Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: 39Q1EgvLWKubfzy6a4bNH4NPM39pZY+4QWE7mr/w8Ew=
Subject key identifier: 68:91:86:98:E2:1F:C7:D2:51:12:F5:B2:D3:37:24:5D:3D:FC:76:3F
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 019D9B5155A70BC43A60BFD7C5C5A7F64DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: 6dwwiunBUXHlzooFkLOcnwbJmMKfH8QHFLPfOPHUes8=)
3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:55:a7:0b:c4:3a:60:bf:d7:c5:c5:a7:f6:4d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=68918698e21fc7d25112f5b2d337245d3dfc763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:8b:3a:dd:f0:05:58:cd:3b:1a:27:7e:7f:
56:a2:16:8a:73:fb:0d:2b:5e:01:61:a8:cf:9a:a2:
f3:68:3e:11:36:92:3c:fc:69:4e:fe:0e:67:48:14:
1d:66:ed:73:00:3e:fb:0e:a2:7d:1d:50:c3:39:a0:
e3:d4:76:5a:c0:22:97:62:78:ea:90:7f:0d:c2:a9:
3c:60:ce:89:15:e8:4c:34:67:2d:b7:5d:a6:be:c8:
47:30:7c:07:9a:30:b6:7b:a6:7e:5a:6e:b8:9b:5e:
54:7e:92:2c:88:68:2a:61:fd:59:9f:f0:85:53:16:
94:ee:5e:85:c9:c7:67:52:02:6a:6d:55:68:09:4b:
d8:1d:f5:c6:6b:ab:de:0e:5b:bd:b5:29:75:be:7c:
27:fe:67:9e:9d:54:f9:2f:db:da:08:4a:25:52:32:
a4:42:9a:46:de:2f:0a:86:42:c2:5e:c3:44:25:f5:
ee:06:f1:57:6a:1f:aa:62:b6:f4:ae:8f:99:ec:0c:
86:85:83:c1:92:be:77:ec:5b:e7:73:47:68:73:b6:
9d:a3:b6:82:02:42:e8:bb:ce:81:2f:60:d5:25:e0:
fb:f5:a8:5c:4c:cf:1d:62:4f:93:12:e8:6e:96:1e:
64:65:e8:04:b9:c0:4e:d2:f0:7e:6e:c1:53:4d:be:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:91:86:98:E2:1F:C7:D2:51:12:F5:B2:D3:37:24:5D:3D:FC:76:3F
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f2:f2:2d:74:4b:38:10:52:f8:1d:79:99:df:2b:89:07:dc:
82:55:b1:4d:38:d7:0e:d1:29:32:47:9d:9b:6f:30:30:4e:81:
c9:03:b6:c8:4b:57:3b:22:bd:f4:07:45:0d:f6:c2:91:8b:bb:
57:99:d9:c4:61:b6:8a:9f:7e:a5:84:50:c8:b3:9a:e2:10:22:
36:57:88:5a:8a:68:c4:5f:b8:9e:1b:3a:ca:07:b8:14:ae:19:
2c:6e:68:14:e4:14:c4:af:8c:d6:82:b6:3a:7d:86:6c:03:53:
83:9d:1d:be:90:e5:f2:4e:41:e3:ac:ec:ae:79:7f:c8:58:0c:
93:62:fb:42:6e:f1:86:e0:5b:c5:00:fa:35:94:29:04:9d:c8:
c1:e0:5a:f5:51:a4:2e:d5:9c:e0:09:7c:7c:1c:6b:e8:d4:40:
70:d3:e5:9a:79:56:6e:26:b5:9d:1a:69:3d:d5:34:7c:c7:61:
ce:86:84:dd:f0:a2:3d:bc:25:d9:9e:26:8a:c4:ab:c0:84:72:
4a:67:c6:65:79:b7:fa:f2:61:71:31:f7:42:e7:45:fe:16:5f:
60:58:d1:c9:b8:d0:37:a3:61:b1:1d:72:56:02:e6:df:9f:eb:
75:63:63:d4:26:dc:d4:f4:2d:77:21:5e:d0:ca:2a:6c:e8:45:
70:ef:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:56 2026 by rpki-client