Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: zuZQuUDvdYahGoJunlqBWwj+cS6viId5hvdcqeetd0Y=
Subject key identifier: 49:1B:30:3E:CE:2F:D4:5E:C1:88:8D:E4:D7:A5:36:2C:9E:C7:F9:92
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019D99CFFBCB55F6D98C9510CB796B28C933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0BB3
Signing time: Fri 17 Apr 2026 05:00:37 +0000
Manifest this update: Fri 17 Apr 2026 05:00:37 +0000
Manifest next update: Sat 18 Apr 2026 05:00:37 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: ngzz9fXWU+HyDqGvyX9FTEbIaqCJMBtPWTUftr+adnU=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:fb:cb:55:f6:d9:8c:95:10:cb:79:6b:28:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Apr 17 05:00:37 2026 GMT
Not After : Apr 18 05:00:37 2026 GMT
Subject: CN=491b303ece2fd45ec1888de4d7a5362c9ec7f992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:f7:93:b7:f5:df:c2:7f:44:72:94:08:e3:
49:21:fe:e3:f1:26:ed:b4:be:41:c7:2d:3c:2d:04:
62:49:b3:10:b8:4f:4c:4a:65:71:bb:66:52:e7:aa:
ba:81:60:cc:cc:21:1a:99:0e:df:b3:14:df:bd:55:
a2:63:d4:99:8a:64:7c:8e:f6:85:8b:16:90:b4:31:
d0:c2:8b:b3:34:ea:60:a8:ac:b5:95:8a:ad:45:9f:
3a:b4:6d:c3:42:d7:ab:6d:ae:36:e7:64:f5:26:d4:
a8:21:f7:c5:9f:be:6c:ca:45:f1:21:df:fe:66:cc:
15:cd:f9:de:48:5b:15:61:da:46:26:e8:c3:e1:96:
35:7d:b0:70:7b:22:ef:6b:24:a8:ab:d9:77:96:c2:
72:d9:ee:10:ce:9f:d7:13:d0:45:69:b2:f4:77:14:
4c:b0:fd:53:33:9d:f5:84:5c:bf:b7:25:a5:ee:80:
87:6d:eb:01:55:a3:ef:9e:3e:85:3a:a8:9d:bf:9d:
73:90:2c:e8:bc:dc:82:43:00:68:09:5a:40:b9:88:
a0:b2:32:8b:a5:46:f6:c3:dc:74:1b:e6:a7:50:88:
42:c6:c5:3c:e4:60:c3:80:09:e0:bc:ed:34:ff:c9:
7d:02:89:70:61:19:10:0e:ee:d3:9d:cc:4b:36:f4:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:30:3E:CE:2F:D4:5E:C1:88:8D:E4:D7:A5:36:2C:9E:C7:F9:92
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:7f:2b:7f:67:93:56:fd:44:dd:8e:b6:65:a5:71:a1:76:
b1:94:c4:dc:e7:89:79:33:f3:9d:f6:c5:6b:bd:e8:da:82:2c:
87:85:1b:b4:72:88:93:d2:2f:ca:a9:89:b1:15:6f:bd:63:16:
32:aa:a2:13:1e:de:e9:c5:57:74:39:be:1c:bc:94:2e:46:95:
52:7a:33:bd:f4:86:2a:e9:f1:e2:e4:18:cb:89:10:93:53:ae:
e8:b2:3e:a4:d5:5f:94:88:f1:4d:8f:7c:73:ad:c8:0e:5a:29:
d2:a3:05:0c:a4:a5:41:9d:21:b7:98:12:f3:e6:4a:c1:35:71:
15:d3:88:2b:34:5a:72:62:7a:df:db:10:4c:e8:28:f2:48:0a:
04:14:32:db:7a:ba:8c:0a:c5:05:f8:f0:42:eb:51:4d:af:a8:
98:99:f9:e4:2e:0b:cc:41:a7:b5:96:3c:81:2f:bd:e4:ea:c5:
f2:11:8e:21:b6:9f:21:51:98:04:99:d0:73:27:b2:de:33:8a:
a3:5a:65:21:a9:ef:3c:31:90:80:18:e8:e1:0d:10:bf:aa:0b:
84:e0:be:27:37:3b:e8:7a:dd:23:dd:af:ee:17:13:ef:f0:44:
67:a6:6c:75:f3:64:15:37:c4:84:a1:bf:af:38:29:5d:50:10:
16:f4:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:34 2026 by rpki-client