Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: XhXPQhslDb1HIDqEwTPOsLrAWc1BM2cXKRv+KeyWV5o=
Subject key identifier: E2:16:F9:4D:92:34:FE:67:7E:4A:79:AF:28:2D:2E:79:B7:5A:20:89
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019DB0218C87A97C1754699353BAF31470C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 18CC
Signing time: Tue 21 Apr 2026 13:01:21 +0000
Manifest this update: Tue 21 Apr 2026 13:01:21 +0000
Manifest next update: Wed 22 Apr 2026 13:01:21 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: w2R+gO6ZBFlnWMZkEE3Jv+86/h1fE+WlMuEJOCKQBXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:21:8c:87:a9:7c:17:54:69:93:53:ba:f3:14:70:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Apr 21 13:01:21 2026 GMT
Not After : Apr 22 13:01:21 2026 GMT
Subject: CN=e216f94d9234fe677e4a79af282d2e79b75a2089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:b7:43:27:34:58:da:dd:21:22:ea:1e:24:
45:1e:19:82:4b:38:fb:c4:0a:24:2e:73:3f:f4:92:
3f:95:01:e3:72:58:7f:99:53:e5:b6:7d:58:68:20:
2f:62:fa:87:8b:74:a6:fd:aa:2a:b9:19:8a:d1:38:
21:6d:b6:1d:e7:cb:51:a2:2d:58:cf:cb:53:a1:b7:
cb:9c:81:b7:13:b6:03:4b:7b:33:a4:cf:8f:b5:2a:
16:27:c0:11:fe:af:61:3b:be:14:27:8c:27:22:71:
4a:46:99:a4:21:1a:b9:7f:79:64:c9:05:e4:ae:d8:
f4:67:29:ad:64:72:85:7f:13:99:2b:b8:0b:db:ea:
45:38:e1:ca:db:a1:9e:5c:03:9e:b9:a1:60:c4:dc:
a1:c5:28:7d:e6:d6:fd:e4:cf:42:f6:7c:13:19:59:
dc:ec:15:52:16:72:4b:b0:66:9d:c7:4f:a2:04:22:
23:9f:3a:7d:d6:42:07:e8:73:c0:1b:99:e3:ec:60:
84:0e:f6:55:dd:c4:e4:95:2b:5c:3d:fb:6e:b1:a8:
00:44:5a:53:74:36:f6:05:fd:07:ce:21:ab:3f:19:
fc:92:70:71:4e:92:b8:e5:ac:48:1e:9f:a7:92:89:
93:9a:ba:e4:44:f8:ad:a1:e4:b6:5e:fd:b5:bc:b2:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:F9:4D:92:34:FE:67:7E:4A:79:AF:28:2D:2E:79:B7:5A:20:89
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:07:75:a1:a2:62:14:ca:85:b9:ae:54:07:c5:55:45:b2:
b7:ee:8e:31:d2:fd:e2:78:c8:b8:f0:c7:d4:a1:d4:7d:03:8f:
80:cc:3d:a0:c5:81:00:77:7c:6b:2c:af:0f:88:63:83:6e:17:
83:a5:21:09:0b:29:9c:9f:a3:07:de:bb:4e:e6:d1:5f:6b:37:
e2:a4:bb:9e:87:17:b0:bd:82:d4:23:83:13:60:e4:a8:0c:f6:
5d:85:e1:fb:b1:79:de:f2:6b:0a:2b:91:46:39:f9:1f:90:cd:
4a:54:70:19:55:08:ec:7a:0a:7d:22:9a:52:24:15:40:e3:e6:
be:ec:ec:91:59:bf:eb:86:dd:a2:4f:9e:fe:31:60:67:76:3a:
6c:e8:c1:b4:f0:50:f6:c0:c6:d4:a1:de:74:51:1c:ed:76:23:
cc:92:05:9c:23:27:b1:3a:c1:8e:d3:83:9b:b2:f3:57:09:f5:
47:fa:ea:9f:72:e6:03:9a:91:dc:c1:5f:d6:fd:88:3b:8e:50:
a3:65:17:47:86:a2:c8:4a:e1:10:36:37:6f:7a:a9:28:57:56:
70:3c:15:5d:02:61:c9:b8:99:3b:4a:9e:89:01:6f:0a:3b:16:
ca:8f:c5:0e:d8:d3:82:77:23:80:e5:64:82:ff:8d:71:c2:6f:
f2:e1:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:08:09 2026 by rpki-client