Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: hIgS3LYrTssvTHWCXliVD4vCasSdxyVPuiMHGS0c5hY=
Subject key identifier: DD:C9:A4:FF:66:F6:48:CB:6C:AC:5D:4D:9B:DF:7D:27:B5:1C:51:41
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 019D99D035ACF175E45BE9D6F74FFD726B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0E8D
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: lDEKdxyhuMpKM6WCoFBAIrahF2QGHcrR+O2Ciadi9jA=)
2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:35:ac:f1:75:e4:5b:e9:d6:f7:4f:fd:72:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=ddc9a4ff66f648cb6cac5d4d9bdf7d27b51c5141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:ef:51:d7:8a:de:99:2d:8e:bf:0e:36:3c:
d3:44:3d:94:e8:a7:c3:fc:7e:a5:4b:f8:8a:b6:f6:
e1:a1:31:84:9e:22:a6:18:7d:58:a1:b8:09:b8:67:
a8:7f:5c:11:72:bd:95:10:ee:f2:23:55:c6:61:84:
e5:c5:e7:4b:82:77:f7:bc:38:86:a6:cc:c7:6a:82:
7b:c3:de:c3:24:5a:3e:f8:85:30:4e:7e:b8:f8:e8:
35:f8:90:9a:b8:0d:44:81:7d:20:6d:34:2b:0d:5b:
a9:6f:7d:47:c9:61:ca:62:c9:13:35:5c:65:76:32:
ed:3c:8c:70:cc:fb:50:70:45:b9:d7:3a:60:be:a6:
39:6e:07:86:29:37:9f:94:04:fb:7e:da:c9:87:5a:
5b:4d:a1:da:ef:24:79:a9:6d:53:6e:61:90:77:fc:
d1:fe:67:05:db:47:a3:69:a9:00:c1:c1:c0:7e:82:
f3:1d:08:37:05:65:3f:ad:bb:9b:f5:d9:35:12:dd:
41:ec:db:15:e8:7f:2f:c9:1f:ca:c2:c4:81:58:6e:
54:2f:6c:92:6e:f7:62:55:f3:f8:92:7d:f9:a6:be:
7f:80:e1:b6:7d:dd:49:c4:d4:78:81:8d:63:f2:30:
9c:8f:a9:f6:b1:f3:36:25:ef:27:5e:87:96:cc:ef:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:A4:FF:66:F6:48:CB:6C:AC:5D:4D:9B:DF:7D:27:B5:1C:51:41
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:32:63:34:f9:11:b1:5e:a1:1f:c7:4c:21:66:9a:25:10:
7a:e1:ad:61:c5:79:66:29:32:e2:c0:e4:e9:97:4b:07:98:d1:
9c:5d:ab:07:5e:7f:00:24:a4:49:77:0d:2d:32:9a:8c:62:23:
c5:f4:99:f8:d9:ec:94:66:78:c1:8b:bd:f5:a7:3a:bd:6d:da:
22:26:5a:b2:51:00:c1:ae:88:d7:79:cc:ba:cf:f4:24:e3:ba:
0d:4f:11:a2:3e:93:4a:65:73:f1:8a:02:bf:5c:ce:41:e7:52:
59:cf:b4:a2:ba:1f:80:d0:79:54:e2:b3:1e:15:89:d2:02:d4:
d5:f9:fa:41:31:34:65:f8:6e:d0:95:a3:37:6f:d7:bf:87:10:
7b:60:d2:66:0c:95:c0:ef:bc:57:4b:bb:c2:ec:a7:58:00:25:
14:27:83:5b:19:fe:76:96:cf:01:93:ea:4d:ef:0e:4b:34:2f:
a7:ee:50:70:c1:a1:84:63:24:58:f7:49:0e:cc:6a:b2:56:3e:
0a:b9:7b:cd:0c:d8:cc:39:e8:3f:6c:88:fe:e2:2d:f5:92:12:
5b:5a:b4:ee:69:77:a5:d5:27:5f:6f:6a:18:2f:dc:fc:c0:0a:
41:5c:c0:8b:33:28:d8:74:e7:2d:ec:78:29:9d:90:0b:b7:02:
11:2a:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:39 2026 by rpki-client