Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: D9kFl6rVX0Iy1JVxvi1+VjCRdGrRHStmVxGImwz3KAw=
Subject key identifier: 27:A2:19:D5:05:90:A4:FF:8C:BE:F3:6D:29:FD:3E:8B:31:15:2B:C3
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019D9A06DE770F0877ABE1271A1A2BE318F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: fXELUuOU5XaWnCjJaINkLTLELgXCpY0Mv7bQTCYSIOA=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:de:77:0f:08:77:ab:e1:27:1a:1a:2b:e3:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=27a219d50590a4ff8cbef36d29fd3e8b31152bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:9a:75:62:36:4e:b1:8f:71:67:73:c8:e1:
4a:a2:65:82:ce:1d:ad:30:c0:46:a1:53:60:cf:0e:
4d:40:d5:70:ea:d9:25:4c:25:c8:23:73:67:95:72:
56:cc:0e:95:40:70:ce:7d:ef:cc:64:07:8c:8b:37:
56:e3:54:60:d5:09:41:da:26:48:86:2c:13:2a:8b:
4f:d9:74:74:e8:b6:f1:99:1f:9b:c8:a3:59:e2:5c:
06:40:dc:55:53:da:38:b8:bd:7b:65:7c:5b:a8:86:
cc:5b:dd:d0:1f:b5:7c:dc:43:8d:71:61:6e:af:50:
ff:c6:34:0e:81:b1:48:98:c8:1f:92:52:97:24:37:
29:e9:13:5d:ab:d5:70:57:da:4c:41:ab:40:42:80:
1d:77:4b:9e:c1:e4:74:60:16:69:00:58:51:70:26:
4a:ea:6f:1b:dc:ff:8d:87:fb:f2:54:40:48:03:65:
75:ca:8e:33:50:1d:c6:ba:de:5a:83:8e:62:47:9c:
ef:6e:42:9c:2d:bb:fb:42:22:5e:81:42:9d:24:2d:
6f:81:7a:6f:21:de:88:90:b3:78:50:bb:9f:df:fa:
e1:1a:f7:9a:be:96:61:26:2c:72:a9:c5:a0:c2:7d:
18:e5:74:66:75:28:d5:b6:60:15:42:20:7c:27:7b:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:19:D5:05:90:A4:FF:8C:BE:F3:6D:29:FD:3E:8B:31:15:2B:C3
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:07:12:cc:f2:95:ae:a7:53:7f:a1:16:d9:3c:0a:74:6a:05:
e6:22:a0:b6:e8:e2:d1:10:31:19:d0:93:65:36:11:4e:f5:fd:
77:bf:97:97:b4:2a:b2:ef:97:4f:a0:92:a4:4e:e1:7a:46:aa:
39:9c:82:4d:c7:37:19:8b:a9:99:28:7b:8e:c3:2c:b8:81:18:
27:2a:0f:ec:db:74:a6:f2:83:b8:bd:2c:73:5e:be:70:64:2f:
a4:6a:ab:22:56:77:ad:32:1e:c6:41:7e:58:2c:a1:2d:38:6a:
3f:77:5b:d6:4a:9b:99:39:1d:59:63:28:72:12:d2:25:d4:cc:
d7:6f:04:92:47:1a:78:24:ae:08:57:ba:8e:42:02:c6:cc:2b:
5f:a8:05:52:74:b5:53:fd:33:fc:57:33:66:86:2f:0d:ba:26:
6e:ae:f0:b3:49:00:2a:44:91:ec:65:1f:30:c8:23:4f:bd:8e:
17:dc:ad:aa:ff:87:a4:35:a5:22:47:02:c0:04:9d:8e:a2:fc:
ac:4a:01:18:68:c6:2a:59:d4:67:fb:44:1f:d8:13:65:e5:57:
a3:ce:28:0d:98:58:96:e3:30:65:ca:cc:fc:45:2a:94:4f:e6:
89:ac:87:e8:5a:f9:a9:ca:55:b1:dc:c1:5b:57:16:99:f8:3d:
df:46:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:23 2026 by rpki-client