Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: agAAvXaWEj/+IGcPff02Fl8DXpZfLxQYsp3WiQaiXPE=
Subject key identifier: F7:1B:E3:51:2E:3E:F1:31:AA:4D:82:77:60:F6:35:24:EF:55:8C:77
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 019DA3AF2B9B47EA01ADCA6911F16E98B63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 04C8
Signing time: Sun 19 Apr 2026 03:00:59 +0000
Manifest this update: Sun 19 Apr 2026 03:00:59 +0000
Manifest next update: Mon 20 Apr 2026 03:00:59 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: BPSBAcrvjSi2e2fh3qvGgYQ31rfRe92uqcdv2v3M4uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:2b:9b:47:ea:01:ad:ca:69:11:f1:6e:98:b6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Apr 19 03:00:59 2026 GMT
Not After : Apr 20 03:00:59 2026 GMT
Subject: CN=f71be3512e3ef131aa4d827760f63524ef558c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e1:22:ff:8b:a6:74:db:ca:a9:5a:93:08:b2:
d9:34:77:8e:37:e3:aa:1a:91:23:57:6c:90:4b:1f:
3c:dc:fc:06:2f:e6:7f:61:16:8f:06:cd:69:79:c5:
ca:ec:84:1d:54:40:f9:9b:01:90:74:e0:e9:bd:47:
b5:46:a9:33:24:b5:4f:c8:fa:62:90:4f:2a:75:ff:
fe:d1:68:02:bd:6f:b7:0c:ab:80:e7:3a:35:78:21:
ea:3b:20:d3:3d:5e:00:fd:00:b0:49:e9:72:c8:67:
5d:67:11:88:8b:2e:8f:80:70:26:98:05:cb:25:63:
ed:88:43:a8:93:f7:8f:16:ce:ff:25:1c:f3:d8:20:
41:29:e2:99:fc:ca:c0:62:82:a0:8e:43:75:bf:2e:
d1:a4:90:3b:88:86:54:48:59:07:1b:69:c7:65:f2:
c2:6e:ec:e8:21:c6:26:28:7b:8b:8c:b4:77:e5:26:
4e:4c:36:df:ef:0d:05:1e:8a:fd:94:b2:e9:f9:72:
da:e3:da:45:16:ca:72:f4:da:84:d6:12:c6:36:f8:
3c:bb:3a:03:92:1a:f5:98:f0:93:db:b7:98:71:f5:
75:db:4b:df:40:b1:1e:77:f9:c5:d7:3b:94:9c:7f:
19:5d:60:33:e0:7c:27:de:f1:12:f3:d7:79:ce:bd:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:E3:51:2E:3E:F1:31:AA:4D:82:77:60:F6:35:24:EF:55:8C:77
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:99:ca:4f:25:da:14:0c:54:a2:b6:67:ef:8f:a4:05:80:
6e:89:cc:8b:0d:c2:e7:66:b8:2c:23:3d:6f:6d:b9:54:a2:cc:
32:5b:78:e7:b6:bb:57:db:0c:1e:87:48:53:5b:d7:35:96:c8:
fd:42:09:de:0e:b0:47:d2:de:cf:e2:7a:db:c6:8d:66:5e:df:
ec:2a:55:da:86:10:e5:7b:2a:87:80:20:67:2b:f9:cf:41:1a:
60:0c:f1:a4:a1:c9:bc:b4:6b:91:fc:33:7f:53:81:ca:6c:aa:
5d:25:ae:0e:12:9c:83:45:69:fc:f0:de:81:94:d2:1a:07:0a:
a5:9f:ea:29:74:b4:d7:de:ce:35:2f:10:ce:aa:02:4d:0e:63:
64:9f:51:c4:48:d0:d7:2b:a2:a9:12:23:0f:8c:52:76:d3:b6:
26:99:b3:f1:d8:ca:e8:f8:08:72:68:6e:fb:b3:bb:73:e8:7e:
02:62:46:7d:89:e2:e1:36:fe:35:bf:77:d5:c8:ac:00:e2:93:
69:47:7d:d7:ef:12:18:13:57:b2:66:70:52:95:18:77:76:57:
9f:4b:0f:0e:3b:d9:1a:a7:d9:77:a0:c4:be:2b:8a:db:d4:c0:
69:7e:3a:3c:1b:f6:76:a3:a3:04:fa:42:4a:5e:15:8d:cc:b6:
ec:9d:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:29 2026 by rpki-client