Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: +FH88vlEbfrW3Y/9MK6uvXPZQjpZ4AAc+brdbgnSjZ0=
Subject key identifier: 81:38:81:58:CB:BE:34:C5:D1:57:85:AF:B3:94:60:C4:4C:7E:69:8B
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019DCFE34DD9DBB9FE3F9D187DB89F05287D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0CD6
Signing time: Mon 27 Apr 2026 17:01:13 +0000
Manifest this update: Mon 27 Apr 2026 17:01:13 +0000
Manifest next update: Tue 28 Apr 2026 17:01:13 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: +fviO8Bk+W43E8gFgFtWFb4+FTGYGLjCkRDzGtkiFAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:4d:d9:db:b9:fe:3f:9d:18:7d:b8:9f:05:28:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Apr 27 17:01:13 2026 GMT
Not After : Apr 28 17:01:13 2026 GMT
Subject: CN=81388158cbbe34c5d15785afb39460c44c7e698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:27:43:98:34:47:c5:b7:0f:c9:89:5b:95:
20:a3:9f:c2:b4:dd:ee:42:d4:3a:aa:8c:5c:cf:80:
80:70:c2:fa:bf:f1:01:f5:c5:19:ce:0b:b6:0f:ca:
39:7b:b4:29:ea:78:65:56:62:fe:fe:26:3c:e9:a7:
b9:05:6c:24:fe:1b:fd:a0:35:a2:12:14:af:3b:9e:
63:82:f8:4a:df:37:6a:a2:d4:ec:a9:44:bb:4a:30:
69:f3:1c:0b:21:c3:c6:51:95:f5:9a:3e:32:75:f8:
ac:cd:c4:45:d2:ad:dc:e8:46:85:4d:6b:bf:51:04:
4f:a1:2a:8f:06:30:42:7a:a5:11:26:3b:b8:2a:25:
ab:ef:43:7a:c4:07:56:bd:c0:5e:aa:93:4b:87:4b:
9f:13:93:76:74:c5:95:a7:ef:1f:2f:b3:c3:e4:d7:
41:c6:fd:62:83:68:8d:74:05:40:19:83:5b:c0:e2:
0f:f5:4b:20:00:0a:75:d1:05:cf:d6:df:2d:d4:86:
29:34:ae:09:67:a2:3a:34:22:02:cb:9f:73:4e:c5:
56:12:68:34:6a:6e:81:4a:a6:03:2f:32:88:d5:65:
d2:7b:6d:f3:c8:cd:b6:a1:d5:f1:30:57:b6:1d:26:
c5:2e:b3:0d:64:cc:f0:65:f1:47:74:f1:7a:d6:34:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:81:58:CB:BE:34:C5:D1:57:85:AF:B3:94:60:C4:4C:7E:69:8B
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dc:78:f2:69:b1:5f:5c:91:5f:41:ae:54:5a:5d:3b:db:58:
85:3b:91:5d:11:07:3d:52:b3:84:bf:2b:4a:8f:0f:4d:7d:55:
7d:ee:ba:4f:7a:9a:c1:69:7e:8c:a9:68:f2:ad:a1:75:08:dd:
b7:a8:78:61:a6:f7:e0:ae:7e:4c:f1:4d:1e:58:f8:f9:ba:2a:
ba:3a:5a:4e:6d:91:da:6a:3c:94:43:06:d1:df:b9:71:04:c3:
8d:57:5a:48:06:de:03:fd:02:30:69:1f:15:a8:87:36:88:0d:
48:b4:0c:99:28:ad:a8:3a:22:e7:84:8f:ce:f3:5f:eb:9c:2d:
7d:d8:71:ec:64:30:74:ea:d2:d5:02:35:f0:0a:be:eb:20:b5:
60:12:e7:88:06:85:96:63:73:62:6a:a0:3a:ef:bd:4e:7b:f3:
10:18:0c:fc:2c:19:30:c9:a5:98:91:0f:90:c3:20:f2:b2:6b:
ad:5c:fe:28:43:aa:27:52:4d:81:00:1c:b9:e3:d5:ff:51:2a:
a0:09:88:cd:f9:ca:e9:af:46:be:a8:bc:4a:4d:67:9d:1b:18:
77:69:e3:47:db:8b:84:de:dc:40:7b:e7:aa:52:5e:90:91:a0:
82:c8:96:35:c5:6c:61:6e:68:29:cf:7a:9c:a7:d7:a7:2a:3f:
3f:51:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:43:49 2026 by rpki-client