Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: 7iVkkrLpcVpT27dTO1qdvlpScO93EYb3l21x8hpvQdY=
Subject key identifier: B6:7B:43:59:37:B8:E2:3C:D1:F6:2F:C1:27:57:7B:C8:7E:7B:E8:53
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019D9886BE56E1D3D9ED70659870A9A63DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 17AE
Signing time: Thu 16 Apr 2026 23:01:00 +0000
Manifest this update: Thu 16 Apr 2026 23:01:00 +0000
Manifest next update: Fri 17 Apr 2026 23:01:00 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: GacqXUKlxyFCN3iRGsh5r8QtX8c.roa (hash: c7rKxZ3135SLzDKJLfScVXDzCGPZhUKThOMw3qO//fA=)
3: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
4: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
5: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
6: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: pF9HpjpXTQNyztGlGBJBhwKa2jOdWjAxS9d4Cgzaly4=)
7: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (hash: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278=)
8: klr0KTSXAoZ5Zqon-VpZgYzoMss.roa (hash: yjOCOxwG1aJ7xjLzJqDW9mX3xmg5oMVtBIP5nqHz3qQ=)
9: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:be:56:e1:d3:d9:ed:70:65:98:70:a9:a6:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Apr 16 23:01:00 2026 GMT
Not After : Apr 17 23:01:00 2026 GMT
Subject: CN=b67b435937b8e23cd1f62fc127577bc87e7be853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:dd:6e:c1:88:d6:08:fc:43:08:e3:66:e2:
ad:d8:61:79:8b:8f:a1:43:45:58:3c:1e:0c:32:cd:
c4:e5:f8:5b:43:e8:8b:34:ab:82:1a:57:c9:19:4b:
34:05:7d:ad:c4:a4:5b:f9:31:10:91:47:50:a0:d4:
8f:4a:02:ec:62:8a:26:d1:b0:a5:80:02:1b:e7:22:
55:90:74:8f:83:7f:f7:38:9e:5d:08:5e:cd:dc:43:
1a:c3:5a:ad:5a:67:0c:70:f9:a6:49:cf:4b:46:c9:
43:be:b3:c4:eb:8c:ec:e6:7b:4f:8d:e7:36:de:16:
0a:65:60:83:0e:fd:73:6e:58:bf:23:3c:09:f3:4a:
f7:eb:19:e0:6f:62:d5:44:7e:c7:42:c9:f5:19:69:
56:d1:7f:e1:11:d9:53:ec:90:a6:7c:d0:00:40:61:
fe:36:90:8e:d1:a0:56:e9:17:eb:9f:13:2a:c1:1a:
fe:45:08:78:46:34:d7:be:0d:d8:91:d6:b5:c1:ca:
78:1f:92:c6:90:d4:8b:7e:d9:e9:39:89:e4:14:ce:
3f:7d:ca:8c:52:88:e5:83:5b:02:07:2a:48:95:85:
73:50:10:af:16:0f:6e:1e:c9:16:93:4b:7f:b4:4d:
9d:ac:b9:5a:9f:10:12:b8:91:37:25:8e:f5:4f:d0:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:43:59:37:B8:E2:3C:D1:F6:2F:C1:27:57:7B:C8:7E:7B:E8:53
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c2:f2:bc:9b:b8:ba:75:63:ff:ec:b8:ca:00:09:4e:ae:0f:
7c:09:39:13:7b:c1:44:3b:ce:c5:92:19:a9:7a:53:31:ab:82:
25:14:46:9c:b4:2f:51:89:86:45:c9:73:36:bc:bf:0f:8a:6d:
07:2e:c1:63:37:92:55:ca:a0:3e:df:bb:54:fe:87:f0:25:05:
94:ac:de:bb:5f:57:df:57:f5:7a:2d:83:5b:f2:11:53:ea:8f:
27:2d:d7:30:7a:c5:21:3d:38:12:e2:b4:95:44:ce:bd:33:1e:
94:9c:3d:6e:5a:4c:a1:7e:27:2b:07:24:06:ba:1b:bd:de:ed:
a4:1e:db:6a:58:a7:c5:ac:06:75:7f:c4:5f:2f:09:be:1e:fa:
ed:6c:08:d1:aa:16:3b:d3:69:c6:32:7e:49:ca:54:eb:9e:49:
e2:f7:26:af:92:13:06:28:9d:61:ee:57:3f:4d:d7:5f:ce:23:
5c:be:18:a4:97:e2:c8:0f:a3:54:cc:44:ff:05:b5:ad:b0:25:
e6:04:e2:10:e9:ce:44:81:5d:46:f3:01:b1:d4:6f:12:2d:97:
1f:5d:6d:0a:77:fd:fb:48:e2:8f:83:e6:d7:8d:53:77:48:64:
27:20:94:e1:20:cf:de:75:da:c1:c7:7e:d7:2b:57:0d:51:f3:
c0:b4:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:41 2026 by rpki-client