Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: ZQquBzJ7PtNFlMg6ewJT/Tzha1rfPkH1/1MsYPvxNHc=
Subject key identifier: 33:80:CD:1F:81:F4:DB:EC:B9:5C:E5:6C:9E:DE:78:C8:83:4B:8E:50
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019D9AABCFF8D7EA68DEDFEF81A29C602451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 15BF
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: +dQFYizJEAZ5adlug/2L9+hXm8RwjynHVTVWsHY1Aqc=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cf:f8:d7:ea:68:de:df:ef:81:a2:9c:60:24:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=3380cd1f81f4dbecb95ce56c9ede78c8834b8e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:99:3a:21:ae:24:ab:63:d0:82:54:9a:8d:
62:ea:41:33:3d:52:f7:c5:48:8f:bf:c6:1e:f3:8f:
47:d9:3d:e7:29:3a:d6:27:96:19:05:a6:d7:a7:82:
c1:7d:5f:ed:5d:e8:82:55:38:a1:4f:40:71:68:47:
1e:66:c5:28:9c:5e:59:b0:21:57:33:92:75:ce:1c:
95:a7:0b:7e:5b:d3:54:10:56:e3:f9:40:b8:36:d8:
fa:54:6e:89:b0:4f:10:85:7c:04:6b:59:71:fc:c2:
57:4b:1d:52:e8:9d:c8:e1:7a:ea:8d:97:ea:d9:7b:
04:a2:fb:5c:92:46:39:55:07:66:a9:09:60:bb:e4:
0b:5f:5b:aa:d0:90:f6:fc:ef:c0:15:6a:fc:0c:56:
d1:7e:80:aa:62:e6:54:f0:a0:47:d1:14:a7:53:31:
90:24:61:27:5a:9f:57:19:ef:fe:3a:b0:cf:95:a3:
76:28:03:d3:46:75:af:a4:08:a5:42:f2:ca:35:e2:
68:09:b1:91:a4:a1:1c:fe:62:7f:1a:15:ec:68:51:
9e:f4:79:df:00:48:67:54:8e:5c:71:a5:22:3e:0f:
a2:eb:ff:69:a6:54:ae:17:57:f8:45:96:eb:53:4c:
2d:4f:ff:57:69:60:6a:2e:b3:3d:cc:19:be:fb:ce:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:CD:1F:81:F4:DB:EC:B9:5C:E5:6C:9E:DE:78:C8:83:4B:8E:50
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:68:95:4b:91:87:fa:38:4b:1c:fa:dc:97:a8:df:8f:8d:
d4:e8:44:80:e4:c1:50:28:82:bc:11:21:a2:a4:ec:e9:94:49:
fd:79:a7:1b:34:d1:a6:e7:b3:4d:84:02:3f:78:5e:0b:ed:81:
9a:d5:d7:68:7a:63:73:aa:0c:13:87:59:19:c2:a7:86:95:f7:
bb:3d:8f:8d:26:05:0d:60:73:4c:d2:b0:9b:8c:cf:ba:84:9e:
f6:c2:79:8d:e1:02:db:7c:bf:f8:60:fc:e4:38:d1:ba:fb:74:
ba:8f:21:f9:93:dc:08:88:ae:d4:ea:c9:f8:9f:73:59:92:02:
55:51:4f:7b:a7:04:c7:6d:06:e6:cb:0c:ae:23:db:df:d0:a8:
06:b6:9a:ab:e2:ee:c4:ab:b4:75:b8:3e:b9:34:48:e3:7f:dc:
0c:a4:5e:03:b4:97:26:7d:ac:3c:ff:f9:77:26:57:9f:06:59:
2a:cc:89:95:3a:5c:f3:e2:51:94:d3:9f:4e:a8:54:10:a2:88:
3c:0d:21:02:f2:eb:29:4e:2e:b7:01:f3:80:c5:9e:b2:13:26:
e7:ea:96:be:41:c0:9b:e7:5d:34:0e:27:22:b9:5f:11:81:5b:
dc:ee:86:06:6e:80:34:96:42:75:65:0e:cd:71:e3:eb:4e:f3:
c3:d4:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:56 2026 by rpki-client