Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: 9Hdx5DVhTwby70dmdhk5GRNu6L41iS2w7mJ7CnXWsAs=
Subject key identifier: B4:46:4D:EB:E9:8B:33:42:B6:F5:4F:CC:A0:09:10:90:9A:BA:FD:FD
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019DCF073F8B3CDB169604058ACB44A11E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0A3B
Signing time: Mon 27 Apr 2026 13:00:51 +0000
Manifest this update: Mon 27 Apr 2026 13:00:51 +0000
Manifest next update: Tue 28 Apr 2026 13:00:51 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 6lQRlYlUQk1rVsUsAAni6gEwOzNSoo9c+AZcL3QOxxM=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:3f:8b:3c:db:16:96:04:05:8a:cb:44:a1:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Apr 27 13:00:51 2026 GMT
Not After : Apr 28 13:00:51 2026 GMT
Subject: CN=b4464debe98b3342b6f54fcca00910909abafdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:3b:fa:40:02:37:8d:10:56:31:0d:e2:3b:
cb:83:01:59:ef:89:37:43:c3:e0:05:05:e8:d3:da:
0a:36:f1:d2:48:f7:7e:d1:99:78:a2:c6:99:8b:68:
6b:98:65:78:ee:10:b5:e3:ad:9e:38:37:95:90:80:
44:d1:3c:90:d6:83:d2:a0:d6:0c:1a:22:a3:9f:8a:
a1:79:fe:c4:17:1b:4e:d1:c0:6c:21:66:4f:e8:36:
de:7e:f1:c1:27:fc:ee:44:a6:25:cf:8b:cc:c1:c8:
72:59:96:2d:d5:cd:b7:65:65:6d:b2:60:1b:c1:7e:
9b:0c:22:d6:5f:a3:fa:f0:36:20:e3:73:94:87:89:
14:53:d3:6d:fe:97:8d:8f:fe:ce:80:79:c3:c1:2b:
a2:e3:24:a4:19:60:1e:c9:64:a7:48:84:40:d1:c2:
bd:22:57:a7:53:49:26:4c:fc:74:73:a7:81:c2:7b:
59:f0:be:ca:fb:e4:9e:8a:32:e5:eb:53:fc:25:3a:
12:c4:83:88:e7:8c:87:44:94:70:ec:48:56:2b:4b:
fd:e8:7c:a5:7f:f4:a7:7e:1e:21:be:3e:59:44:a6:
ac:7c:48:fe:99:fe:26:b5:15:2e:f3:bf:f9:4d:64:
e4:aa:ee:8e:27:11:6f:27:c7:2f:2f:77:84:f4:ee:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:4D:EB:E9:8B:33:42:B6:F5:4F:CC:A0:09:10:90:9A:BA:FD:FD
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:9b:d3:54:52:a3:0e:42:97:d0:77:89:df:fb:15:ea:54:
48:fa:9b:f8:ae:2b:42:e6:13:c0:96:c4:c5:c0:41:69:26:f9:
1c:6f:50:9f:07:bd:f6:ec:28:35:5a:1d:71:30:48:22:6e:b3:
49:10:e4:a9:cf:45:4e:c6:9e:35:e8:44:b9:3d:e5:35:27:a9:
c4:b8:5a:36:09:9f:01:87:b3:aa:5b:5e:8b:12:2a:57:ba:39:
15:23:7f:16:3a:3f:31:fd:a0:84:1c:15:57:e3:0b:45:9f:aa:
8a:72:7b:22:f3:cc:64:dd:6d:fc:7a:a3:5c:30:9d:b5:dd:7e:
7c:06:29:c6:ca:e3:32:db:90:26:6b:bc:a6:8c:98:96:5c:e0:
f9:de:b5:56:fc:9d:1e:51:63:33:49:7d:c2:0b:c8:29:30:ae:
e3:6e:54:b9:a1:df:2c:da:5c:b0:fd:13:96:fc:85:f0:d0:4d:
a1:07:74:5f:f2:10:76:bc:fe:1f:5a:6c:ae:d0:c9:6a:88:08:
c5:cd:62:d6:ea:40:8b:5c:40:03:4a:0e:96:66:f6:27:bb:40:
fe:fb:38:0e:97:f7:61:31:f3:d2:69:33:87:77:b9:46:b1:e5:
a9:03:c4:f0:15:ea:d7:2d:e8:3a:48:60:73:87:4b:3a:96:1e:
a1:b6:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:08:53 2026 by rpki-client