
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File: aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier: 8RpITy1Uufni2A3o+cRfttbBG21vDmD/1WvbqP2hBng=
Subject key identifier: E6:28:39:9D:E2:C1:E9:CF:A6:BA:DA:EF:7D:D0:5F:FE:D3:4D:66:E2
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer: /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial: 019D98BDD599DF15278C5FCB37F77DAFD006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: XzYex_ieQvekeO6Eu8AhysaHXCM.roa (hash: Uh2DSfJ3JPw4zmLr56LoU47sN4sjUalmk5csq0JOUMk=)
2: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: 5HozuW0fT8DtGF/iBqNQkqjPBfnXQ8M4tu33m0ICPNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d5:99:df:15:27:8c:5f:cb:37:f7:7d:af:d0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=e628399de2c1e9cfa6badaef7dd05ffed34d66e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:42:e9:c7:1a:85:4e:8b:05:20:a5:62:d1:
1c:04:bd:15:36:5b:27:66:eb:05:b3:63:3d:4e:e2:
9f:30:15:3f:bc:97:b0:ab:f4:7d:26:76:4d:52:0c:
b9:49:1c:7c:2f:38:3f:e6:fa:1b:db:98:88:c6:b8:
cf:07:bf:a0:cf:9b:d1:46:e7:13:92:85:27:5e:0e:
00:b3:53:af:bc:83:90:67:69:88:71:45:9b:c6:a8:
45:2a:6d:1e:22:9f:72:3a:73:dc:2c:24:80:ad:2b:
39:43:52:e4:11:cf:1d:57:9b:f4:72:23:6c:45:c2:
1f:c1:df:47:2a:80:7f:9f:36:c7:f5:41:b0:f7:8f:
69:f1:94:55:63:07:f8:3d:a8:39:70:72:dc:87:24:
9a:87:eb:2d:65:04:fc:c3:5d:30:b0:8e:01:b1:75:
3f:8a:b4:52:79:98:61:79:63:1d:12:89:2e:b6:8e:
08:82:37:27:7d:c5:64:38:f9:72:71:ab:57:dd:cb:
4c:54:0b:e8:c3:93:5e:3f:7f:9a:58:0b:48:14:28:
d9:f9:c1:56:ad:26:29:fa:68:61:90:f4:dc:4a:70:
e5:42:02:fd:52:d5:41:a7:29:42:4c:51:2c:b6:88:
0d:de:fa:de:e6:70:8b:98:02:4f:38:38:2d:80:29:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:28:39:9D:E2:C1:E9:CF:A6:BA:DA:EF:7D:D0:5F:FE:D3:4D:66:E2
X509v3 Authority Key Identifier:
keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cf:f2:77:93:30:e8:5d:cd:38:84:79:65:fb:96:20:b6:27:
4f:54:0f:36:c4:85:34:d3:29:9c:ce:e2:6e:45:be:3e:89:9f:
12:8e:ce:b4:d8:6f:8b:0c:a4:2a:5c:87:56:b7:47:91:a5:eb:
72:27:a2:b3:1b:3f:7d:c0:21:1f:a5:c2:18:a9:63:52:24:7d:
b9:ff:6c:02:dd:6e:81:4b:2d:b0:89:da:b2:6f:58:04:c2:e9:
19:37:60:fe:6c:dd:46:97:6c:b0:9f:59:9b:c0:e9:03:be:9b:
74:17:1a:af:58:b4:94:da:3f:18:e3:0a:7b:86:c4:22:11:19:
66:36:ad:c6:57:3f:a4:0b:39:33:35:8d:9f:ed:22:88:7f:4f:
e1:81:65:38:78:59:00:b4:e2:e5:98:18:e5:e8:8e:29:fb:a9:
67:1c:4a:52:85:05:a1:55:1d:72:14:7c:8e:88:5e:af:b9:e8:
9e:3d:78:1e:c5:61:fd:b4:5d:ee:da:1c:b3:ca:5f:87:3a:0e:
20:40:36:7e:f9:33:75:5f:5f:69:26:5c:56:5f:8f:c2:5d:75:
50:98:c3:42:77:2a:4f:03:34:63:d2:64:d4:d6:fb:66:83:01:
f4:fb:9b:93:6c:0e:94:38:1c:b9:5a:f2:a0:82:03:b0:e5:d5:
a8:74:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:12 2026 by rpki-client