Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: yO2T0HBcRfNdQ2klzbOx/1rGxe7GPkUTXhbz94SAHqI=
Subject key identifier: E5:E0:6B:F2:06:E8:6E:2C:B1:ED:37:FC:2B:94:B2:18:B6:3B:CC:40
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019D9B876806020E0C5DF8F1C1ED8845DAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 54
Signing time: Fri 17 Apr 2026 13:00:35 +0000
Manifest this update: Fri 17 Apr 2026 13:00:35 +0000
Manifest next update: Sat 18 Apr 2026 13:00:35 +0000
Files and hashes: 1: K7J8SU2ONJde1_XoPCAxg3_UhsY.roa (hash: IHipWsFTiehUckIWg3IwCtFkKfvzXuaM4MqoN3r8AzA=)
2: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: eN/6o+TqlLv3VzAiLV+TUB9f/H3egKfEG7FbeOwf2ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:68:06:02:0e:0c:5d:f8:f1:c1:ed:88:45:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Apr 17 13:00:35 2026 GMT
Not After : Apr 18 13:00:35 2026 GMT
Subject: CN=e5e06bf206e86e2cb1ed37fc2b94b218b63bcc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:f4:58:75:42:0b:f1:23:39:97:39:15:70:
a5:37:94:22:55:b3:4d:32:f2:d1:25:82:87:e9:78:
74:cc:6f:16:2b:cf:bd:9f:1b:4d:de:dc:59:1a:ad:
04:9a:da:59:6d:11:59:f1:35:b2:49:d5:79:26:7c:
8e:ae:72:f4:ce:de:fc:65:f4:f8:50:95:b4:87:1c:
d6:77:f8:75:8f:ae:1d:64:32:48:f3:31:3f:50:1c:
f1:5b:2b:59:87:dc:96:eb:d4:70:06:4a:a4:a8:2e:
c8:c2:b4:59:ba:93:fb:33:f2:ee:0b:8c:73:70:4a:
b7:6e:61:a7:b5:2b:78:12:29:ea:cc:7e:7a:e5:f1:
c0:51:d7:4a:28:19:68:1c:d1:dd:bf:92:b0:a4:ae:
ee:91:cc:d7:63:d4:a7:18:ee:3e:56:f4:8a:11:cb:
08:6e:8b:53:09:c0:ca:b3:10:0b:85:d8:0c:4e:e3:
be:69:3c:3e:18:ba:c2:7d:71:fa:a9:94:ee:09:17:
a9:2e:89:ef:03:71:67:35:29:dc:93:2d:f1:18:5a:
03:5a:d0:b4:25:b0:88:39:19:f7:33:41:9b:e6:e4:
60:14:54:53:65:d6:40:6d:81:67:0c:4b:c4:4c:3e:
b4:cd:35:f2:f1:05:cb:dc:21:21:44:ab:82:7c:a3:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:6B:F2:06:E8:6E:2C:B1:ED:37:FC:2B:94:B2:18:B6:3B:CC:40
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3c:5e:5e:22:49:d9:48:a6:62:30:df:c1:48:bb:b4:85:74:
f5:2e:d9:35:c8:d5:31:21:db:67:06:09:da:36:18:37:2d:48:
6b:57:04:d2:c7:b7:b6:13:ef:64:37:ff:93:a8:05:f8:18:07:
d2:95:f5:c3:46:4b:ae:09:d9:6a:07:72:44:a7:a9:71:d5:2f:
dd:00:15:16:61:eb:5a:de:b1:1f:58:2a:37:48:68:08:52:43:
e2:a9:ba:3e:34:4c:14:11:47:eb:97:ec:7b:81:1a:7d:25:36:
f0:67:9a:5e:91:f6:8f:11:26:9c:fb:c5:60:ab:3d:f8:4b:01:
12:28:33:07:8c:2e:46:90:bc:a3:8f:d4:07:ae:69:10:39:f7:
0d:b8:d9:72:d6:3e:b3:ea:48:ea:f1:bb:5a:d6:4f:f0:cd:96:
22:66:64:3a:d6:6d:f9:09:76:2f:7d:2d:0d:f9:42:01:05:8f:
21:dc:37:d1:aa:eb:f1:22:ea:45:68:3c:c6:ec:12:1f:75:b2:
65:ca:67:b7:a3:17:c6:e0:18:a5:83:f5:91:24:cf:69:02:0d:
a7:d5:c9:0b:ff:be:68:ba:ce:0f:59:54:45:e8:aa:56:32:fb:
c2:f0:17:58:09:9f:cc:11:9e:34:ff:fa:e7:62:85:fb:c8:e2:
f8:4c:26:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:14 2026 by rpki-client