Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: kzdzugsvRbVk6lpwvlkQUFxjX7vPrXOiA08kNScWdCM=
Subject key identifier: 88:01:C1:7B:CA:2F:B0:8B:39:48:CF:4F:EF:D3:FB:69:46:FB:A3:DF
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019D9998EB378BF5D73E805F306042FF3DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: k1SM0INvQryEEtDMVyf94YT2CuGUnGdiq9xR3aUP+r4=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:eb:37:8b:f5:d7:3e:80:5f:30:60:42:ff:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=8801c17bca2fb08b3948cf4fefd3fb6946fba3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:8a:77:da:27:3f:18:a9:87:13:1b:05:fc:
0e:06:7f:68:97:87:6e:6d:3e:43:8d:0f:de:d2:6d:
8c:54:b0:13:77:ec:31:38:f1:36:02:fb:d3:c6:6a:
29:77:ed:4c:9e:b8:92:a3:02:ba:2b:29:da:49:e7:
3e:a3:49:d8:fd:31:62:20:16:2e:b1:3e:ec:3d:6c:
bd:3a:94:e7:87:90:9b:6e:97:a7:b6:b0:98:34:74:
4e:17:38:31:8e:49:26:b4:6d:d8:41:25:88:de:ba:
52:57:2c:6c:5d:23:1e:c4:a8:58:36:34:42:94:e2:
37:4b:1b:bc:34:5b:c1:be:4e:76:14:4c:73:a6:ed:
87:b0:a3:4c:7b:ea:5e:82:56:88:7f:f4:4f:1e:ec:
79:42:89:85:1d:7b:00:b3:55:33:28:eb:54:49:f0:
00:fb:f3:e7:f5:92:a5:44:c6:6e:ff:2c:4e:48:0f:
c6:58:80:f7:99:34:d1:49:ec:3f:cf:68:4e:7e:d2:
d7:8d:8c:e3:9b:3e:3d:01:1c:bd:48:ae:39:56:b8:
a6:5a:c4:39:55:3b:ea:d9:1a:d5:7a:6c:66:02:4e:
6d:60:53:f8:e0:cd:59:59:2c:5a:ee:70:44:40:9c:
5a:58:bf:da:1f:ff:55:81:e9:d5:62:2c:c3:9c:d5:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:01:C1:7B:CA:2F:B0:8B:39:48:CF:4F:EF:D3:FB:69:46:FB:A3:DF
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:01:f9:51:84:c5:77:6a:a6:24:8b:8e:2a:24:56:d5:d8:
2a:cb:61:cc:7a:2c:32:42:9a:b8:c6:2b:27:59:25:9c:e5:9f:
5a:87:10:80:37:a3:75:06:05:74:f2:7c:a8:c2:fa:6f:4d:46:
05:57:91:21:bf:68:ed:a8:00:d0:72:e7:f6:82:69:08:ea:f8:
57:e1:5d:8d:c4:cd:31:97:04:29:67:da:bf:cf:e2:b1:53:05:
b8:ca:05:b3:11:51:14:6d:f0:db:43:9b:d6:e0:9a:58:49:a4:
ec:a9:8f:ed:a4:5d:b5:1a:50:3d:90:af:2d:48:4c:0d:33:5a:
4b:6b:9b:b5:94:e7:a1:83:b4:ee:63:83:25:ce:95:9d:ba:9c:
4e:81:41:84:a1:c3:a6:d7:1e:3a:3b:6d:b4:44:fb:08:f8:17:
58:c2:ae:a7:2f:77:6e:37:f2:21:3c:08:ce:3f:b4:24:6c:ce:
79:e8:4c:e9:47:b6:3e:f9:a9:6d:3c:94:45:28:51:7a:47:45:
77:30:c0:78:47:1d:7b:8a:d5:66:4d:fc:f4:41:87:22:ff:54:
c3:9f:a0:96:0b:f8:5a:73:e6:16:d8:b1:b1:5c:25:8a:64:bc:
b5:b0:40:ab:80:e9:63:56:44:50:87:27:2f:20:89:2d:31:f3:
1e:a2:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:29 2026 by rpki-client