Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: AN6e83/nbq2IHPuRa5YzpiCAT1hiD2mpUQCX/2CKbjY=
Subject key identifier: 37:BE:65:89:4F:1A:60:1C:06:2E:4D:EF:AE:E8:8C:18:31:C9:4A:22
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 019D98BDC3FC9584918A678AC439EE9F422F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:01:06 +0000
Manifest this update: Fri 17 Apr 2026 00:01:06 +0000
Manifest next update: Sat 18 Apr 2026 00:01:06 +0000
Files and hashes: 1: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: jmqtwdk9xs0OB6SQ+N/FEgewo4jhA8WdfjusizFsfAE=)
2: hpJdcso_n4malOGRsLM9jlcq2PA.roa (hash: fdvBY/m75V1oPyWW90Ox8zMppAT8R3oNsWGUpS0XZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c3:fc:95:84:91:8a:67:8a:c4:39:ee:9f:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: Apr 17 00:01:06 2026 GMT
Not After : Apr 18 00:01:06 2026 GMT
Subject: CN=37be65894f1a601c062e4defaee88c1831c94a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:bb:60:1d:7c:39:e4:fa:5c:97:9d:a2:2a:
5e:31:a4:9f:6c:76:0f:6a:af:a8:1c:f7:00:0f:52:
ad:ed:8a:55:25:2e:95:88:14:ae:31:73:f4:ad:00:
f8:49:c0:69:92:1e:4e:a3:32:60:77:78:9c:b8:8b:
0c:49:97:4e:18:b9:99:51:82:2e:91:ee:46:04:fd:
42:19:f5:d1:0f:4a:ab:ee:f6:9b:a8:fc:89:68:8c:
27:31:60:18:f7:66:c6:dc:00:9c:46:d2:70:7a:ab:
a2:66:74:d4:3b:17:d8:fa:62:c8:88:1e:4a:fb:86:
87:32:e3:57:18:bb:25:33:ce:b8:64:11:44:29:e6:
09:7d:f2:7a:65:c8:ec:29:57:49:aa:4b:5f:ab:82:
1d:1f:d6:3a:66:31:27:4c:9b:22:a7:68:0f:20:24:
63:af:29:0d:01:22:71:f0:f4:f9:db:b1:31:b5:0e:
f8:78:fa:af:bb:a0:56:52:c1:96:b3:d3:30:9a:88:
a4:93:ae:75:db:7a:ae:63:ad:89:7c:5c:64:5a:15:
c1:a2:51:73:af:8a:7f:92:94:3f:d6:bb:82:c1:91:
16:17:00:83:98:40:8a:50:32:02:9d:88:81:2c:f8:
4d:d4:d5:e2:da:d4:64:9b:10:83:5f:b8:f6:bf:3c:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:65:89:4F:1A:60:1C:06:2E:4D:EF:AE:E8:8C:18:31:C9:4A:22
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:72:58:4e:b4:4b:d0:10:ca:1c:ff:3a:a5:7c:da:29:28:e6:
fc:e5:b7:f3:bf:84:6b:e5:3e:fd:66:a6:83:ac:00:50:d8:07:
fc:08:1e:de:97:44:72:6d:21:c5:0a:1a:5d:ba:fe:3a:9f:6a:
13:46:bf:5b:66:28:96:57:61:89:0f:a2:59:8c:fe:d3:d6:2d:
c8:15:c1:23:9a:b1:26:58:54:b8:65:16:b6:f8:a1:9b:81:d2:
47:b7:7f:bf:03:2c:51:42:ca:c1:93:6b:80:60:e4:9e:08:87:
0f:82:11:01:d6:4c:96:40:c4:55:7b:19:af:7e:58:7a:08:1d:
92:b5:a3:13:4f:89:cd:4b:93:6d:8d:a1:d2:65:eb:ce:85:3e:
36:27:5c:ec:e7:0b:14:44:bd:dd:88:f7:8c:b3:a1:35:cd:f7:
37:5c:c5:b7:e6:c6:26:1e:73:6a:5c:ac:d4:8f:a0:e1:59:48:
b5:fd:a1:29:e4:e4:09:35:ca:d7:da:e8:ae:11:a0:5b:db:e2:
1f:89:06:97:a8:2a:9d:d5:a3:e9:b3:b3:ab:4b:f6:4f:12:a3:
e2:c4:17:d9:f6:1e:36:57:91:9f:66:11:29:16:9b:2a:02:ad:
87:26:17:ca:17:d9:66:7c:04:7a:af:e3:9d:16:62:2d:5e:28:
29:4b:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:44 2026 by rpki-client