Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: cMfDw+mRbJQMpYN38X9lrNj86bO9cQ8nnkfXJbbb+hM=
Subject key identifier: 0C:7D:93:33:17:28:76:7A:1D:8C:4B:2A:0B:43:4C:03:F4:64:DC:9F
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019D9886CD863B68C3E90ADB4BF905256685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 16CD
Signing time: Thu 16 Apr 2026 23:01:04 +0000
Manifest this update: Thu 16 Apr 2026 23:01:04 +0000
Manifest next update: Fri 17 Apr 2026 23:01:04 +0000
Files and hashes: 1: JNDoPU_d0ImIXVmrAn7Hqb_dPuE.roa (hash: qjvEQEZ4+gLBmbSLvlf95+OWTtrvJCq+Fdjb+HE/rTA=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: qKiSSSqrxW0s2v3Uy7Hdfny9InLSKgltBnJd5e6Qbu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:cd:86:3b:68:c3:e9:0a:db:4b:f9:05:25:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Apr 16 23:01:04 2026 GMT
Not After : Apr 17 23:01:04 2026 GMT
Subject: CN=0c7d93331728767a1d8c4b2a0b434c03f464dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:f3:d1:c9:32:bf:fd:bb:8b:f4:cd:2a:83:
82:ce:bd:d0:24:a4:61:b8:d4:3b:41:94:33:2b:1f:
7f:f5:90:6b:ee:e3:df:a7:64:3d:30:91:c1:c9:5c:
27:65:4f:b8:2c:f6:69:ab:5d:f1:df:f0:4b:ab:69:
21:91:45:8e:e5:14:05:0a:db:52:9d:19:3a:c7:89:
af:40:18:d3:71:93:29:4d:16:b8:d6:27:35:ca:78:
ae:29:cc:72:42:72:44:93:b8:82:7b:6b:e9:29:63:
ff:d3:0c:57:4e:74:de:b7:08:15:63:4f:b8:b8:d2:
3f:b3:24:ed:b3:25:25:af:d2:39:2b:f1:8a:90:f8:
fd:97:0e:b9:8c:4a:de:6a:6e:b3:c1:91:e0:b9:c0:
87:d4:1b:01:be:b3:23:76:23:6e:36:0d:65:fe:c1:
10:94:54:ad:4a:5d:9a:95:e2:fe:5f:45:a2:b5:fd:
03:36:ac:40:b9:06:ae:bf:aa:f2:aa:9a:f7:7e:57:
34:ce:c6:c8:6a:06:49:5f:95:81:9f:c9:6d:f5:ef:
7b:81:a3:32:11:f2:45:c3:92:2f:83:e2:f6:53:ad:
6d:5e:3b:68:bc:87:71:ba:c2:e9:47:3d:94:1f:3a:
9f:b9:8b:4b:7b:f7:e4:9b:65:e3:f5:d3:f1:9b:e1:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7D:93:33:17:28:76:7A:1D:8C:4B:2A:0B:43:4C:03:F4:64:DC:9F
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2a:5c:2e:3e:c1:aa:05:8b:22:65:69:95:7b:9f:71:5a:50:
39:8f:34:4b:9c:7c:c5:2e:f8:1f:52:9e:3a:c3:ec:d8:03:af:
b1:4c:63:91:6a:38:20:f2:57:41:7f:0c:ff:65:f6:c1:76:ac:
3a:f8:22:87:89:b2:14:e6:6e:04:6b:df:0e:34:34:37:84:29:
21:a8:a1:79:8a:0e:ed:d8:8b:72:d7:a3:2c:96:b8:db:42:d7:
41:be:f8:c3:27:bf:35:2f:3c:37:3f:c9:c6:f8:eb:c1:e4:48:
f6:d1:a0:00:04:7d:ae:a3:d7:be:7a:18:74:9f:3d:b9:13:a4:
89:45:ef:d7:1c:5b:03:35:18:e0:26:d5:4d:a9:e7:a9:50:89:
39:5e:71:f0:4b:b0:73:00:2a:11:72:bb:3b:1d:5a:56:3a:d9:
11:98:e4:a6:bc:d5:a0:57:c9:9e:56:60:8a:79:fe:cd:3c:57:
9c:3c:85:8b:82:52:1b:dc:35:29:72:31:4c:75:b4:62:91:0e:
f9:e2:92:ea:64:06:e1:5e:c1:34:fd:18:77:82:1c:de:f3:89:
e3:7e:1f:49:9f:11:4d:b2:86:e4:e0:24:52:69:ed:e6:d1:3c:
ad:f0:fe:6a:22:5c:da:7a:09:31:a4:35:cd:de:2d:9f:49:19:
50:ec:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:21:00 2026 by rpki-client