Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: ZU0c9td6S/L/HNhWVhZjimTkzsRu6l1zw/9bSVu2nd8=
Subject key identifier: 30:F3:20:C2:B7:85:3A:32:E3:34:81:28:E6:F3:A9:BF:53:0C:D9:A2
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 019D99D092D8C1843DBE9B08CD5701568B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: BIgy9cCMSLVSlfVmO7EOzAbfPSHNFifhARPD2jms+rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:92:d8:c1:84:3d:be:9b:08:cd:57:01:56:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=30f320c2b7853a32e3348128e6f3a9bf530cd9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:18:48:f6:91:51:cd:97:c6:34:11:74:8e:
65:6b:0a:13:38:62:3f:46:23:19:c3:a7:94:a3:0a:
ca:6c:1a:b1:f4:c2:13:0a:25:d8:e1:53:a5:8c:d0:
4e:0b:f4:be:3f:d9:80:fb:f3:bc:d1:a9:5e:19:4e:
7e:6e:c2:93:c8:8d:a6:36:a7:c1:5e:a9:a9:be:a7:
b2:58:e6:19:01:02:d9:95:b5:90:53:56:3c:e8:b3:
27:94:af:2d:94:6b:f2:5b:ba:80:d7:c8:8f:0f:75:
7f:5c:e6:3f:5e:94:69:86:7b:9f:55:d4:eb:88:52:
eb:f5:48:4e:2c:79:d1:34:26:fe:4a:ea:d5:26:18:
57:dc:6e:8b:31:94:27:33:61:18:2b:a0:e3:67:b2:
18:97:5a:a9:8f:88:6d:e2:11:f3:cd:39:9b:e0:76:
21:a0:82:10:f0:72:0c:5c:a0:f9:81:65:07:33:51:
5f:3e:c1:11:de:2b:1c:12:25:66:ad:8f:5f:f0:87:
4a:1d:2e:0d:3c:e6:88:80:1f:ac:f6:ba:56:f8:2d:
f2:db:95:e1:9c:ad:9e:e4:85:b3:48:1c:a5:cd:ba:
bd:92:8a:ee:b2:fa:4f:44:a4:e4:7a:10:de:04:5d:
c1:da:b4:e8:11:a2:b3:7c:6c:55:5f:af:ab:49:ac:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F3:20:C2:B7:85:3A:32:E3:34:81:28:E6:F3:A9:BF:53:0C:D9:A2
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:27:fc:27:28:3e:f1:2c:4b:bc:63:f6:ea:25:0d:90:da:
bb:13:60:9d:ce:40:ac:65:1a:91:9b:1e:53:53:ab:0a:3a:5f:
16:ee:10:c3:8c:b9:92:22:f8:bd:87:da:c0:fb:a8:5b:81:b9:
a1:e3:49:bd:98:75:b0:81:55:15:2e:8c:e6:5f:f0:8b:17:c3:
3d:38:cf:9b:f2:52:35:8e:8b:96:44:e9:03:53:b3:f6:3d:15:
27:c0:9a:be:36:b8:6d:fe:d3:31:fa:81:15:df:91:55:a2:66:
b7:05:33:ef:77:8e:6a:e8:7e:83:d7:c0:73:e6:f0:59:cc:d3:
e1:b4:ba:45:97:0d:c4:12:72:f3:b2:76:d3:4b:3e:9c:fa:72:
31:bc:5c:a0:cb:1d:6f:c4:fa:7c:f1:dd:e6:37:db:99:12:4f:
c2:a4:81:e1:66:2c:52:4d:c6:b4:14:3f:e0:a4:c9:04:fe:dd:
c1:11:36:c0:9e:51:02:06:e6:76:eb:73:ab:20:9c:af:36:61:
2d:82:cf:cf:f4:14:8b:b2:7a:6f:a2:fd:30:bd:e6:2a:54:d8:
68:34:b3:4c:7d:d9:ea:2e:35:0f:76:ee:b5:b8:0d:60:0d:1b:
72:40:5e:19:ac:92:26:e2:fe:cd:77:2a:ac:a6:a3:04:00:47:
15:59:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:15 2026 by rpki-client