Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: LCLlfZn/WxhOewM5xQYTOVUvAUbAuByGS9qF6a4YTuw=
Subject key identifier: C3:81:BE:51:18:AC:F0:1F:58:70:82:4C:A8:04:F7:2C:B5:A1:A9:2D
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019D9B51423BA3172671C9573BDBE05C4890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:01:26 +0000
Manifest this update: Fri 17 Apr 2026 12:01:26 +0000
Manifest next update: Sat 18 Apr 2026 12:01:26 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: EQf4zhtLfDb9E69vpT5l+QDvMBRGpUH3QBog+3LkdF8=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:42:3b:a3:17:26:71:c9:57:3b:db:e0:5c:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Apr 17 12:01:26 2026 GMT
Not After : Apr 18 12:01:26 2026 GMT
Subject: CN=c381be5118acf01f5870824ca804f72cb5a1a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:f9:10:64:cc:c8:45:14:98:43:a2:d7:ab:
8c:12:1e:b8:51:76:c3:19:67:14:6d:90:ee:42:b0:
7d:b9:18:4d:90:11:75:d9:26:40:77:cb:72:e2:3d:
d7:e0:ff:0d:d0:91:6a:c6:ea:a8:4c:4f:0a:37:82:
40:f1:32:5a:76:dd:a2:f6:6a:c0:bd:9f:d2:5f:cc:
fb:91:c9:6a:c6:cd:6f:83:e7:f5:5f:f1:9d:f0:6d:
b0:c5:fa:c9:dd:98:c1:5d:b3:4b:5c:ef:56:bf:7e:
c5:54:0c:54:6f:71:03:62:62:4c:a5:91:91:c0:34:
56:4b:a0:21:43:c7:09:60:60:75:32:ea:66:dd:4d:
7d:11:e2:c7:50:76:63:be:46:88:d6:69:01:4f:56:
37:f3:dc:c4:34:c9:c2:05:a2:c2:3d:e4:af:07:e7:
be:80:9b:14:d9:6d:39:4a:cf:75:91:15:be:2e:40:
07:5c:e0:a1:58:71:c9:0d:0a:29:3a:07:6c:05:37:
e3:be:e0:ac:62:b0:07:dc:59:1d:bd:af:79:e9:0c:
b8:6a:a1:42:19:b9:fd:71:0f:99:e8:ad:d8:9d:6c:
ed:05:bb:97:c9:9b:6f:fd:65:be:fb:d1:99:a4:79:
52:37:4f:f7:7f:99:64:b4:3b:f2:83:e7:42:ad:4f:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:BE:51:18:AC:F0:1F:58:70:82:4C:A8:04:F7:2C:B5:A1:A9:2D
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:53:67:7a:a5:f4:eb:d3:17:82:3d:9c:04:cb:d8:13:71:
1e:ca:07:ed:33:36:65:56:81:38:24:e3:b0:3d:e4:41:c8:05:
22:1a:91:b7:0d:b6:86:1b:46:75:53:74:a3:d2:d8:e9:86:6a:
f5:41:02:86:fe:8c:70:d7:43:64:b5:08:18:b6:2f:94:dd:e0:
5d:71:0d:08:70:cd:2c:5c:ea:58:dc:8a:26:8d:dc:0f:01:2c:
62:5e:91:5e:93:48:12:f2:82:b2:f2:8e:23:21:44:d4:9d:fd:
5a:4f:83:b0:25:d7:9e:e6:c8:fd:30:da:cb:8d:4d:bf:9f:12:
86:2c:b5:2c:eb:75:fb:71:50:02:d0:e1:1e:95:31:2f:2e:8c:
80:62:09:99:8c:a1:b2:5d:9f:cd:a5:04:0d:e4:5b:5f:26:fa:
cd:bc:7a:00:0a:06:57:e6:f0:4f:7e:3c:4e:e3:53:7f:92:8e:
aa:58:d3:19:54:20:15:bb:b0:7b:43:e4:83:6b:fe:18:dd:aa:
58:9e:b7:08:1f:13:a3:99:2d:bf:23:e3:bc:83:0c:c2:6b:4e:
02:63:46:6a:bf:1b:01:7d:33:9b:93:1b:af:51:85:cb:33:31:
43:0c:ba:12:f3:9e:ff:71:cd:2d:8a:80:6f:e4:c2:4f:ae:4e:
88:6e:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:12 2026 by rpki-client