Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: zjR7E45eqEIexpRkvci0LDhFKPR6sXLneCmCgPg3PWY=
Subject key identifier: A6:2F:F5:D8:A9:2D:42:D8:53:E6:10:96:13:5E:69:C2:90:2D:25:01
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019D98BD20D044C2E25C542123C1C1359BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 10C5
Signing time: Fri 17 Apr 2026 00:00:24 +0000
Manifest this update: Fri 17 Apr 2026 00:00:24 +0000
Manifest next update: Sat 18 Apr 2026 00:00:24 +0000
Files and hashes: 1: Nw5e2XBeWz1F5V3fCUooSdjIByw.roa (hash: hszO3zUWOu3PHw9A9VPhEVEpCWtMNuuin6SDD3mP7Bc=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: tdgw8TjxJQYB4bSYeBJMlIZtN/+uxGPljMgRc6++vjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:20:d0:44:c2:e2:5c:54:21:23:c1:c1:35:9b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Apr 17 00:00:24 2026 GMT
Not After : Apr 18 00:00:24 2026 GMT
Subject: CN=a62ff5d8a92d42d853e61096135e69c2902d2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:94:2e:53:b5:70:b2:91:fe:f0:67:25:5e:
7a:c7:24:a8:57:99:66:cb:8a:5a:ae:b6:f7:5d:ed:
8d:dd:7c:b9:15:19:01:8f:b1:5b:14:ef:4c:8d:49:
c0:9c:da:ee:60:25:32:95:f8:86:7d:72:db:76:61:
06:b1:36:f0:10:a2:2c:5c:39:f5:b0:ff:69:49:10:
46:6b:73:c0:61:4e:e6:48:62:c2:5c:db:b3:72:06:
6a:d6:9d:b0:ad:6f:d0:d0:ff:f6:c5:8d:9b:ea:33:
5b:38:02:5b:60:c3:c1:77:db:b2:00:26:55:39:af:
26:c5:e7:e8:61:ab:39:9f:53:87:d9:76:32:c7:4c:
34:c8:2c:f6:c9:3f:4b:82:4b:0a:c2:d8:dc:31:0a:
1f:81:4d:1d:47:98:aa:63:fc:78:d0:bb:f9:66:6e:
32:a7:8c:f4:28:06:1a:32:52:a5:18:56:16:f4:be:
47:f5:0b:9b:36:83:0e:17:ad:01:67:47:b8:a8:b6:
5d:fa:a5:c9:01:5f:90:ca:53:d0:74:32:62:c9:35:
ce:39:53:61:66:97:30:7b:07:dc:97:cb:1e:ee:11:
68:99:69:a9:ff:86:58:9e:3d:b3:da:d4:bf:56:55:
fb:6a:2a:bc:01:ae:b9:df:30:77:36:0a:77:75:b9:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:F5:D8:A9:2D:42:D8:53:E6:10:96:13:5E:69:C2:90:2D:25:01
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:df:96:f7:46:b2:55:03:75:08:a2:07:5c:27:02:6b:57:c2:
0c:69:92:fe:5c:31:8b:6f:c2:f4:d2:82:09:54:b8:e5:46:8d:
0c:b6:35:b6:c9:e7:4c:1f:08:67:e2:7c:7b:68:c7:49:39:bb:
9e:94:a9:c4:28:1c:12:87:8c:98:47:17:cc:1c:9a:b0:d3:fa:
d6:43:cf:df:8c:1b:75:ec:34:23:fa:dd:3d:a9:ce:6f:cd:00:
ea:7a:65:da:0e:4b:4b:35:5c:2e:ae:e8:21:4c:0d:be:26:6c:
5b:9e:aa:2a:42:20:da:be:2d:bc:ad:13:33:70:f5:33:82:c7:
c7:cc:0c:38:65:f8:87:82:91:32:40:fc:09:dd:1c:17:56:8b:
b1:4a:90:f1:35:02:f1:fa:d8:4e:f7:ac:e6:87:c0:79:54:d1:
6a:29:38:3a:5b:36:98:91:fe:70:51:bf:d2:75:76:88:51:fb:
fd:32:8f:d3:91:9a:ba:47:27:07:5d:70:f6:2e:2b:c4:71:c1:
20:b0:4a:eb:cd:e0:8d:26:c6:f6:17:e7:97:12:61:0a:8b:c3:
1c:8a:78:84:ac:af:61:2b:52:dc:fa:d0:64:2e:29:75:af:03:
9f:1c:36:5d:3d:28:9e:d8:45:6e:67:fa:c2:8c:2f:16:e2:42:
f1:30:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:50 2026 by rpki-client