Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: b+KhK1whkelmNEDqiDVh1nfriU1/PAeqamRcptCZ4os=
Subject key identifier: 2E:79:98:19:B3:DC:1A:8E:F3:0A:14:8E:02:73:7B:68:E2:F0:B2:96
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019D9A74A1E06C5D45BE0E0553FFE35D3448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 015D
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: fFYlKUQSQFlOY0mnQ9Emx8J6MwTvfGNFJMeo1zQ6Ko8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a1:e0:6c:5d:45:be:0e:05:53:ff:e3:5d:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=2e799819b3dc1a8ef30a148e02737b68e2f0b296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:c4:38:fc:97:96:0a:ad:f7:33:54:c1:8e:
f8:2c:70:25:0a:9d:5d:3f:cc:d4:07:9a:06:a8:67:
42:67:f6:b3:0a:a4:a8:99:84:bc:a2:dc:02:dd:b6:
ba:e5:c3:4e:c3:cb:23:98:32:48:62:c6:e3:34:a4:
5f:97:86:d6:8d:f5:38:29:a7:c2:b3:1c:a3:98:c6:
2d:80:56:d3:e0:cf:cb:fd:39:7a:95:ea:49:db:d2:
28:63:15:7f:8e:c9:d4:40:1b:83:c2:d5:21:18:dc:
f3:f9:08:3b:a9:8a:5c:f8:9a:ac:8a:cd:fe:d7:f0:
32:a7:be:86:06:b6:e7:3e:a8:b8:af:c7:38:3c:46:
d2:31:d1:8b:96:84:9b:83:6b:1e:42:d2:97:ac:29:
67:aa:27:7e:52:33:4e:7a:fa:63:86:4c:5d:55:a8:
98:ca:8c:85:b4:22:be:45:91:2b:ac:5e:2b:2f:e3:
f3:0c:f0:8d:1b:c3:a3:98:01:98:a4:70:24:f2:6d:
8c:b4:ad:1f:ce:02:8b:7d:ae:06:f3:d3:1d:e6:a9:
0e:da:09:37:74:5f:cc:64:2a:13:c6:59:fe:7f:8d:
9d:ab:ee:3e:ab:b3:18:99:40:54:58:9f:ca:67:54:
f9:ae:81:d2:7a:9a:f2:02:ed:52:fa:3c:09:21:27:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:98:19:B3:DC:1A:8E:F3:0A:14:8E:02:73:7B:68:E2:F0:B2:96
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2e:fe:22:d7:28:dc:fd:7b:64:08:47:db:3e:8a:7a:86:ca:
52:08:68:ef:b9:24:eb:95:9c:40:ec:72:41:4d:b3:a1:98:19:
e8:08:ff:dd:25:be:ec:4f:0f:49:a7:1f:39:a0:1f:68:c0:94:
69:fb:34:dc:9c:8f:30:e8:95:93:7f:11:fb:f8:d6:0f:42:85:
c5:43:04:a0:2b:38:f5:60:39:08:32:7d:fd:02:1f:96:db:d4:
f5:17:57:15:e2:b6:a5:64:10:6a:41:69:2d:ff:06:bf:35:81:
e7:af:57:ae:55:80:7d:98:37:8a:30:7b:4e:64:e4:e5:69:aa:
4a:76:23:7f:e9:1e:9c:ff:44:8e:6f:5b:63:7e:2c:41:29:95:
da:9f:31:b5:c1:c2:af:1b:6e:20:db:0a:c9:c7:9e:46:b4:88:
d7:d0:55:7e:36:ee:9d:02:3b:89:be:f7:c4:18:19:5d:01:24:
dd:8e:21:af:3b:ea:31:10:10:ef:ed:8e:14:00:d9:0c:3a:68:
31:f3:d7:51:3d:72:45:82:6d:88:e5:1c:6d:fe:f5:31:f9:0d:
f9:1f:d7:23:ed:ab:f7:e3:e9:74:aa:28:34:b4:03:1d:1d:15:
5b:27:a5:c5:7f:92:42:d2:09:6e:03:c9:25:5e:73:cc:b7:39:
e0:76:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:04 2026 by rpki-client