Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: BE0ZVWFBZkP/ABSytbc3kfBPXSng/wOpt5u38YEJKBc=
Subject key identifier: 48:91:7B:CC:EA:60:15:F9:76:5D:67:97:75:50:6C:87:E0:C1:88:EA
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 019D98F44F709C8A391207E8E8585813CA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 1086
Signing time: Fri 17 Apr 2026 01:00:41 +0000
Manifest this update: Fri 17 Apr 2026 01:00:41 +0000
Manifest next update: Sat 18 Apr 2026 01:00:41 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: t6yn4Pthjd2NiKYLJQw9VptoyaOJW5MGiPwGkPKGHZI=)
2: hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa (hash: UNg1Ev3uL6ITTCViVHYmyV+MQPsqTHd5HHXqSXS8miA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4f:70:9c:8a:39:12:07:e8:e8:58:58:13:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Apr 17 01:00:41 2026 GMT
Not After : Apr 18 01:00:41 2026 GMT
Subject: CN=48917bccea6015f9765d679775506c87e0c188ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:74:fe:c3:2b:90:60:77:fe:b8:49:f3:9d:40:
a8:46:6c:72:4b:05:bf:6f:45:3f:5b:c6:a0:61:1d:
f9:9d:e9:af:9e:d2:9a:e7:8c:0b:1f:26:60:f9:a5:
3d:9d:12:70:5d:e1:66:84:ea:2a:13:2f:e2:bc:e1:
16:c6:38:c8:8c:68:bf:c8:d1:9d:98:12:8e:55:b0:
e9:13:d8:67:94:d3:69:7d:1d:4a:f1:03:4a:88:52:
b6:95:8f:c6:7d:5f:2a:32:6d:e9:1c:1e:4c:53:af:
fa:5c:8b:58:d0:10:e7:40:96:5b:e2:8b:e4:33:cd:
63:46:25:96:74:44:e5:37:fb:ea:2a:63:d7:d8:82:
2a:ae:50:aa:03:f7:46:a8:c2:ef:c5:ca:ce:25:7e:
d8:72:7b:1f:48:1f:f1:1b:3e:f6:ea:28:ca:34:23:
92:95:91:da:2e:31:31:0b:dd:f5:ec:ca:68:07:c0:
6b:92:af:7b:a5:dd:ba:d2:e0:c2:6a:99:02:df:d6:
16:b1:e1:32:8f:20:9e:e8:b0:91:14:76:ce:fb:81:
fa:51:b1:a5:32:cb:6b:fc:ae:e1:72:11:1a:7c:7d:
a3:57:b3:4a:f9:27:4f:ed:59:f5:29:2b:fc:0f:23:
4a:fb:55:d5:72:fb:c7:9f:7a:5f:c3:d9:c1:f7:26:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:7B:CC:EA:60:15:F9:76:5D:67:97:75:50:6C:87:E0:C1:88:EA
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ca:74:96:4b:cb:81:63:e4:92:44:10:e1:59:ff:b3:a3:25:
be:a7:1b:c7:6d:5b:44:16:79:68:68:0e:e4:2b:4c:c1:3a:c7:
28:ac:57:71:f6:03:a6:8a:e9:e1:77:ad:a1:2f:53:52:23:7a:
af:bd:49:ef:85:77:b9:9a:35:89:91:8e:0e:22:bc:4e:59:68:
e2:b5:0b:ed:10:b0:f2:84:d5:ae:07:c5:aa:ec:f7:c4:05:c2:
0f:d9:5e:5d:98:86:0d:8e:90:9c:92:d7:ac:b7:6d:f1:75:30:
68:60:08:7e:21:ce:92:eb:64:42:f8:72:b4:3f:9b:a7:9a:36:
de:0f:53:e1:dd:fa:f0:97:55:bd:28:e8:9a:39:f0:2b:44:87:
d3:45:3b:4c:12:06:48:ca:b8:4c:2b:51:24:76:d3:61:8e:4c:
88:99:2d:f6:cc:a6:fd:df:53:e9:1f:21:a5:ac:50:65:13:2e:
65:df:75:14:c2:76:31:9e:6b:dc:9b:7b:9c:6d:60:00:a3:c8:
3d:a4:e6:7a:9e:6c:45:b5:77:44:75:fe:20:71:e6:c3:8a:f3:
f2:5d:7e:8c:92:c6:cd:bd:31:b7:28:f5:1c:27:59:38:1d:4e:
04:51:5a:0b:87:d0:f4:81:d9:bf:21:b2:88:f7:83:8e:c2:2a:
d2:98:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:25:13 2026 by rpki-client