Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: N4bUo0Q/yQTaP/sWqbS4iaq+afrbNB1vCKtHXZnLzeY=
Subject key identifier: 76:F0:E1:21:CF:22:2A:8A:28:51:07:BE:D0:84:BC:02:4B:33:BF:32
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019D9961F4DDA4F672C7777681E58CC7A63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:00:26 +0000
Manifest this update: Fri 17 Apr 2026 03:00:26 +0000
Manifest next update: Sat 18 Apr 2026 03:00:26 +0000
Files and hashes: 1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: PTeAu0Fclr5kEy88llXwj+l1BlLg+WO3IU4PQGVpadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f4:dd:a4:f6:72:c7:77:76:81:e5:8c:c7:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Apr 17 03:00:26 2026 GMT
Not After : Apr 18 03:00:26 2026 GMT
Subject: CN=76f0e121cf222a8a285107bed084bc024b33bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:11:4f:f8:42:70:a7:fa:8e:cd:14:8b:50:
b2:e9:ea:58:df:fc:9a:81:2b:0d:e9:fe:69:84:9a:
1d:d0:e5:25:10:75:5b:5f:2d:12:e4:67:97:07:20:
2a:d2:fa:5d:45:97:5f:a9:b5:ae:de:9f:05:7e:4d:
6c:14:dc:57:6b:b6:76:ae:44:59:12:8a:26:68:d4:
27:f7:e8:e7:31:a0:bd:c3:20:d4:33:8f:04:14:e3:
0a:08:08:a9:ad:9c:cf:7e:93:7d:ae:f8:39:a7:2c:
50:4f:49:b5:c8:7d:11:43:db:9d:9c:13:fb:c3:eb:
32:11:93:6c:48:bc:50:cc:34:9d:4b:ad:cb:e6:74:
b9:47:8e:db:02:82:95:71:de:a5:87:bd:31:df:4c:
a5:2f:ae:91:da:da:f9:82:3e:11:e8:20:f4:7e:72:
b6:d1:a9:6c:a3:31:48:3f:ff:91:38:e4:5f:30:44:
66:1b:5a:fe:ab:b5:01:da:9d:6a:95:84:dc:de:78:
b0:13:36:c3:6d:24:9a:bd:5b:6e:51:26:9b:a8:76:
b9:42:e2:23:84:3d:cc:c1:52:60:0a:ed:3f:55:59:
00:ad:a0:06:c8:9d:70:ee:49:d9:02:30:fe:b8:8c:
08:10:cf:d9:79:c6:6e:80:29:7c:72:3c:ec:40:ec:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:E1:21:CF:22:2A:8A:28:51:07:BE:D0:84:BC:02:4B:33:BF:32
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:fb:16:9a:d4:88:f7:b8:54:6b:46:52:34:29:38:14:88:
de:bd:9b:e5:46:b9:87:26:27:1f:30:7d:1a:5c:63:d4:e2:54:
a7:be:3b:cc:0f:43:6b:af:19:5c:50:9c:22:cf:2a:ca:d3:a7:
07:c4:d6:21:8c:db:63:cf:c0:88:8c:c9:9a:9f:37:47:7d:93:
a1:00:0c:61:8f:19:b7:21:51:07:52:de:9c:a5:2a:47:5a:7c:
8e:67:65:ea:b8:05:67:11:7a:ac:39:69:78:42:19:93:82:21:
2a:46:f0:f0:37:08:b3:e6:4d:bf:f7:fa:f1:ae:43:57:c3:50:
23:9e:60:48:56:69:77:bb:65:93:56:d7:90:8e:f7:cb:6e:62:
4b:c7:f1:41:44:e7:c6:ab:08:27:07:86:86:33:4c:92:a4:87:
4f:09:5b:66:99:11:fc:ca:61:d2:b5:79:9f:ec:32:03:7d:c7:
0a:ba:2e:68:c7:5a:a6:f9:f0:96:3c:4e:56:e9:f4:7f:5e:c3:
6b:d0:1e:76:37:d4:f0:9a:b2:b6:9b:2d:14:34:90:a4:d0:c0:
9c:13:dc:40:a3:57:9e:58:9b:5b:9d:48:be:b1:55:2e:46:e5:
a4:8e:b5:6b:96:f7:7b:13:74:e1:95:08:52:3e:34:f8:ef:81:
12:aa:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:05 2026 by rpki-client