Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: Bzh3hzu/swP2g9XbeY7NfFfYNhZ4cCYE/8yVn8zbLFY=
Subject key identifier: C4:1F:5C:DA:81:46:E0:8B:5A:B0:C5:57:EC:C4:5A:EF:23:56:DB:5D
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 019D98F49758F65200BC3E5D0B11DFEDE10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: /UuukFlbM/Ex9IKP9A8auRpD/LuDWDai6ZGAfl8GMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:97:58:f6:52:00:bc:3e:5d:0b:11:df:ed:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=c41f5cda8146e08b5ab0c557ecc45aef2356db5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:90:fa:be:bb:fd:9f:3e:3f:02:70:19:08:
de:aa:8d:40:40:a6:ac:78:f2:d2:81:d0:04:db:b0:
1a:08:ae:01:d7:97:69:2a:ca:a9:0a:59:1c:aa:ce:
eb:28:a5:4c:eb:0b:33:18:02:9c:70:57:b8:03:63:
14:c1:6b:eb:de:6d:8f:9c:ed:38:47:c3:b5:b9:ce:
03:aa:3e:8a:ce:33:97:59:3f:d5:63:80:92:dc:cf:
58:b3:c8:81:68:40:c2:db:ea:b8:76:1c:16:33:72:
a2:14:6d:35:ee:f2:57:b7:76:16:b0:59:ca:e9:72:
c2:64:b0:09:fd:85:98:f5:c9:38:11:aa:63:7b:ac:
65:04:b9:56:ec:3e:65:b8:f4:eb:61:5d:74:6c:89:
f9:9f:13:ab:38:30:ec:57:59:0b:1b:3d:ea:56:09:
08:ec:d3:b1:4f:ff:87:da:68:e9:20:b1:21:fc:a1:
24:22:a9:25:30:29:71:6f:68:8c:5f:7d:28:78:74:
4e:5b:7c:b1:45:ec:cb:bd:c2:6c:26:e9:1e:98:09:
f8:5b:25:83:2e:5d:e0:30:17:42:b5:25:4e:d0:71:
be:24:be:b4:b9:f3:12:c4:9e:f4:6e:fd:4f:59:d4:
d4:03:ff:e8:b7:e0:5a:75:ba:d7:da:2f:27:1a:c6:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:5C:DA:81:46:E0:8B:5A:B0:C5:57:EC:C4:5A:EF:23:56:DB:5D
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1a:61:03:50:9f:25:de:64:3a:77:aa:cc:cd:72:9d:c1:73:
c4:10:6e:11:8e:04:93:49:b5:c5:e5:f8:2a:46:d5:f7:be:d9:
33:51:90:d1:d4:fe:31:5d:e7:15:7e:d9:66:2b:c4:9c:da:3f:
46:36:a0:34:cf:82:56:5a:cd:3e:b7:e4:e4:32:fe:93:04:3c:
d0:e8:d4:81:48:9d:0c:9b:af:10:94:d4:2a:94:72:cc:60:f9:
50:83:19:3c:5f:1c:a6:1f:54:27:64:04:d2:7f:6d:3e:ac:6e:
0b:fd:6f:8a:8c:b7:c6:f2:d9:0e:3b:6d:15:ba:34:a2:c2:1a:
c0:a0:6f:e8:85:14:06:93:e0:99:ec:b7:d8:38:85:da:3a:81:
66:b1:a6:fb:0a:f8:19:2a:1c:53:0b:da:a8:67:99:57:29:2e:
19:84:a6:91:52:eb:47:f4:81:91:63:6b:5c:4f:29:87:29:19:
2a:fd:84:a6:f4:3f:64:9a:d9:f5:89:bd:46:fb:d9:12:7c:d0:
43:e0:80:11:8c:31:09:8d:5f:88:41:73:3d:c8:76:b5:48:b9:
b8:65:dc:60:67:64:e7:6a:75:77:51:da:99:16:b3:10:43:02:
ae:f3:a6:d2:79:25:2b:fd:97:6f:8f:07:f2:c8:a6:36:c3:33:
b9:4c:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:34 2026 by rpki-client