Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File: AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier: BJvSG7z5zMY8p3wkkKI2xzSjzoA3L6mCflDadsEZ6vs=
Subject key identifier: AE:96:7F:56:7E:1A:B3:F6:D2:7F:42:5E:13:81:16:C4:2F:6E:66:4B
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 019D99D02EBC5D2412E093787DB7D9018971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number: 0DF0
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (hash: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20=)
2: 7r93jnvgm30A0j6huIv9VvOm-J8.roa (hash: Aw/Q13x7Ay9BPZImeqJObXIZcMuEIiS7Ocw9loL85Y8=)
3: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: xJJMgAo9iOAxwkVyjOmMgJiCL0MC7EzGn3oyA9fJJac=)
4: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (hash: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek=)
5: k4Ty00vW-Mz9vPvcOZ23ox0H6kU.roa (hash: Hp1EXNjMbh6L6PMiyCI3K99QvfaWVLoaMdZebP34RrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2e:bc:5d:24:12:e0:93:78:7d:b7:d9:01:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=ae967f567e1ab3f6d27f425e138116c42f6e664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:73:23:97:cd:91:24:5c:6d:84:14:15:27:
8f:4f:87:75:26:ef:f5:b0:04:b5:46:c9:4f:01:fa:
6e:df:92:ae:e4:d3:e0:1e:6f:30:62:9d:59:63:db:
c1:ba:b4:53:14:f4:5e:c0:52:b0:f7:42:e6:54:ea:
ff:8f:0d:98:c5:7a:44:5b:8b:6a:0d:d4:8b:08:94:
3f:4b:9a:09:cf:e7:b4:9e:d8:f2:de:29:2f:d3:d0:
85:4d:19:79:ac:7a:1b:5e:38:73:15:22:79:72:49:
8d:14:20:74:07:1d:6f:2e:bc:04:b2:59:2c:c5:e3:
12:9d:ad:d3:6d:77:3e:65:a4:34:77:35:8a:a7:e7:
d4:62:fd:d1:d3:5c:0a:2e:4c:99:f5:1f:86:85:2d:
7b:fc:bb:13:1a:df:74:10:81:09:a0:a3:76:f5:3c:
90:ff:7b:3c:46:5f:ab:3f:11:f9:ab:82:4d:45:01:
cf:30:ac:06:a7:64:55:1f:5e:71:f4:62:86:3a:bd:
13:0b:40:d7:8b:f2:fb:6b:44:e2:d1:f6:a5:ff:2a:
a2:87:b1:b0:b5:2d:14:ab:5b:8d:f3:96:d5:29:1d:
84:f7:05:ba:7e:bf:b7:bb:15:e0:07:d0:59:e9:f7:
b1:c4:25:07:a9:a8:77:a3:01:69:7a:24:c1:6b:f0:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:7F:56:7E:1A:B3:F6:D2:7F:42:5E:13:81:16:C4:2F:6E:66:4B
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:19:05:cc:04:6e:70:cd:fd:63:64:ab:15:86:fb:fa:34:49:
38:51:55:33:18:ea:a2:aa:44:e1:c3:66:0f:68:8e:ff:53:d4:
05:b7:ea:76:ea:84:09:24:8a:6b:95:9b:4b:69:4e:0c:b6:c4:
81:e4:88:e2:eb:af:e2:3a:f5:e0:f6:02:da:35:b1:0a:40:9f:
72:b9:92:9a:f1:90:31:62:1f:9c:bb:fa:62:c5:fb:89:83:c1:
1c:c3:51:86:f1:88:91:22:1c:8a:4e:91:51:77:6d:67:77:6e:
a2:36:47:67:7b:19:be:0c:72:b7:d4:c0:81:89:5f:b1:6a:2b:
93:0b:8f:9b:91:4e:8e:3f:a0:d1:a8:4b:bd:8e:90:c1:0f:11:
38:aa:00:72:9e:5d:a9:03:44:89:8e:cf:29:77:59:03:b4:94:
46:bf:91:78:36:95:fd:5a:63:7b:eb:ae:54:a5:54:77:e0:7d:
5e:79:db:15:9a:59:17:a5:ff:e2:64:39:41:5a:dd:8d:c6:67:
dc:39:31:0a:31:f9:83:62:7e:79:65:ea:96:12:f7:ee:0a:6b:
8b:b0:73:e0:5f:1d:b7:4e:28:d6:db:fb:b9:47:2d:05:7f:d6:
8b:a7:4c:da:07:05:6d:28:ef:22:bb:ee:4e:cf:ac:75:dc:f2:
e4:3c:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:10 2026 by rpki-client