Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: sA2D/Z9C4cszUs0joiA8SIsmqIKumf/ZRFDnxQj4LGk=
Subject key identifier: F8:A1:2B:8B:18:04:0B:3B:17:71:E0:D7:35:07:D5:73:67:BF:48:00
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 019D9D75E6D47232F4D5CA152E80D12C3DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: 0169
Signing time: Fri 17 Apr 2026 22:00:42 +0000
Manifest this update: Fri 17 Apr 2026 22:00:42 +0000
Manifest next update: Sat 18 Apr 2026 22:00:42 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: fIjsCti8hokXajy9foBp3l7asr5OD0aJLAfSgN4nxIQ=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:e6:d4:72:32:f4:d5:ca:15:2e:80:d1:2c:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: Apr 17 22:00:42 2026 GMT
Not After : Apr 18 22:00:42 2026 GMT
Subject: CN=f8a12b8b18040b3b1771e0d73507d57367bf4800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:4c:c7:51:b2:fa:40:b3:95:51:07:08:f1:
69:c9:5b:cb:2a:09:dd:3c:ca:20:21:14:c9:cc:dd:
62:0e:38:1a:f4:dc:28:70:e3:23:82:a2:ec:6f:c5:
e1:fb:19:b8:26:a0:41:71:cc:15:ce:9f:08:5c:e4:
c7:b2:64:f4:8a:a8:a1:90:d6:4f:cd:8d:cf:84:94:
41:46:ff:ab:03:6b:73:70:94:e2:22:52:07:df:68:
c9:24:24:bd:3a:78:db:03:51:f9:fe:77:3c:a0:c5:
d1:9e:82:d0:39:2d:c7:fd:a4:3d:fd:c2:72:17:72:
81:fd:3b:69:a8:ae:75:df:4f:9d:e9:69:b9:d5:51:
66:5c:24:69:ee:ed:39:6b:e2:1b:47:82:ce:7c:a5:
45:54:a2:ed:52:2f:7a:eb:d4:f6:27:ba:95:58:8b:
0c:35:07:13:cb:2f:35:36:48:ae:dd:aa:a7:40:57:
38:40:c3:ca:f3:df:8c:ab:9a:40:ae:e6:58:9f:78:
b2:25:27:28:60:79:c6:2d:17:be:03:a5:87:7f:85:
74:ef:29:d0:81:9d:fa:dd:5a:e7:e4:a4:6e:87:8f:
45:12:e6:e4:7b:77:df:39:96:6d:07:94:3e:92:90:
33:cb:92:68:1a:94:e4:40:56:9b:4d:a6:ac:a8:ea:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A1:2B:8B:18:04:0B:3B:17:71:E0:D7:35:07:D5:73:67:BF:48:00
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:24:1c:4d:e7:53:10:24:8c:39:db:9f:5d:f8:de:c9:56:
cb:3c:db:b2:66:a7:14:f2:a3:58:63:e8:7a:12:d1:24:00:50:
14:e0:33:5d:12:64:e7:18:0a:87:7b:69:cf:bd:d0:55:79:50:
1e:84:aa:8f:5a:33:30:ce:45:4a:7e:53:04:f0:11:c4:55:87:
e9:cd:4c:88:53:1d:f4:61:e9:4e:3f:48:8b:06:5f:8d:6a:51:
1e:52:30:7e:f9:3b:cb:6d:75:ab:39:08:42:1c:6d:50:04:b1:
bd:e4:4b:5d:29:5b:34:bb:ba:92:5b:b9:0a:b3:87:ff:6f:a6:
3e:37:54:1b:31:77:ef:09:44:3d:8a:df:0c:bf:ee:a8:4e:cd:
51:b0:f2:71:f0:8a:16:5b:b5:4f:f9:98:95:b9:2f:81:aa:3a:
98:2b:e2:3b:00:f8:49:42:5e:ff:14:4e:54:db:2c:b9:18:18:
9d:bb:a3:04:77:83:60:d4:58:0a:6c:bc:cc:10:ec:04:5e:81:
95:f0:28:9b:4f:3b:7a:dc:c7:bf:45:8f:1a:4b:c5:25:ed:50:
e4:01:fc:03:61:89:13:3c:6b:44:11:52:0a:11:16:08:e4:5d:
8a:fc:0f:75:ce:4d:74:d6:27:e4:f6:3f:b2:ce:75:dd:dc:40:
cb:68:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:28:47 2026 by rpki-client