Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: HK407wD9mINDbKvTznLJw+rxY+gHzHdmxyvOzWEFAuw=
Subject key identifier: 3B:4F:99:E7:6B:95:C7:52:2E:29:A5:08:C8:9B:6C:B3:60:F7:52:F0
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019D984F8154CC699FFB6BC838ECB63EE27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:40 +0000
Manifest this update: Thu 16 Apr 2026 22:00:40 +0000
Manifest next update: Fri 17 Apr 2026 22:00:40 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: LvvOKODXUJTNEplr8Tmh+eyLK4jWabbW5Yi7hWYr464=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:81:54:cc:69:9f:fb:6b:c8:38:ec:b6:3e:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Apr 16 22:00:40 2026 GMT
Not After : Apr 17 22:00:40 2026 GMT
Subject: CN=3b4f99e76b95c7522e29a508c89b6cb360f752f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:7a:7c:2b:21:55:2d:31:a7:bf:80:f0:95:
e5:7e:d1:a5:ed:94:a4:03:8c:9d:6a:dc:63:ba:e7:
ef:f0:1e:02:f9:ef:5f:13:4d:f9:6a:dc:54:d2:e1:
bf:ef:54:db:9e:6c:4a:d1:80:fa:e7:1f:ba:70:57:
4b:b6:2b:ba:fe:3b:63:7b:2a:73:ed:d0:f4:13:6b:
b5:71:aa:bb:ca:22:79:f9:d4:75:85:16:ba:d1:5f:
e9:e4:4a:7b:cc:eb:9c:4e:86:9e:8c:00:e4:d6:32:
31:89:cf:50:50:ef:1d:7f:d7:6f:ad:c7:4b:83:e7:
c9:34:41:93:b4:3a:a5:fc:65:20:ba:cf:6d:31:d9:
e2:70:60:d4:e4:98:24:ae:45:94:bb:3c:01:cf:82:
75:56:9c:93:32:94:be:37:b4:6b:b6:b5:f5:7b:d2:
35:7e:59:00:87:d8:63:9c:ec:22:11:11:4a:e3:ca:
b9:21:53:87:ae:b2:3f:69:70:9d:07:6f:ad:43:4f:
71:82:1c:e8:2e:1b:cb:a7:d1:f3:d5:3a:f3:95:da:
c5:ae:3c:e4:51:96:ed:c6:38:5a:96:71:27:6f:1b:
61:ea:47:a6:a6:7c:b9:8d:12:36:e7:c0:d7:50:11:
e8:57:a2:fb:7a:47:0e:84:53:05:e5:70:e4:90:cb:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:99:E7:6B:95:C7:52:2E:29:A5:08:C8:9B:6C:B3:60:F7:52:F0
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:78:82:ba:28:d1:a2:47:1e:9e:10:ed:07:ec:4f:6f:40:
60:92:a9:29:4b:fb:85:5a:01:cb:3e:38:14:5b:5d:d8:84:88:
80:fa:ea:e2:f9:f3:5d:aa:37:48:7c:d1:1d:2f:d2:8c:41:bc:
59:a2:fc:c4:b2:0e:f9:ef:9e:df:b2:b3:32:22:75:36:07:e4:
dd:e4:4c:ae:0f:61:8e:5e:88:82:6c:a6:b5:83:e1:72:ce:da:
f1:91:00:82:fa:17:86:36:c2:fc:0b:95:a3:ce:39:65:58:67:
99:10:53:b3:0d:14:c8:58:2a:c5:03:a0:47:3e:05:ae:3f:2e:
5f:e2:51:49:c0:41:c4:4c:be:f5:00:1a:42:36:56:e8:e5:03:
69:af:9e:6e:6b:1a:33:f4:f2:bd:bf:78:52:a1:22:40:5d:36:
5d:14:af:a7:7b:b9:aa:88:3f:c1:0a:87:92:f9:32:4b:ba:24:
b7:e4:30:28:dd:1f:b3:af:d2:cb:38:0c:67:60:50:58:6f:03:
73:7a:39:f8:1d:13:0f:2c:03:70:79:ab:d7:cb:e7:7e:83:18:
8c:26:fb:65:fb:e2:76:d1:04:ce:db:16:78:38:88:ba:7c:cf:
69:c5:4f:56:be:68:28:c9:ef:0d:99:cb:be:8f:bb:78:05:e4:
22:3b:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:36:18 2026 by rpki-client