Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: tIjZxQGn2768bIj8s6qXWi+vNt3imTQnsSVNbinHFS8=
Subject key identifier: 89:73:7B:7F:C2:60:09:D7:40:B3:73:40:30:A2:16:05:60:D7:92:81
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019D9A753D44CE299C2FC3C4AF466CE1FC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0419
Signing time: Fri 17 Apr 2026 08:01:07 +0000
Manifest this update: Fri 17 Apr 2026 08:01:07 +0000
Manifest next update: Sat 18 Apr 2026 08:01:07 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: dv6VTuc1shp0DunJfZsullHhVoEzpXEUaQ+Lbevj5q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3d:44:ce:29:9c:2f:c3:c4:af:46:6c:e1:fc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Apr 17 08:01:07 2026 GMT
Not After : Apr 18 08:01:07 2026 GMT
Subject: CN=89737b7fc26009d740b3734030a2160560d79281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:ed:53:37:03:13:64:d2:9f:30:12:f9:ba:
32:32:5b:75:e7:66:bc:58:5f:18:60:04:85:61:f3:
e6:c8:63:d7:81:ef:5e:85:b8:6f:d3:8a:72:f6:da:
53:a4:1f:2c:04:da:1f:93:7b:01:d5:a0:30:82:65:
ab:72:5b:c9:d8:93:08:3a:be:cd:33:1b:81:12:4c:
3b:4f:77:f3:f3:47:77:4d:7e:30:8e:26:60:0d:9a:
eb:69:f1:98:41:96:e7:02:93:95:f6:8c:9a:09:13:
bb:38:ba:10:22:da:63:f5:84:af:c1:ad:9d:65:bc:
b7:07:dd:f4:a9:52:3f:45:a3:dd:a6:c3:bb:f6:11:
a3:92:12:8e:2a:2d:71:3c:70:7d:f7:dd:4d:2b:2f:
81:ef:6e:ef:2a:5b:35:2f:97:67:1e:3d:8f:db:b0:
87:03:ab:c4:a7:c3:fe:d0:a7:e8:ab:7f:42:a2:e1:
68:36:e2:9c:9d:78:c2:1d:c0:4f:33:03:87:04:ab:
55:51:17:b7:6f:c1:7d:fa:49:1a:f1:7a:5a:56:bc:
3c:7f:64:4f:fa:44:b0:8a:3d:ca:0f:48:3f:e4:ec:
54:69:fc:19:0c:4d:db:ba:a1:b4:c3:04:5d:b2:d1:
f6:39:57:5d:00:98:12:2a:68:4b:be:39:0e:29:a7:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:7B:7F:C2:60:09:D7:40:B3:73:40:30:A2:16:05:60:D7:92:81
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:e1:cc:1a:ad:20:28:d3:89:3c:e7:1d:d3:61:45:27:6d:
82:33:95:68:0f:c7:0e:8e:8c:5a:b6:16:50:e1:f5:5c:f4:4e:
9c:5d:bf:57:55:8d:d4:c1:ed:a7:8c:34:32:24:c2:8d:6f:67:
f2:df:3a:f4:a6:19:77:e6:50:af:fe:87:c4:bf:54:05:98:01:
42:ae:aa:e5:92:c2:b4:e3:07:22:ab:b2:89:16:76:5a:78:6a:
82:d8:be:a3:b0:25:f5:79:fb:80:e5:43:57:32:2f:1d:64:16:
18:dd:f7:98:cb:ed:5d:b7:ac:27:aa:35:0d:0d:23:9e:11:f0:
be:ba:dc:f2:bf:28:72:89:47:fb:77:5e:f1:6d:e5:ab:76:af:
b2:a5:b3:b9:7c:f4:6f:f5:80:bb:47:d8:91:d4:f8:a0:d4:8c:
73:47:cc:e7:3c:ad:66:24:35:2d:d3:2c:b9:eb:fa:08:51:4f:
ba:d2:e7:b7:9c:d7:23:31:e7:be:5a:4c:5c:ec:52:5e:d9:e1:
1f:cc:ce:0d:90:1d:1d:ac:a2:52:2a:b0:26:2c:3c:77:ca:8d:
99:86:b0:d4:34:a7:e3:4f:fe:cb:12:5f:88:a1:0d:67:93:36:
22:ad:16:4a:16:5b:20:2d:ff:5b:3c:51:27:f7:53:5c:86:b4:
7a:05:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:49 2026 by rpki-client