Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: BPjEtJwJtT89wmCIbezxTK62Dg6vnxrKbHS2uB6O3XE=
Subject key identifier: 58:FD:D9:9A:12:C6:84:D4:6F:FA:AB:DF:3D:BC:C6:75:7C:56:EB:DC
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 019DCF75D875C8030E6DCE1C5C402107C39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 18EB
Signing time: Mon 27 Apr 2026 15:01:39 +0000
Manifest this update: Mon 27 Apr 2026 15:01:39 +0000
Manifest next update: Tue 28 Apr 2026 15:01:39 +0000
Files and hashes: 1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
3: SFvSBBGYgzySNxIeXKtpNZOhU9Y.asa (hash: xMj44N87N0PalBE7ni1eUf0bLqqLwE4xJyf40B4J5dg=)
4: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
5: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: FXgVVPqUP3HvNRBonXhtn/7Lp9ktbxwls2a+FKcYnW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:d8:75:c8:03:0e:6d:ce:1c:5c:40:21:07:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Apr 27 15:01:39 2026 GMT
Not After : Apr 28 15:01:39 2026 GMT
Subject: CN=58fdd99a12c684d46ffaabdf3dbcc6757c56ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:06:bd:c9:eb:a4:89:9c:9f:b9:bc:6c:eb:
79:86:ce:04:74:d2:62:35:36:50:fc:84:fc:02:6c:
9a:90:a5:c7:9a:38:99:4d:4e:d2:92:d5:85:45:a4:
bc:1d:39:79:1d:5e:fc:af:e0:89:3d:9a:49:f6:df:
92:4d:31:69:c2:4c:20:52:26:78:57:a4:06:0a:92:
a1:17:60:c8:0c:f5:8f:16:ef:6c:d1:44:49:c4:b2:
64:b5:48:32:59:73:d9:2f:f4:2a:5d:f3:2d:e5:44:
d1:e5:ef:26:0a:28:4b:2a:d2:45:f9:db:dc:22:5c:
23:94:e2:5c:e6:0a:48:fe:f7:d8:e9:0a:7b:df:19:
25:9a:be:6f:bc:df:32:0b:35:23:ea:61:b7:2d:4a:
ba:c2:b9:4e:ab:80:fc:bc:b1:ae:0e:17:06:1d:65:
7d:2a:3e:3a:31:db:65:fe:3d:ad:39:29:93:f3:46:
ca:f0:5f:34:fe:40:24:ae:df:b9:f6:41:e2:c4:95:
c0:91:6b:5f:d8:31:3c:b1:9d:8a:40:4a:7b:c9:48:
25:48:1c:90:e5:ef:0b:b4:bb:fe:b2:67:ec:f5:e1:
a7:9e:b2:0f:46:35:69:1e:ab:55:68:ca:db:d4:d3:
ea:be:80:ea:42:f7:b4:08:87:26:2d:24:65:37:5e:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:D9:9A:12:C6:84:D4:6F:FA:AB:DF:3D:BC:C6:75:7C:56:EB:DC
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f1:4d:d8:15:ea:52:38:d7:10:62:d1:0d:88:51:34:ff:5c:
e5:24:cd:3e:54:f2:d2:22:70:cd:d4:88:76:b4:d1:bb:0d:be:
6a:25:ca:2d:97:4f:17:44:60:93:ce:82:b4:bf:3d:ce:9d:ac:
7e:4b:07:64:c9:00:6b:cd:27:b9:2b:e5:f9:07:dc:23:38:2b:
55:ee:82:ee:11:03:ca:03:23:bf:b0:2d:9a:13:a3:71:19:d1:
58:7e:e3:0d:42:92:65:2b:10:42:0e:29:54:21:c7:87:67:c9:
d3:0a:ff:d4:69:51:42:dc:03:bd:ab:17:60:b8:d0:0d:e6:d1:
7a:ce:2a:e1:bf:15:ba:f3:35:56:dc:bf:7b:bd:2f:9d:bc:14:
d0:7e:68:b3:6f:da:18:ba:9c:40:e8:0b:57:6b:00:88:ba:ec:
93:a6:21:52:e4:02:32:ad:c8:8e:65:24:bc:2c:e1:38:50:12:
c3:bb:96:43:bd:ce:8f:6a:87:db:89:96:71:c0:7e:b8:3c:ec:
15:4d:c6:e4:65:93:ee:89:69:54:3a:7a:da:c0:ff:58:16:12:
36:1a:da:68:03:41:e0:dd:c7:b3:34:6d:32:2d:3d:8d:e8:c3:
7e:39:1a:2b:cd:a9:00:c9:0b:47:74:a9:17:3f:eb:86:a4:40:
14:fb:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:32:07 2026 by rpki-client