Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: 5jEcxr6bejr/uYne9qg2+MK0GXol+yJSOyZuG9B1it0=
Subject key identifier: 5F:BF:55:BF:B5:94:E7:19:DC:9E:A4:D8:56:19:D5:41:93:E4:25:56
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019D9A06F2437454DDC91DB6A7723A2EDCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 12FC
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (hash: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ=)
2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: Och3oFQkzdwyqpaZofNfoKFNt5XZfL5k+VAW2c9xzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f2:43:74:54:dd:c9:1d:b6:a7:72:3a:2e:dc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=5fbf55bfb594e719dc9ea4d85619d54193e42556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:4d:b1:29:a1:5d:06:bb:78:22:7f:03:95:
c5:fc:e0:47:49:bb:e1:83:2c:b2:80:e9:3f:c0:c7:
56:2f:01:b7:a1:b5:49:b1:75:1c:55:b3:01:c5:36:
93:3a:9d:08:f3:de:78:4a:a3:89:b9:44:3b:f6:9d:
87:1a:0a:25:f4:60:9e:37:17:2b:61:b9:25:e3:2f:
e1:0f:46:48:c2:a8:e0:f1:10:be:39:ad:9f:3a:9c:
91:0a:9e:9c:35:86:22:54:11:54:79:8f:05:ab:bf:
74:2c:bc:97:c0:45:6b:9d:8c:46:00:aa:f5:22:00:
c4:5f:af:12:8f:a0:bc:5a:68:c9:b8:b2:5e:62:af:
4f:73:3e:12:74:e9:24:94:4b:2d:a6:3d:4e:07:47:
66:ba:25:c0:af:60:29:b4:cf:32:b2:d3:f7:62:f0:
c3:a9:43:f2:36:f1:05:b1:86:e1:54:36:fe:fa:e4:
99:26:bf:a3:e9:d8:08:bf:83:60:fc:79:5e:76:92:
90:c4:97:2e:8d:9d:70:f2:09:05:21:85:71:85:ab:
e4:ad:a8:13:98:94:a3:f9:84:27:7a:f0:44:e0:39:
96:57:bb:f4:89:26:df:b3:75:ba:bd:13:72:7b:26:
9f:71:9e:14:88:a6:da:68:ec:95:37:3a:82:b0:c2:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BF:55:BF:B5:94:E7:19:DC:9E:A4:D8:56:19:D5:41:93:E4:25:56
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2d:f0:2c:2e:78:2c:0b:dc:05:40:0f:5b:9c:ed:75:2d:2c:
9a:28:ed:2e:b1:fc:0f:1b:d7:ac:c3:9e:27:b9:b7:da:ae:5c:
2c:ca:9a:53:23:a7:40:9e:18:fb:73:07:7c:52:c3:4a:a7:2b:
10:ce:19:71:62:8f:4e:ba:a4:e8:bd:a1:bc:1e:c6:dd:b7:0f:
dd:9a:19:88:bc:36:5c:e7:79:9c:a9:d0:35:1c:d4:94:f6:40:
12:c9:d3:48:30:5c:81:73:9e:15:24:f3:aa:d5:7a:04:ae:49:
38:4b:10:48:82:83:bd:59:23:63:a8:d3:04:26:4d:57:0d:c1:
ff:ed:10:1d:ba:d4:95:b0:26:96:45:70:4f:c6:a3:7b:d1:76:
f6:a0:70:8a:95:4c:c7:0c:34:f1:b2:c7:12:bb:1a:90:d7:52:
3e:d9:26:08:f5:3f:f0:e7:65:c4:4f:ac:49:bc:d6:f1:ed:1b:
cf:02:a9:6f:b1:20:d2:31:52:10:7c:eb:0e:6d:91:7b:a8:26:
17:c0:11:2e:43:0f:38:ad:31:21:df:59:cf:9b:26:37:87:bf:
3c:57:6b:5a:c8:43:71:48:c6:0c:ec:1a:09:88:58:22:4f:17:
bf:17:32:fc:2e:f3:3f:94:23:7d:84:68:6e:e3:81:26:cb:31:
88:8d:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:57 2026 by rpki-client