Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json)
Hash identifier: MWi02BG4eO68QSNHSNHzH0GhtGbigcaj6vnbGz1EDak=
Subject key identifier: 87:26:53:DD:13:70:01:EF:DC:C9:AF:37:97:EC:CC:8C:4C:AF:B4:DD
Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91
Certificate serial: 019D9C6357F001463F16387845AA88132FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
Manifest number: 01CD
Signing time: Fri 17 Apr 2026 17:00:49 +0000
Manifest this update: Fri 17 Apr 2026 17:00:49 +0000
Manifest next update: Sat 18 Apr 2026 17:00:49 +0000
Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: MrIOwFz38vavn1XrIhekIj3OvQp6RusJ/xwgxIAPssM=)
2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=)
3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:57:f0:01:46:3f:16:38:78:45:aa:88:13:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91
Validity
Not Before: Apr 17 17:00:49 2026 GMT
Not After : Apr 18 17:00:49 2026 GMT
Subject: CN=872653dd137001efdcc9af3797eccc8c4cafb4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:70:00:c6:3d:2c:7e:48:b5:51:4c:98:67:
9e:2a:24:56:e1:dc:bb:3e:5d:29:a0:46:a4:71:a1:
ec:10:3d:9d:93:5f:98:a3:f3:64:98:9f:c3:33:ed:
9b:f4:54:40:dd:ec:77:f4:64:83:b7:6a:38:78:cc:
8e:78:eb:10:72:71:d2:ab:0f:3f:24:70:17:0e:3a:
dd:0e:f3:ee:73:f9:69:c1:47:a4:c3:c7:be:93:ef:
e7:8d:e2:35:38:3f:fb:80:5b:6d:d7:ce:1c:4d:f8:
43:4e:f3:de:48:33:68:7b:53:91:1f:21:85:bf:c0:
bd:88:cd:7d:20:b9:f0:5e:94:8f:14:c5:23:c7:e6:
2c:22:0a:96:3c:27:7c:26:d9:85:64:76:8f:a8:33:
48:6a:af:26:2d:b0:45:f4:7f:20:fa:09:3f:d4:92:
c4:17:38:a4:df:9a:ea:c1:f5:6a:db:ef:73:57:ce:
72:aa:df:06:47:6f:69:fe:ce:01:01:e3:9b:bd:41:
0e:a7:78:80:80:53:4b:b7:02:e5:ab:ff:96:52:58:
f5:7e:74:be:ba:5e:1d:62:de:cc:d2:79:27:86:12:
b8:80:c3:c6:71:72:7d:db:bc:25:5d:a7:87:95:c1:
34:18:e8:89:8a:e8:59:9f:5c:b2:2a:74:2e:f1:7e:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:53:DD:13:70:01:EF:DC:C9:AF:37:97:EC:CC:8C:4C:AF:B4:DD
X509v3 Authority Key Identifier:
keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:6c:2d:ca:dc:fc:d2:50:3a:d3:ec:ee:21:01:6e:a4:70:
7f:8f:73:b1:c8:2c:a5:bf:df:2d:10:4f:43:9c:60:8e:cc:62:
bb:18:c5:35:4a:83:21:71:2c:c1:30:87:b9:65:1a:71:9a:ed:
c4:9d:26:87:1f:73:81:a6:c3:5a:4a:56:8a:c7:07:91:27:36:
81:9a:d2:4d:04:18:e5:1c:fc:03:cc:71:8b:f8:13:62:72:00:
8a:9d:c5:fb:5c:e9:d9:f7:dc:e5:43:c9:f7:cd:16:dc:7b:29:
1a:07:8b:19:ea:48:bf:b8:d1:7f:4f:9a:e2:2e:97:55:07:51:
a7:2b:19:f2:55:91:e8:d2:9f:f4:0f:c4:f3:5f:ab:c7:ca:12:
29:8f:99:a8:74:3f:43:a0:7a:9a:68:c1:d2:79:f8:84:66:31:
63:54:22:bf:08:bb:83:86:cc:dc:51:21:f3:e1:53:b6:ce:58:
6e:c3:cc:50:d8:29:47:90:48:2d:57:0d:8b:fb:c2:6d:82:c4:
4e:57:69:99:91:0d:76:05:94:3c:2e:ba:b2:ff:34:87:bd:b3:
1d:ca:26:fa:5f:81:63:92:5d:92:a4:20:93:8d:05:db:f2:89:
82:77:fa:65:fd:59:51:7d:7b:43:a3:9b:f7:2d:96:0a:25:6b:
8b:a4:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:35 2026 by rpki-client