Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: qOP9rYjiDMX0uAZSB+xnm36yeQ9IfpvfslymXap5CTg=
Subject key identifier: EF:50:F2:06:28:AA:92:AD:52:61:B6:DF:F0:F2:35:D2:67:E9:18:EE
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019D98862813FCF175DBCC7A7253C6E48A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 18C9
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: VcUl-MeV2dO35J7igtql6CHStoQ.roa (hash: FgEXTGiDc3PRCyqi+GhL/fq6GquDlodX0lgQR0+hGik=)
2: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: rvAcGkVY+c7YQ/q466ovDAz+HBugZF7oywZiXu0QvMs=)
3: sTc7d5x8YBD8KLckxEqvHWugEvs.roa (hash: jNItrOQqvxzxGGG+k9qCCY318gxGAc4g/td2z1ediFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:28:13:fc:f1:75:db:cc:7a:72:53:c6:e4:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=ef50f20628aa92ad5261b6dff0f235d267e918ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:04:12:29:b3:0a:64:6c:18:a8:98:5e:a4:
78:41:03:a6:cb:a3:b1:b9:26:84:1a:b0:31:85:b6:
ad:9b:9e:d4:d9:82:45:e0:24:4c:95:e3:c8:42:e9:
8a:95:3b:b7:a1:57:2d:8a:d3:8e:62:46:1c:2e:ad:
cb:6c:ff:c1:86:fc:77:2e:f3:63:a3:d1:dd:43:c3:
1a:35:57:a7:24:0b:80:d0:c6:41:8d:c2:42:3f:15:
4c:b7:43:85:ff:ce:39:56:dd:79:13:85:b1:e6:46:
6c:51:9c:ac:32:9a:91:bc:60:36:17:a8:82:14:b9:
56:d5:7d:02:3a:4c:3a:40:37:5b:8c:71:c6:1f:a4:
25:bb:88:2c:d6:59:cb:82:ab:53:9a:7d:77:c7:cb:
ba:fa:1d:0a:93:c5:fb:eb:a9:42:13:80:7f:87:66:
2a:cd:7e:77:b7:ec:e8:52:ea:6c:d9:90:fa:16:ed:
84:44:e2:f9:8d:0b:9e:fb:2c:5e:c6:4b:15:a1:f1:
e8:cc:fe:3b:fe:50:8f:01:7c:74:89:fc:4d:f1:50:
fd:1b:ca:26:e6:10:bf:a5:7d:13:92:1d:28:8b:e7:
28:c5:7d:d5:59:f7:19:be:8e:46:7d:3a:db:c9:24:
5f:26:d7:5f:63:0f:0c:6e:98:f3:bb:9e:6b:8d:8e:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:F2:06:28:AA:92:AD:52:61:B6:DF:F0:F2:35:D2:67:E9:18:EE
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:90:e9:af:90:97:e2:fc:01:78:30:69:24:d4:74:7a:c0:
6a:70:01:64:44:41:d5:37:c9:a5:c2:ce:bb:3a:90:3d:2b:d4:
43:e1:b3:4f:3a:82:7a:ef:f0:b1:2a:73:a6:8e:72:fc:a2:bc:
d6:57:11:04:d8:43:1a:ce:d3:86:ae:40:78:7b:0d:2b:a2:60:
cf:8c:3b:7f:c2:bb:95:61:3a:2e:c1:38:c6:29:25:b9:f7:f6:
d2:63:94:e7:03:62:97:ef:f7:30:80:d4:7b:ea:52:67:c6:c5:
ce:d8:4f:10:5b:aa:89:84:a4:a2:9c:12:25:ec:48:78:84:79:
ee:92:9b:8e:28:15:95:cc:34:1a:60:e8:22:7d:18:5d:35:85:
40:b9:75:7c:2b:a0:5b:21:d8:e6:04:02:bb:1b:e1:21:61:13:
23:c8:0b:87:90:2c:2a:90:7e:0d:da:34:99:34:40:a8:7d:0f:
3b:0e:89:6a:3e:93:5d:3d:32:f6:04:1c:05:57:13:84:05:fb:
f3:be:01:e3:f0:8d:44:df:49:52:e4:13:6e:f4:ff:f2:44:38:
2c:4a:8d:cb:36:bb:8c:64:44:69:34:36:26:19:46:39:c7:6d:
26:9a:4e:1d:08:41:21:96:25:09:96:77:ae:70:46:cc:1e:4a:
9c:f1:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:31 2026 by rpki-client