Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: AOz1SKPdWM1N9etbRt5paSw8Uyn2vE13iVCCVUNPm6Q=
Subject key identifier: 14:73:B7:FA:8A:9A:4B:5A:A3:6A:FE:1A:F0:73:03:99:02:D8:A5:9B
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019D9850395F53DFF4132AF6C76680915371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:27 +0000
Manifest this update: Thu 16 Apr 2026 22:01:27 +0000
Manifest next update: Fri 17 Apr 2026 22:01:27 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: qjjw+jRLbsGK+oBhvePyVsDNiUrw+m1eZ1BN2opNy6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:39:5f:53:df:f4:13:2a:f6:c7:66:80:91:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Apr 16 22:01:27 2026 GMT
Not After : Apr 17 22:01:27 2026 GMT
Subject: CN=1473b7fa8a9a4b5aa36afe1af073039902d8a59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:6f:82:28:97:40:ed:13:99:85:e6:e5:83:
ba:b1:aa:ac:01:01:d2:2c:d8:c2:63:91:c5:c4:d9:
78:38:63:0c:2c:52:00:75:fa:02:94:f2:8d:2a:32:
c4:15:42:b0:22:15:c9:ae:9a:c6:e4:12:3b:e2:fa:
7b:dc:8d:b0:b9:39:f3:86:11:6f:dc:ce:61:fc:4f:
b2:d2:b4:b6:b4:10:17:ab:48:15:b1:c7:eb:8f:7f:
cc:b0:01:41:ef:33:79:6f:70:7a:e0:61:b3:65:1d:
80:08:e8:49:2e:8a:f3:b9:c2:4d:2f:0a:3b:e4:ec:
e3:3f:4b:dc:bc:12:f7:fa:f5:8b:6d:36:71:6e:18:
38:59:db:b6:9f:f7:12:ab:6a:cd:0a:c7:32:b9:dd:
bf:50:6e:bd:11:a6:a8:ae:25:90:82:c2:3c:30:51:
3b:83:d0:15:dc:b7:8f:73:03:b2:6b:33:08:1c:27:
ac:c6:96:97:0a:a2:43:d9:49:4c:64:fb:be:2d:84:
22:e0:5c:44:1b:f5:6c:a7:97:c6:e7:9d:31:21:96:
fb:35:d8:50:1e:92:77:99:0a:ce:82:56:3c:ae:00:
70:8c:57:66:a6:e9:e1:f7:ce:1b:12:0d:2c:95:ed:
ff:9d:01:5c:12:bc:89:a3:aa:b8:f1:7d:4a:26:89:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:B7:FA:8A:9A:4B:5A:A3:6A:FE:1A:F0:73:03:99:02:D8:A5:9B
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:4b:a7:83:06:a8:f4:c0:e5:db:b9:0c:9e:90:64:77:e0:
4a:92:f3:64:4f:04:95:f0:9d:b8:8c:52:3e:40:0b:8e:1e:82:
1a:46:86:af:ff:36:a8:50:1a:72:fa:45:1b:83:d0:95:ff:7e:
fa:5e:c4:b8:be:17:7c:a7:c2:3f:f1:c0:ec:13:61:dc:e7:dd:
2c:c3:8f:c2:b5:94:e7:b1:62:9e:84:af:c7:16:2f:53:f2:e0:
15:79:32:85:1e:5f:ca:ef:a9:72:08:7e:fa:90:df:99:80:ea:
ab:92:81:54:d6:c8:23:cc:4d:cb:0f:2a:05:54:f3:50:76:91:
1b:09:76:bd:50:e8:37:36:ad:04:9f:d2:89:47:0c:97:e2:09:
6c:48:f1:c7:7a:bb:1f:2e:fd:f7:a6:dc:ce:77:c5:70:f7:b9:
99:87:28:7c:de:f3:52:fc:c8:de:1c:80:06:eb:5c:15:17:c0:
2d:8c:02:7a:bd:90:1e:ff:72:5a:64:ca:55:74:3d:b5:11:08:
2a:36:eb:b4:4c:39:f2:a0:16:d8:7a:b5:30:91:51:7d:50:a6:
58:4e:6a:11:e8:f4:43:10:76:23:a3:3a:20:7f:95:a5:df:7e:
73:8a:82:08:03:67:36:f0:e8:cb:2e:ca:be:a6:f0:3d:cd:41:
71:8c:cd:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUDlfU9/0Eyr2x2aAkVNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjYwNDE2MjIwMTI3WhcNMjYwNDE3MjIwMTI3WjAzMTEwLwYDVQQD
EygxNDczYjdmYThhOWE0YjVhYTM2YWZlMWFmMDczMDM5OTAyZDhhNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrRvgiiXQO0TmYXm5YO6saqsAQHS
LNjCY5HFxNl4OGMMLFIAdfoClPKNKjLEFUKwIhXJrprG5BI74vp73I2wuTnzhhFv
3M5h/E+y0rS2tBAXq0gVscfrj3/MsAFB7zN5b3B64GGzZR2ACOhJLorzucJNLwo7
5OzjP0vcvBL3+vWLbTZxbhg4Wdu2n/cSq2rNCscyud2/UG69EaaoriWQgsI8MFE7
g9AV3LePcwOyazMIHCesxpaXCqJD2UlMZPu+LYQi4FxEG/Vsp5fG550xIZb7NdhQ
HpJ3mQrOglY8rgBwjFdmpunh984bEg0sle3/nQFcEryJo6q48X1KJokoRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRzt/qKmktao2r+GvBzA5kC2KWbMB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhFLp4MG
qPTA5du5DJ6QZHfgSpLzZE8ElfCduIxSPkALjh6CGkaGr/82qFAacvpFG4PQlf9+
+l7EuL4XfKfCP/HA7BNh3OfdLMOPwrWU57FinoSvxxYvU/LgFXkyhR5fyu+pcgh+
+pDfmYDqq5KBVNbII8xNyw8qBVTzUHaRGwl2vVDoNzatBJ/SiUcMl+IJbEjxx3q7
Hy7996bcznfFcPe5mYcofN7zUvzI3hyAButcFRfALYwCer2QHv9yWmTKVXQ9tREI
KjbrtEw58qAW2Hq1MJFRfVCmWE5qEej0QxB2I6M6IH+Vpd9+c4qCCANnNvDoyy7K
vqbwPc1BcYzNNw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:35 2026 by rpki-client