Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: LGKFgJ72uK9qeY46kkpS/DfIKVmPO4bxL7w46EfaZag=
Subject key identifier: FE:C6:6B:44:1B:01:A6:70:8F:EC:99:19:40:8A:F3:8D:D1:EA:50:5B
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019D99D00E13849FF665BA6845933374223E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: YirPpshitlWaUwYmfql2ZpV4+JRMSL4tfE70ap5ROLQ=)
2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0e:13:84:9f:f6:65:ba:68:45:93:33:74:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=fec66b441b01a6708fec9919408af38dd1ea505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:e6:83:07:55:01:29:6c:3d:3d:ec:3e:f7:
7a:03:b0:e1:fe:22:44:96:d1:3e:37:a6:83:97:6d:
91:e5:20:84:ba:c8:fe:b8:51:52:10:ae:de:90:c6:
3b:1d:7e:9c:bc:2e:64:25:97:69:66:a5:1f:90:36:
f7:0c:29:76:3e:f3:f3:94:fd:62:de:84:a6:17:a8:
de:87:98:c4:26:2b:07:5e:66:e8:10:c4:9c:12:a2:
7d:b8:23:02:f9:d9:2c:f7:11:8f:db:0a:8f:91:e2:
43:e8:13:b1:33:48:ee:90:dc:56:1c:73:87:8d:7d:
f8:f8:31:69:91:25:61:d4:c1:47:49:e9:5d:2c:c6:
f1:22:5a:9d:f9:37:13:49:21:f3:3a:bc:46:47:08:
41:8c:e4:05:56:3a:cc:f1:ef:4b:33:3b:09:70:c0:
14:38:0c:6b:60:13:da:d1:19:3a:73:4e:d7:0f:60:
83:59:99:41:48:e1:e8:e9:f9:d7:9d:b8:2c:73:53:
f0:8a:30:2b:80:5d:81:ce:48:f9:a3:fd:f2:c7:64:
a0:0a:6c:fb:b7:8c:88:7c:2b:68:59:f2:8e:06:72:
bc:da:c5:b7:93:21:65:e5:84:83:eb:ba:53:fb:e9:
9d:df:19:c3:a2:d6:24:5c:82:a3:61:10:72:4a:a0:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:6B:44:1B:01:A6:70:8F:EC:99:19:40:8A:F3:8D:D1:EA:50:5B
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:f3:1e:48:3c:95:23:54:2f:ea:ac:08:30:35:f6:99:bc:
57:25:4a:a0:f3:91:c3:0d:1f:3b:59:2b:24:f6:ec:fa:35:dc:
26:7c:33:64:5a:98:d6:35:8a:cd:fc:be:f8:e0:06:fb:ad:51:
28:25:b5:90:26:56:39:ac:e0:96:4b:10:f4:1f:d7:b9:94:03:
d5:28:79:e6:76:e1:da:e4:ed:3e:48:b4:02:b6:3d:1c:66:a5:
85:80:14:7f:d9:0b:91:db:77:df:9e:7e:f8:cd:e9:da:87:10:
95:4b:b9:2a:75:0a:8c:be:92:84:2d:5e:af:c0:37:80:df:c8:
7b:ba:98:e1:2c:26:93:80:48:c4:3f:e3:d4:ca:93:89:83:2d:
bd:3e:d1:a8:e2:32:62:55:68:45:55:88:7e:fe:42:a3:e8:b0:
7a:7e:94:89:07:e7:60:6d:ca:f7:5c:ba:91:31:e3:c0:77:03:
2f:18:87:35:70:73:d5:15:a2:a2:68:64:34:56:11:7b:1b:8c:
27:6e:9e:2c:dd:db:65:5a:24:fd:87:fe:c2:a9:09:eb:d5:24:
c0:2e:5f:fd:b0:f2:3e:b0:e8:fc:bc:fa:13:ca:f8:6c:b9:d6:
5c:5e:0b:b7:e7:8e:7e:cb:30:df:2e:13:66:fd:fb:af:14:38:
3d:7d:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:16 2026 by rpki-client