:42:3f:b8:45:b6:
ed:a7:c6:97:e6:a2:57:45:83:fb:39:f0:1d:73:41:62:40:60:
53:a0:91:de:ef:88:3f:e3:d7:4c:15:26:d9:2d:f7:b9:3b:3e:
f8:68:40:56:ec:36:d0:59:f6:1c:a2:66:ba:5d:63:11:4f:00:
4d:0b:10:75:81:51:53:e4:eb:a7:ff:1c:e9:da:75:4e:75:b6:
8d:ce:ba:5d:ba:9e:ad:63:e4:50:93:6f:3d:65:c0:90:59:4d:
73:84:a3:9a:4b:61:66:c3:81:61:91:9a:b5:f4:f7:ad:a0:3c:
2f:3c:5b:b0:55:db:b4:26:92:00:94:e9:8c:18:3a:a6:b9:bd:
01:0f:9e:91:14:cd:0d:f0:16:15:1b:a8:60:b8:86:bf:e2:8c:
7f:ec:23:90:56:62:61:08:49:30:a6:bb:fa:4b:79:15:16:af:
e1:6b:f7:23:0d:08:d3:0d:71:dd:68:f8:53:db:39:bb:4e:5c:
17:d5:41:78:1e:d2:18:3a:d7:5a:5f:b9:4d:af:3d:eb:22:42:
19:79:fd:d9:d8:92:68:91:1a:25:b6:77:cb:d2:78:b1:3c:3c:
8b:ae:95:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:42 2026 by rpki-client