Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: SxyL9oC8aGrWv7gWuBHUIQm+nYSAPPw40BV7iZnfJKU=
Subject key identifier: A9:1E:A7:14:B1:9D:3E:7E:84:75:70:F2:7A:EB:62:CF:85:1D:C4:82
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 019D9B87FEEC16CF1AE81986B75D5AA69C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 13:01:14 +0000
Manifest this update: Fri 17 Apr 2026 13:01:14 +0000
Manifest next update: Sat 18 Apr 2026 13:01:14 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: xPImd+QqVTpfsi9zAsHsFvgyISLc8HyoHfN1i5ddMdM=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:fe:ec:16:cf:1a:e8:19:86:b7:5d:5a:a6:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Apr 17 13:01:14 2026 GMT
Not After : Apr 18 13:01:14 2026 GMT
Subject: CN=a91ea714b19d3e7e847570f27aeb62cf851dc482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:cd:ff:95:4a:62:cb:f1:8f:fb:1f:46:f8:
65:c4:51:52:af:47:e0:68:57:6c:12:28:f0:fb:49:
d9:d3:ea:cc:e7:2c:82:a9:1a:88:54:ce:a5:60:5a:
5d:5c:9e:b7:87:10:1f:8e:c8:72:af:de:9c:12:d2:
6e:e0:ca:90:0a:e5:9a:1e:5a:5a:c1:94:95:c5:a0:
dc:f4:2f:18:33:f3:3e:22:80:1b:ae:bd:e0:fb:f0:
2a:f5:e2:8e:c4:82:a0:92:4d:90:5a:39:43:94:81:
e6:a8:37:6a:5a:3f:7e:a8:a3:3a:6a:10:cb:82:a4:
9d:2c:52:8d:e5:c8:e1:67:aa:bb:45:c6:9b:e7:0e:
e5:08:49:52:ef:2f:3e:d8:fd:a2:38:3d:dc:bd:ea:
68:09:7b:da:34:60:d4:28:0d:d4:c9:c4:67:c8:6d:
84:b7:20:68:00:a9:ff:5f:35:74:a7:2a:df:a9:51:
eb:19:ef:f4:a1:ea:fb:39:af:3c:53:d9:84:db:53:
3e:15:51:aa:79:e8:e6:31:05:9f:1b:a8:83:87:4b:
a5:15:c3:0e:5a:50:b3:7c:a1:65:b5:f0:79:4f:e0:
73:28:d6:fb:fe:8e:c9:ec:28:16:74:85:df:b4:0b:
84:df:d9:26:17:3b:7a:84:f3:a0:0d:42:f5:33:2e:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:A7:14:B1:9D:3E:7E:84:75:70:F2:7A:EB:62:CF:85:1D:C4:82
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:19:c6:51:f8:41:3b:56:f7:28:69:88:37:db:0e:b2:b8:
1e:be:8c:dd:16:e9:d4:10:19:d8:45:a3:d1:6b:b2:16:ab:3d:
8a:76:de:3f:b9:9b:41:2e:10:4b:da:6c:ba:c2:88:fb:bf:d5:
1d:bf:8d:e0:b6:23:22:33:c2:00:f0:4b:cf:2f:35:b7:a9:52:
73:b8:28:61:f6:03:ae:c3:18:62:6b:71:7a:c6:cd:53:36:99:
00:b0:10:66:53:c7:17:aa:9b:1b:59:c7:19:c8:1c:a7:58:84:
34:7a:84:3c:05:73:9a:65:83:86:cc:b0:3c:67:d8:d4:d4:cc:
b7:48:11:ec:76:1c:88:5d:16:44:bb:04:4f:70:4a:9b:c4:37:
55:4c:25:e4:ec:a6:37:23:51:71:c4:fa:16:66:fb:00:8e:4f:
f1:b1:36:be:9c:01:38:5e:e9:f6:f8:ab:6d:a5:ed:f6:3d:59:
57:a3:85:0f:90:85:7e:8a:fc:7b:d5:95:4f:c4:6e:0b:c9:65:
c0:19:ce:3e:69:ec:a9:8a:61:08:fd:13:8f:4b:7b:f8:57:30:
93:f3:50:69:ae:0b:e2:0c:ed:55:00:b1:13:f0:dc:9f:f4:66:
6b:b0:ad:e5:51:98:84:71:d7:d1:b4:4d:c5:24:39:af:83:12:
68:cb:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:39 2026 by rpki-client