Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: 6UzM5UHpwa/TEiYjVv/2G2w9w39PjFuVCDqVcujIhf4=
Subject key identifier: 18:54:AC:03:A8:EC:15:1D:3C:67:61:61:5E:05:C0:CA:94:D4:F8:FB
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019D9AE322C036969B6339946629B6AC62E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 086E
Signing time: Fri 17 Apr 2026 10:01:09 +0000
Manifest this update: Fri 17 Apr 2026 10:01:09 +0000
Manifest next update: Sat 18 Apr 2026 10:01:09 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: AzoPzD5QgyJkD5Gf+mJ2k6hQTXwUXpqSbA6E9Hl+1wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:22:c0:36:96:9b:63:39:94:66:29:b6:ac:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Apr 17 10:01:09 2026 GMT
Not After : Apr 18 10:01:09 2026 GMT
Subject: CN=1854ac03a8ec151d3c6761615e05c0ca94d4f8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:d9:07:ac:79:02:10:33:35:79:14:42:40:
60:64:68:d9:3d:ef:a7:bd:bc:18:12:49:69:a8:da:
28:c5:f9:f8:c7:ba:c7:d0:6f:db:c4:b5:dd:8e:22:
69:4b:7a:6c:ac:0c:dc:4a:e6:42:1a:3d:e6:b0:66:
8d:73:4b:f7:6b:b3:6a:a6:87:6d:34:31:a1:4d:be:
ff:ae:8c:10:c9:f9:55:e0:7b:ed:a8:33:6c:ac:2b:
aa:80:6c:77:68:b7:e6:8f:99:ce:8a:7c:19:b7:e4:
65:8c:5a:43:b1:39:48:01:31:35:77:cb:11:24:a5:
38:6e:e1:67:ea:0c:27:35:bd:97:81:49:dc:c4:ee:
aa:98:aa:f4:a6:ee:a2:9d:ed:dc:23:ba:4d:22:6a:
ed:85:b8:bc:61:da:87:90:9a:45:bc:e2:75:06:be:
11:75:43:a7:9d:72:9a:f3:9c:f2:ed:c8:8c:e9:d2:
34:fc:c5:9c:22:b6:52:19:14:48:ba:1b:54:dd:a6:
9e:0a:71:47:fc:a5:65:de:c7:6b:4f:c3:42:57:1c:
4d:92:ef:84:e3:71:dd:91:77:44:f6:6a:58:12:92:
fb:20:b6:90:3a:9e:a9:ed:1b:91:f2:09:d5:c3:1b:
95:7b:eb:c3:3c:68:28:8d:4f:30:fe:71:93:79:bb:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:AC:03:A8:EC:15:1D:3C:67:61:61:5E:05:C0:CA:94:D4:F8:FB
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:60:52:26:31:1a:ce:bb:4d:a5:c8:ca:ee:f5:36:c7:e3:
51:16:36:b5:5e:e3:5c:22:1a:64:91:61:1a:a8:de:69:4d:6c:
55:11:4c:57:b6:4c:6b:cc:eb:35:30:0d:25:09:ec:28:ad:0d:
07:06:e4:78:03:1a:9f:33:30:5b:a1:a8:8e:53:9d:6e:ef:5d:
82:61:8f:b6:bf:f2:46:f4:7a:c3:d7:7a:f9:ec:89:e7:7a:3f:
fd:0c:fb:5a:f5:8e:55:1a:bc:0a:57:b1:24:ee:af:c2:18:64:
96:80:5a:42:65:27:fe:a4:c3:ab:8a:7d:93:10:43:e8:64:75:
c1:5d:38:a8:53:92:09:e6:a6:c2:dd:b8:85:e7:98:38:73:15:
6e:e2:d8:cf:4a:b6:c5:77:ae:d1:24:7c:d6:17:c5:8b:5a:ba:
f4:bc:91:c7:6f:3b:bf:91:7e:80:47:d6:00:84:63:b7:55:aa:
31:d1:5a:4a:4d:fd:ac:b6:56:ac:dd:88:cb:57:eb:5e:01:32:
07:a5:af:bc:fe:2a:51:32:a8:5d:51:64:02:d0:11:ec:c7:11:
e0:6d:eb:3c:c2:77:31:ef:cb:f3:6a:d8:51:ab:10:9b:79:95:
0f:c3:70:6b:55:f2:e6:3a:f8:c0:ab:52:19:63:77:15:9b:ea:
91:8a:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:55 2026 by rpki-client