Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: C+vEicJBUI471SyxwytyzpqKJnAQzCD8edZfxUjizMQ=
Subject key identifier: 50:20:3A:E4:DE:7A:3A:71:10:8F:21:C1:B9:ED:FA:21:79:36:39:C5
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019D9AE3271076BF21CFEA24370ABFB772BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 032A
Signing time: Fri 17 Apr 2026 10:01:10 +0000
Manifest this update: Fri 17 Apr 2026 10:01:10 +0000
Manifest next update: Sat 18 Apr 2026 10:01:10 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: J1jWUHLEP4VX22g4EwJTUVQ8uzBU/jOS2+fGFsd8KZc=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:27:10:76:bf:21:cf:ea:24:37:0a:bf:b7:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Apr 17 10:01:10 2026 GMT
Not After : Apr 18 10:01:10 2026 GMT
Subject: CN=50203ae4de7a3a71108f21c1b9edfa21793639c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:86:1c:f0:31:e4:cc:09:67:ac:ed:3e:01:
51:74:14:1d:0d:0a:a7:84:b6:30:93:b8:be:d3:ba:
5b:72:53:8c:ce:1d:43:c7:a8:6c:f8:6f:75:7b:49:
27:7e:24:8b:15:b3:69:99:d1:1b:48:47:94:d8:6f:
93:df:1b:40:61:b9:bc:8b:2d:b4:51:e1:b1:00:ff:
da:99:0e:56:42:12:fc:d7:97:c6:90:64:9e:d2:68:
57:b1:85:f9:06:b4:99:cb:e8:d5:4f:9b:65:a8:d3:
ef:ca:6f:73:d0:65:99:92:0d:c1:9d:85:4c:1a:2f:
90:f9:46:45:9d:13:78:a9:c5:38:c7:4b:88:86:f8:
55:05:47:45:c0:80:82:9c:73:66:44:bb:8c:d3:7e:
d4:dc:93:5f:90:7a:10:cd:1b:b9:8b:77:55:2f:f6:
34:2e:b7:13:24:22:34:63:ff:cb:1a:ec:87:d0:4a:
15:15:76:39:9b:8d:9f:e5:5e:aa:6b:e0:2d:4c:2f:
21:2e:83:da:3b:af:43:ad:4e:2a:76:f9:ad:1e:2d:
16:69:6b:c3:64:12:ba:f7:70:45:0a:c1:9b:a3:c2:
46:02:a9:bb:b8:17:9e:2f:0f:87:14:f3:14:84:fc:
74:73:25:ce:70:91:9a:dc:1b:27:32:2c:d6:3d:30:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:3A:E4:DE:7A:3A:71:10:8F:21:C1:B9:ED:FA:21:79:36:39:C5
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6d:3b:f5:9c:f9:71:49:c2:31:bf:e9:cf:0f:5d:cd:7c:12:
a5:28:7c:3b:30:d2:99:bc:98:c7:40:f6:fd:77:7d:d4:3f:47:
3c:f1:42:99:04:5f:85:36:04:a8:61:fb:3b:28:06:ec:b9:57:
77:4c:c4:06:cb:4e:de:be:8f:85:6e:b9:bf:70:d1:e2:a5:bc:
9c:af:5e:09:ce:46:ef:e6:9b:1f:84:70:5d:3d:f6:93:75:ac:
4f:9e:61:21:11:f5:2a:db:e9:c1:61:10:1a:42:ca:2a:bd:2d:
49:ac:0b:80:e4:f1:b6:0c:67:d9:30:e7:4b:c2:51:b0:38:75:
9c:24:03:83:69:a4:8f:b0:6d:0f:03:fb:d6:38:5d:aa:12:7c:
6b:35:64:34:6f:28:f9:9b:a7:b3:ee:12:c4:c5:71:35:b0:50:
d5:51:3a:77:b0:1e:72:ee:ba:98:97:27:9e:c7:8b:15:22:2c:
31:cc:48:55:cd:72:24:8b:cd:cd:f6:e3:d6:80:47:08:76:87:
1b:e1:1d:5f:d3:2d:64:0d:a9:4b:d1:7f:1e:49:26:8c:28:4d:
59:a3:7a:40:16:a3:6e:81:93:a7:89:8d:30:50:4c:d6:ed:3f:
82:9d:a1:a1:88:50:16:33:a7:71:4d:78:7a:80:a0:0f:29:b7:
ef:cb:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:26 2026 by rpki-client