Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: 700omkvQTve0EMCT01+x3S3bxHn9JBdejs6SdFkTljs=
Subject key identifier: B8:FB:BE:DA:F4:EA:41:EF:94:FA:CA:04:2C:47:69:22:82:47:8F:39
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019D9A3E9A5A2BF03C60C4C9D40C3D4EA4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:01:26 +0000
Manifest this update: Fri 17 Apr 2026 07:01:26 +0000
Manifest next update: Sat 18 Apr 2026 07:01:26 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: 0L1VDCgz/xj6M7CPn4I3UMLpvmeVOT2LFeL8IKs1n0Y=)
2: tzNhQBxVbG84fhnHI6FFgXnV1Ig.roa (hash: UFTyL6yRgFc0Xt2kdYNbyJU576nNW6IhohuerTzQsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9a:5a:2b:f0:3c:60:c4:c9:d4:0c:3d:4e:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Apr 17 07:01:26 2026 GMT
Not After : Apr 18 07:01:26 2026 GMT
Subject: CN=b8fbbedaf4ea41ef94faca042c47692282478f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:3c:e7:47:3a:cd:b7:d3:09:ab:be:a7:8e:
ff:61:ca:70:5d:77:68:84:4c:ee:21:e4:67:85:c4:
cb:9c:39:5b:13:82:39:cd:e8:17:67:a7:83:f2:2d:
de:96:03:1b:68:eb:94:27:52:74:37:63:a2:87:3c:
a6:97:e1:fc:06:09:c7:c7:48:fa:35:bf:46:a6:78:
13:dd:34:29:0a:f1:1b:18:1f:6f:cb:03:6d:01:8e:
28:03:ae:f6:fc:80:7a:a1:b8:d5:8e:5d:b8:b8:2d:
59:50:48:46:18:e2:c1:b0:39:61:d4:89:3c:da:d4:
d4:dc:74:be:91:a6:44:ad:d9:56:72:c2:4a:b3:d7:
12:69:9a:df:78:53:84:b4:78:1f:2b:cb:15:cf:08:
0c:4f:26:31:d2:69:87:97:9f:be:3a:4f:1e:cc:46:
a0:14:cb:74:ad:15:bb:50:c5:3b:d7:62:85:f5:38:
02:01:9d:75:55:27:d3:78:af:aa:b1:00:9c:3b:b0:
5b:99:98:ed:93:b0:94:75:87:f9:7f:4d:71:6e:6c:
39:49:86:26:95:5a:5e:54:4c:fa:d0:d1:94:a8:fe:
a0:f9:cf:8c:41:53:94:6b:fa:ce:44:17:d6:99:85:
ad:76:3c:1b:bb:cb:33:0e:77:f2:70:46:ea:0e:6d:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:BE:DA:F4:EA:41:EF:94:FA:CA:04:2C:47:69:22:82:47:8F:39
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:14:7d:80:9a:f4:43:38:81:0c:e6:65:41:99:1b:ec:1c:54:
ae:d8:4e:65:c8:a8:aa:71:6c:a2:00:11:4f:0b:6f:10:63:6a:
9b:ad:44:02:49:e7:2d:ad:be:a9:ce:10:1b:5a:c2:75:aa:ed:
de:dd:33:fe:a8:66:98:74:da:12:0d:57:73:2b:0b:25:a4:b5:
eb:11:ea:58:e0:03:4c:d2:36:26:6b:20:33:1e:51:19:30:98:
54:18:19:16:a8:f4:1d:17:e0:08:95:c8:53:83:9f:59:79:a8:
3c:ad:56:0c:d4:29:9b:d3:b0:a3:0a:29:d5:03:1b:a7:81:8a:
96:3c:cb:78:52:78:41:7d:52:6c:e8:27:f8:01:61:68:af:82:
84:6f:22:e1:4f:e3:22:94:93:fb:ff:31:d6:bd:77:1b:9c:45:
18:d5:9f:8f:92:33:5d:92:ac:dc:c9:57:17:e2:ae:91:89:72:
0a:89:bd:e3:36:21:05:37:f2:57:1a:a5:66:6c:94:67:1e:00:
12:0c:b7:76:a7:fd:62:36:df:7a:ff:1e:af:91:49:8c:9b:16:
96:e8:70:04:82:f7:1f:73:bd:1d:f3:e3:b5:db:07:92:60:53:
04:39:c9:b5:c7:a5:67:cd:22:e1:5b:e5:74:4c:30:ee:d9:33:
0c:c0:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:07 2026 by rpki-client