Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: LdmL/WHP0M6sIJ6QAREunnyDMAzQJBGXJWqWqbBTa1I=
Subject key identifier: 5A:7F:9F:AB:09:F2:48:0C:6B:78:E2:E7:23:86:70:A3:32:32:4C:85
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019D9999A91ADE365B59D066582E86E6C3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 118B
Signing time: Fri 17 Apr 2026 04:01:17 +0000
Manifest this update: Fri 17 Apr 2026 04:01:17 +0000
Manifest next update: Sat 18 Apr 2026 04:01:17 +0000
Files and hashes: 1: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (hash: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: WdjmolvZ+NYsaZeKIIAZW74DhYRTIIKELfgdMDCjlRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a9:1a:de:36:5b:59:d0:66:58:2e:86:e6:c3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Apr 17 04:01:17 2026 GMT
Not After : Apr 18 04:01:17 2026 GMT
Subject: CN=5a7f9fab09f2480c6b78e2e7238670a332324c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:29:e0:16:2c:60:1c:93:e0:34:2e:fa:57:
41:ee:72:e5:f5:e5:7e:f3:e8:94:ae:a6:e5:9e:6d:
37:5b:8a:5d:db:6c:75:47:9b:d2:ba:65:40:ee:b3:
30:de:29:14:c5:0a:9d:0c:62:4d:66:90:46:6d:11:
e8:b3:d1:be:db:85:66:40:0d:2c:47:b6:0b:81:d2:
82:67:85:48:4b:89:9f:de:1b:3a:bc:b3:dd:4d:b5:
47:ab:dd:7f:8f:eb:1f:81:a8:78:ab:06:bd:f2:f2:
11:6e:10:9a:9d:06:6e:c9:96:24:56:13:d3:4b:5f:
e0:c6:42:04:1d:fb:be:17:52:1c:13:41:f8:30:82:
2b:9d:82:73:6f:cb:f6:1b:65:96:b7:71:3b:7f:ba:
4e:35:03:a6:2d:66:da:50:d4:f5:b3:af:7e:bb:7d:
92:9e:6d:f2:7f:2c:c5:d0:41:4b:60:49:94:73:51:
0a:a1:92:6c:aa:c6:d8:6e:63:1f:ca:34:77:8c:26:
00:ac:e3:60:a1:29:12:89:91:5d:cb:c9:0e:43:89:
44:3a:b6:e6:10:d3:25:d2:72:d3:72:f6:c0:c7:3f:
84:20:b6:23:d3:17:62:45:1b:8b:c8:d8:45:29:84:
4c:50:f4:a4:35:54:0d:81:17:e7:ce:17:dc:f0:0c:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7F:9F:AB:09:F2:48:0C:6B:78:E2:E7:23:86:70:A3:32:32:4C:85
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:d3:c6:f2:64:a6:8f:22:ed:38:ee:30:fc:84:3e:0a:a8:
58:1e:7d:8c:a3:8e:e4:63:7a:36:2f:41:3a:e1:5a:98:4d:64:
ea:1c:7d:b9:e1:c6:4a:df:e4:93:a7:3d:d5:88:0d:5d:b9:53:
38:ba:89:2a:a7:bf:46:81:7a:aa:f2:0c:50:57:6b:4c:7e:37:
f2:22:48:ed:0f:a0:26:7d:83:f0:fe:e8:23:da:05:3b:97:07:
4a:49:7f:f0:41:bb:86:7d:21:16:2e:c5:e7:8a:0b:53:18:35:
fc:de:08:4c:d1:b1:60:35:33:6b:0d:69:e7:46:b6:59:88:2e:
21:a4:4d:05:7f:dc:5f:4d:83:c7:89:f5:ae:d8:b5:63:9b:67:
11:dd:f7:6d:b7:00:d1:bc:99:d6:e8:d8:7e:29:e3:d5:37:49:
12:c8:4e:28:a4:52:03:17:bb:fd:8e:6b:62:56:a1:cd:08:10:
9c:37:cb:3e:39:60:01:14:23:10:5b:ea:e8:b9:a1:7d:fd:d2:
1b:27:af:10:9c:fa:d7:35:71:2d:44:43:f2:01:84:85:ea:29:
18:02:74:57:88:32:52:03:c1:32:ef:26:77:fd:7a:74:a8:7a:
6f:33:96:e6:c4:3c:a8:09:00:22:c8:57:bb:fa:ba:8b:83:17:
aa:72:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:01 2026 by rpki-client