Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: Mfdy/Nl/cWJgXDVzlhw/j+hi3NX+0/dwmh1EVDNe1K4=
Subject key identifier: 36:1A:8E:11:84:39:0F:35:2F:B9:1C:AB:94:BB:65:99:52:65:6B:EA
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019D9961E5EFDE7793DA63E91D90EB8AA19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0A65
Signing time: Fri 17 Apr 2026 03:00:22 +0000
Manifest this update: Fri 17 Apr 2026 03:00:22 +0000
Manifest next update: Sat 18 Apr 2026 03:00:22 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: jTXnV+AoBFm55ahXPOu6lntpPvehu1Q9UBa+OGlYNeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e5:ef:de:77:93:da:63:e9:1d:90:eb:8a:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Apr 17 03:00:22 2026 GMT
Not After : Apr 18 03:00:22 2026 GMT
Subject: CN=361a8e1184390f352fb91cab94bb659952656bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:52:b7:39:0b:74:a5:e6:a2:e1:7c:4c:3c:
2c:99:87:2f:a6:a6:10:bd:c3:b6:6a:ac:af:f2:5c:
97:55:5a:67:a6:4c:7f:4f:d9:78:1d:a7:10:9d:10:
8c:87:52:7b:14:c2:60:0b:a9:47:f1:e6:b6:8d:ed:
a7:2a:93:af:fa:c0:ed:25:26:2a:8b:0b:39:89:5b:
e0:62:31:e2:9c:ac:db:d4:d7:58:09:30:bb:4b:35:
a1:b7:c7:b3:d8:14:ba:56:e6:3a:77:3b:0a:ec:98:
dc:a1:ce:1d:5b:81:63:3a:40:0b:41:08:e1:45:15:
1a:17:a7:0d:22:d5:63:3b:50:d9:24:66:5c:16:42:
aa:84:13:cb:2a:86:97:61:fa:13:ce:24:16:9a:d4:
ef:80:e6:51:45:53:d8:e9:73:76:f6:d3:5f:2f:95:
53:a2:a0:a8:07:da:21:95:78:f7:ab:53:1c:e1:c2:
52:1d:be:d3:f2:27:50:6e:0c:a4:7d:dd:c6:8d:a9:
4e:cc:bc:79:c3:69:cc:03:68:b0:99:d9:79:18:8c:
99:e7:5e:61:2d:3b:ae:1c:82:af:9c:e7:8a:d4:f7:
01:cd:1c:c7:15:87:98:24:a1:07:14:14:36:84:ca:
e3:c5:b7:e5:7c:4e:3b:4e:44:ad:a5:73:dc:0f:03:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1A:8E:11:84:39:0F:35:2F:B9:1C:AB:94:BB:65:99:52:65:6B:EA
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:0e:dc:42:3d:24:ab:cc:42:64:25:d5:d3:bc:e5:46:4a:
01:07:b4:1e:48:31:70:07:de:09:fb:56:44:47:fd:48:a0:fc:
e3:bb:2b:61:7d:e2:6b:88:21:04:0e:e8:a2:df:c7:b6:5d:1c:
ba:53:62:99:c6:df:c2:62:22:02:3b:69:13:11:22:23:0a:11:
cc:62:76:99:42:48:dd:c2:64:f6:14:59:22:9e:c3:62:e0:6a:
b7:60:d5:2e:18:18:04:cb:7c:04:95:a3:e3:6c:d2:b7:40:7c:
c3:bf:3c:3a:bb:d2:85:0e:61:e8:66:1e:a1:27:de:95:aa:ae:
7d:02:56:cb:87:3c:71:79:4d:b9:32:05:67:5f:8e:51:fe:55:
cd:7f:a9:d0:56:bb:78:5c:af:e1:ee:46:57:7b:bd:a0:3b:4f:
ca:50:34:36:a7:66:e7:75:75:bf:93:af:0b:ea:4a:42:57:85:
c7:f5:70:ed:05:c3:b7:ac:40:6f:5e:84:40:10:e9:60:91:b4:
7f:0b:69:2b:ed:14:79:be:5f:fc:e6:3d:cc:e8:55:e9:ad:b4:
b6:1a:ad:0d:13:91:b8:0a:52:7c:6a:ac:64:6d:f7:71:68:6e:
1b:3d:26:cb:61:f7:26:d0:01:71:88:30:ec:13:ed:3c:22:00:
e5:40:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:23 2026 by rpki-client