Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: OTjMyyeKefOw0eFHpl+DdOippQFlSAl3dyk1172Nd10=
Subject key identifier: D8:FD:33:60:3A:42:52:2E:9D:2B:DA:AA:FD:7E:52:05:B7:AE:90:4B
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019DDA673C390B5CA6F2702AA394709D7E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 11AF
Signing time: Wed 29 Apr 2026 18:01:31 +0000
Manifest this update: Wed 29 Apr 2026 18:01:31 +0000
Manifest next update: Thu 30 Apr 2026 18:01:31 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: B6/0K0V/qIiVQXW41MLfTszwQlJQLJwm8IEv8l+NA9g=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:67:3c:39:0b:5c:a6:f2:70:2a:a3:94:70:9d:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Apr 29 18:01:31 2026 GMT
Not After : Apr 30 18:01:31 2026 GMT
Subject: CN=d8fd33603a42522e9d2bdaaafd7e5205b7ae904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:cb:e1:c3:cf:a6:df:09:fc:43:64:42:27:
e1:f4:8e:7b:ce:dd:f6:0e:62:26:83:2d:54:96:34:
92:d8:3c:12:f9:c1:61:c2:5a:e6:cf:50:51:53:51:
ce:b4:9f:68:0e:71:8c:e5:b7:9f:38:1e:2b:51:16:
3c:e3:72:3b:24:d1:84:72:bb:1c:3f:f1:6e:ea:c7:
f7:52:20:01:98:e6:e4:56:b0:2f:e2:a4:93:e1:fb:
6f:08:71:63:cd:0d:d0:57:bf:25:59:d2:43:28:3d:
c3:95:ea:81:99:6f:8e:82:92:87:4c:fa:8b:5c:78:
cd:c9:b1:64:8d:84:09:2e:e2:f8:82:19:d2:ce:d9:
c2:37:e2:ab:0f:d2:41:41:00:a2:76:56:55:ca:32:
6c:61:2d:38:00:2b:3e:c5:da:87:5a:be:e2:6b:e1:
43:2d:49:b0:40:12:09:84:9b:1c:c2:7a:32:9f:a3:
ce:83:6c:ea:ef:36:a1:6b:b1:0f:f7:f5:17:fa:c9:
a4:da:cf:f9:35:49:e9:96:30:f4:39:98:c0:40:d6:
37:a6:77:82:f2:6d:3c:95:3d:a2:cc:4f:27:9a:e8:
50:f4:bc:22:9e:07:27:dd:e3:a8:8c:fd:1a:b5:5c:
09:97:d2:4f:fe:54:46:a6:ea:49:70:e9:88:e9:bd:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:33:60:3A:42:52:2E:9D:2B:DA:AA:FD:7E:52:05:B7:AE:90:4B
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:1d:21:58:94:80:4e:d5:a0:c3:13:05:55:84:49:e3:ea:
55:e1:14:14:4d:5f:73:b0:09:92:a3:fe:89:85:ec:0f:33:07:
fb:c5:f1:bc:09:9f:f7:c7:62:2d:bd:2d:1c:bc:b9:fd:9b:1f:
3a:6b:93:e5:2f:47:5e:cd:0c:ec:59:97:03:fa:a9:9a:56:44:
c7:ab:bf:54:77:4e:56:46:e9:a0:a2:22:c2:b9:ba:c1:f0:ed:
d7:63:3f:35:10:04:e2:e7:28:78:92:85:21:db:22:14:02:c3:
1d:80:4e:8d:93:02:49:da:b9:92:de:e6:b4:50:d8:eb:cb:8c:
52:d7:75:c2:65:77:02:f7:22:88:3a:85:c1:ad:93:6d:8b:7c:
7e:af:e4:ed:44:b0:46:61:0a:32:36:3e:dc:a1:7f:f9:b6:31:
aa:51:24:dc:6d:99:c9:8c:24:a7:f9:3b:87:c3:06:3c:3a:e7:
af:f9:26:30:88:69:60:7e:9d:39:a1:71:a9:ec:d8:50:f6:34:
29:13:72:92:ee:95:93:2c:0d:18:75:02:3a:ce:8e:cd:eb:84:
5d:4a:6a:f1:91:b4:6e:76:a9:ef:ee:c7:ce:11:e9:88:e8:6e:
1e:e5:32:9a:21:ec:10:ea:43:a5:17:36:d2:52:97:3d:82:cd:
75:6b:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:19:57 2026 by rpki-client