Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: FWuD88Me1iL0QfX9LOTlvvEaVMvizvkmpXWnp55Rtrc=
Subject key identifier: 3A:92:86:8C:07:7A:7D:A9:AA:6A:E5:A9:1B:EB:C9:D3:38:18:9C:FE
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 019D9A750BA820815BC7C372ABCF9B05CA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 105D
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: DDLjcRpPu1QJGGXoVWKujQxec9kiKS5sB3Eo4vzDJNw=)
2: zbGnMHvperUTVfkkQ2o3OIxLJb4.roa (hash: yA4AYsSS3JozPB6SQxRvVSqD1ZvucRznxAMaRPbA/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0b:a8:20:81:5b:c7:c3:72:ab:cf:9b:05:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=3a92868c077a7da9aa6ae5a91bebc9d338189cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:36:17:43:5b:c4:76:66:a0:c7:31:81:c0:
41:29:e7:5a:a6:63:bd:53:80:c2:5c:db:79:5f:b6:
0e:16:01:3c:89:75:6c:b3:3d:ce:01:73:8d:c1:da:
9c:46:4b:67:fb:23:92:77:bf:50:46:d3:b8:44:f0:
29:88:8c:27:ae:85:b8:57:f6:08:70:b7:c0:70:7d:
e2:b0:d5:a7:2f:44:ff:34:b6:f2:a7:12:2a:6e:06:
de:35:e1:d5:57:70:eb:b7:d7:d9:04:8e:56:6a:82:
f4:fb:b5:65:24:21:de:aa:20:5e:e3:f3:45:66:81:
04:f9:b9:7e:a0:07:9b:ab:63:22:f1:7d:61:c7:e4:
ee:a9:a4:50:ad:78:06:cf:89:ca:f3:8a:b4:ce:c3:
8d:ad:65:1d:75:48:e2:e1:1f:58:05:da:42:b1:2a:
78:33:07:d4:e6:33:3e:97:fc:70:8f:0c:1d:f0:91:
2d:dc:c2:b2:45:e0:50:ce:e4:5d:26:ad:16:83:4f:
21:26:e4:80:d9:b9:c3:7f:14:d6:bd:57:28:74:5b:
ff:2d:a0:4a:64:6a:63:d1:45:45:f6:3d:13:a5:bd:
d0:41:7b:49:7e:9e:6b:ec:18:13:c0:94:32:d0:46:
f4:2d:39:7a:fa:32:97:82:d3:83:86:58:2f:90:cd:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:86:8C:07:7A:7D:A9:AA:6A:E5:A9:1B:EB:C9:D3:38:18:9C:FE
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:b4:59:a8:4e:fb:67:a0:9b:16:43:0e:e3:53:7e:16:6a:
84:69:03:63:24:58:62:1a:03:09:19:c1:e1:11:60:33:06:4e:
d1:e4:95:6d:4f:69:ac:c4:59:69:8c:ea:9a:42:eb:c1:df:77:
fe:55:f9:31:0b:ab:fa:06:a8:a7:89:ea:50:31:cd:16:e1:c6:
61:47:cc:d3:22:7d:07:08:40:87:a8:ea:5d:ab:8c:d8:a3:62:
cc:ef:7d:42:ff:44:c0:66:4b:b5:89:26:8b:3a:8c:0e:8e:9b:
08:24:5c:81:bf:f0:89:eb:ca:d6:f8:61:05:5c:a2:8d:cc:f1:
d6:16:33:34:35:55:6f:f0:87:d8:50:16:2e:8d:02:b7:11:78:
51:30:d9:6a:35:26:61:3d:f9:d6:12:1a:4b:53:41:83:da:e4:
d4:58:d4:20:f8:1a:0d:e9:ec:fb:6a:5a:6b:c5:4a:db:4a:50:
cd:d5:4c:c8:66:16:14:35:9e:27:65:05:53:13:ab:dc:6f:66:
9b:76:75:2a:ba:3d:54:5b:f1:45:34:2c:87:69:95:4f:9b:ff:
68:55:b9:63:98:56:b2:44:4b:45:92:5f:97:8f:ac:54:71:aa:
53:66:60:2f:b0:f1:94:29:39:b5:59:1e:35:cb:c6:35:80:13:
db:e4:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:50 2026 by rpki-client