Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: ORWGdQ31KXA6M/rZ66TEMVCgpbzVp+YFHURiZKUB8qI=
Subject key identifier: 1F:A9:C7:1D:FA:6B:AF:43:88:41:D0:01:4D:81:16:60:E9:E5:F6:57
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019D988671BD2F8E190432DAA82B6F552E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 15B9
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: XJwJt+F41aFn9C/va1Na6K/zKqJRJ94vMgGb+kYH0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:71:bd:2f:8e:19:04:32:da:a8:2b:6f:55:2e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=1fa9c71dfa6baf438841d0014d811660e9e5f657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:8c:52:52:c7:ce:4a:57:5e:d3:dc:04:02:
9b:fc:f2:a2:e7:d3:de:f7:41:85:0e:59:95:32:c1:
2d:e8:d6:05:b2:b9:bc:f2:a7:69:bc:5e:c1:64:29:
10:a5:42:af:de:db:ee:53:a8:57:0d:da:46:70:6b:
89:3e:85:48:13:f2:c3:f3:32:c1:24:5b:01:44:06:
95:b2:fe:fb:6e:c9:7f:68:51:5c:6d:7a:24:e0:3c:
7c:19:08:35:88:6a:4b:e8:7b:d0:a6:cc:93:82:df:
ec:41:b0:4c:2c:19:a3:2a:c4:84:10:0d:c1:b2:13:
7e:1b:df:bc:7a:2c:13:d7:59:11:f5:d6:7c:f3:45:
af:e9:0f:f4:07:0b:15:92:d0:fc:57:5e:2a:d0:37:
e2:23:c8:e2:af:0d:22:4f:71:72:da:7b:6c:c2:63:
97:0a:2f:34:00:dc:35:7e:0f:80:61:9a:91:3a:ae:
29:49:4b:34:ef:ff:4d:eb:3c:55:fe:5e:f8:66:41:
24:6a:9d:dc:25:2f:9d:f0:f0:de:42:a1:61:8c:e4:
bc:ce:b6:96:17:b8:c6:19:5b:61:9b:c2:32:ff:4d:
f9:d3:1e:5a:74:2e:28:e6:00:dd:c4:81:a2:b1:86:
92:5b:9d:45:4e:39:57:18:b0:31:4d:08:b4:bf:bd:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:C7:1D:FA:6B:AF:43:88:41:D0:01:4D:81:16:60:E9:E5:F6:57
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:a7:a3:3e:6b:97:f3:bf:bf:f9:62:c8:5a:ae:0d:ed:45:
46:06:6f:d9:95:d4:90:59:bf:d0:40:95:f0:27:84:ad:0f:5f:
49:91:76:af:de:9a:2c:89:54:99:4e:cc:b3:df:12:5d:62:72:
98:16:93:a9:14:f5:93:18:39:1e:e9:2d:be:89:de:1a:2e:89:
08:e1:b6:37:fe:2e:ea:a6:51:f7:cc:95:b2:fa:bd:ff:f9:3b:
df:c2:d0:d8:f0:aa:56:d3:a0:dd:e2:5f:d2:d6:1e:45:b3:ac:
5f:66:09:8d:66:ec:3c:34:47:0d:a8:49:b9:0f:2e:cf:f6:19:
d4:d7:17:a3:64:4a:d1:30:d0:ca:19:f7:66:8d:79:68:04:fc:
dd:03:8b:1c:b5:73:3c:60:45:a9:a3:f4:d2:30:a5:b1:fe:49:
f2:83:aa:9c:60:95:a5:28:08:5f:45:d3:0e:3f:55:68:0a:b9:
19:65:bb:3e:57:f9:7b:2b:72:b7:97:de:ff:3b:92:53:38:13:
4c:64:70:d4:23:c0:22:29:c2:8f:ce:39:80:d3:b3:a0:08:71:
c8:f5:6b:d1:99:cd:d6:1e:03:14:21:7c:eb:6b:65:78:4a:f7:
3c:35:a0:79:15:62:9b:70:94:f7:74:3e:05:c4:e6:99:ec:e3:
2a:2f:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:18 2026 by rpki-client