Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: zqIUuL0d/EmNmlZGsvuYo3EH/+RAM3Wb3s33AIg1lrc=
Subject key identifier: 7F:6E:73:EA:75:9A:59:C4:04:D9:D4:25:EA:B4:04:15:FA:3A:F6:AA
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019D984F940610EC49E7431B1009F7A2B5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1853
Signing time: Thu 16 Apr 2026 22:00:45 +0000
Manifest this update: Thu 16 Apr 2026 22:00:45 +0000
Manifest next update: Fri 17 Apr 2026 22:00:45 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: XpVqJbiEt6Go3j9SCwt72BlfUXFxoTsY8eTwiu6IEvQ=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:94:06:10:ec:49:e7:43:1b:10:09:f7:a2:b5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Apr 16 22:00:45 2026 GMT
Not After : Apr 17 22:00:45 2026 GMT
Subject: CN=7f6e73ea759a59c404d9d425eab40415fa3af6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:7a:ab:5f:71:4f:b4:3e:0a:98:4d:e1:9f:
6e:ec:08:20:52:c6:1d:36:22:55:e9:37:bd:70:bc:
18:d0:53:97:23:ad:66:d3:49:df:8c:88:6d:08:cf:
a0:c3:77:ac:32:d0:03:64:e5:4c:f1:1e:7f:cc:3d:
74:3b:fc:57:e7:8b:95:67:2a:ac:ca:b1:a0:49:43:
3b:9d:84:c1:c3:51:a8:af:5e:e9:a7:04:c6:54:1d:
76:e7:48:ab:b8:00:5d:d8:15:05:f1:26:43:fc:6d:
6f:05:77:c4:f5:7c:7d:2f:ac:3b:bc:85:36:0b:c0:
df:6f:e8:f8:f9:1f:bf:d9:61:24:47:3e:b3:37:f7:
fd:71:0e:8a:f1:8b:e2:90:1c:ee:6f:65:b1:5a:a8:
43:ff:cb:cd:09:7d:6c:3f:b9:4e:df:a8:5f:65:5e:
81:35:98:d1:77:43:1f:d5:51:31:15:d4:10:95:84:
8e:eb:06:ff:fd:c5:38:da:d3:1e:d0:7f:78:24:58:
29:6b:41:cd:28:88:a7:e9:4e:1e:e5:b5:58:41:3c:
89:fb:c1:d5:2f:68:72:41:fa:98:3d:6f:d8:e0:20:
dc:a6:d3:1a:07:33:09:d4:22:ff:97:64:71:9d:90:
16:5f:e0:8a:7e:1d:4f:dd:c0:8b:2e:ff:cf:96:d7:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6E:73:EA:75:9A:59:C4:04:D9:D4:25:EA:B4:04:15:FA:3A:F6:AA
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a6:af:e4:09:2c:32:0c:a3:87:31:12:eb:f2:cc:a6:be:5f:
07:0d:58:c5:1e:44:8a:e6:85:86:00:59:29:98:0a:6b:fa:57:
c2:55:a4:59:2f:c2:ba:b2:42:68:63:9c:fc:66:d3:a1:5f:3b:
5e:1e:68:ae:97:b0:4b:df:7a:cd:66:f1:f4:fd:b7:99:da:a5:
49:56:c9:f7:84:db:83:9d:1b:87:8c:eb:10:bc:d0:93:f5:7d:
3b:47:52:c2:db:d6:76:d8:a2:bd:fd:c6:6c:7e:3e:5d:3a:ae:
14:71:b2:6c:e6:7c:11:3a:a8:b8:98:ea:42:de:2b:5a:db:2d:
e0:54:d0:b4:68:0b:67:c3:1b:a7:e7:86:eb:1a:06:32:23:84:
c7:2b:42:96:bc:9c:18:05:29:c9:ed:a4:a8:8e:e8:57:91:b9:
1a:fa:6f:38:39:01:b5:be:18:63:44:d8:63:6d:80:c8:71:e7:
51:2a:f0:10:75:89:f4:f9:11:d5:51:e2:d6:00:57:9c:52:3a:
2e:ac:76:5a:de:3d:be:ee:ca:dc:2a:58:53:3b:c8:81:db:04:
c4:f1:e9:3f:e4:a2:ce:39:b9:f0:3d:8d:dc:e0:48:2c:e9:c7:
4c:f6:d1:e5:70:c8:83:d3:3e:66:3c:e0:ef:0f:26:66:00:43:
6f:10:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:18 2026 by rpki-client