
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: NEvJ+/EXNicUxapZkP0ROrLl5sbCmWlH7FwbQCwW5lI=
Subject key identifier: 23:EF:CC:9C:6A:3B:2F:2B:AC:67:9F:E2:AD:92:BE:EC:72:98:C6:20
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 01A13D812192130492328A213F44B69DCE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 17A1
Signing time: Thu 15 Oct 2026 03:00:35 +0000
Manifest this update: Thu 15 Oct 2026 03:00:35 +0000
Manifest next update: Fri 16 Oct 2026 03:00:35 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: bXxaSLoFk3vfp8rQfxBcNK61akJjBuhakK3cZ364IYU=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:21:92:13:04:92:32:8a:21:3f:44:b6:9d:ce:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Oct 15 03:00:35 2026 GMT
Not After : Oct 16 03:00:35 2026 GMT
Subject: CN=23efcc9c6a3b2f2bac679fe2ad92beec7298c620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:f8:ab:0d:32:f1:7b:fb:16:3c:b7:77:e4:
a5:4b:d4:28:c0:cc:8c:a4:c4:10:3e:95:1f:36:63:
c2:2d:5e:42:f7:78:d7:85:7a:87:f1:33:42:7b:b5:
3b:33:0e:cd:c8:53:71:2c:86:d6:1c:41:1c:0c:33:
51:12:93:dc:5f:5b:94:78:73:1e:f7:2e:db:a5:f2:
ac:5d:02:9f:3d:ab:40:e2:6f:66:e5:6c:59:3b:87:
68:e5:35:a2:89:a3:7c:c4:58:f8:b4:61:b2:3e:fb:
98:bb:bf:c8:ba:bb:ac:85:1e:b4:bc:26:77:00:57:
12:f2:83:cf:de:4e:8e:8b:43:a3:a7:a4:48:ff:6e:
9d:27:c0:d7:49:bc:d9:06:6c:4f:c7:12:1e:d8:d3:
3e:ac:e0:f6:7a:84:00:13:1f:65:f5:8a:5e:9f:c5:
32:b2:e0:fe:fd:2b:ea:50:b2:01:f8:f6:a3:7a:84:
23:ee:0f:b1:05:f7:60:31:49:ac:d9:2c:3a:a1:3d:
6e:c7:a9:90:5a:60:c3:e9:d3:9d:03:f5:14:6b:8f:
e6:b3:84:25:31:52:81:3d:17:ca:54:1b:48:99:bb:
be:35:9e:34:c3:0d:5e:c3:79:44:6e:58:c3:e8:e2:
21:ad:b6:52:32:a8:3b:93:7a:2a:ba:38:1b:e0:68:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:CC:9C:6A:3B:2F:2B:AC:67:9F:E2:AD:92:BE:EC:72:98:C6:20
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:52:60:b0:01:5a:0f:89:82:01:ad:e4:d5:d3:88:8d:5f:c2:
2b:36:be:6f:c1:57:29:3e:3b:e9:1c:63:84:41:ce:3a:ee:59:
ca:ab:31:af:d4:7b:eb:5f:c5:d6:da:ee:2a:87:f7:65:a2:e0:
9e:f6:4d:2f:d9:13:28:34:8e:d0:a8:7f:bb:46:f0:e0:ef:01:
87:87:d4:80:8b:03:1d:67:5f:19:ca:9a:a8:2a:61:cf:e7:d9:
8f:af:67:0e:05:7b:92:1b:f2:81:60:30:0e:9f:56:e9:41:1d:
ec:ee:9d:ed:8b:c4:df:12:4d:9e:3b:d0:30:85:71:f4:27:f1:
fb:90:d7:70:c9:b7:2a:38:f4:58:43:47:7b:f3:6d:a7:de:73:
1f:12:0e:91:a5:fa:c5:d5:1d:25:a9:ed:01:ac:37:47:02:0a:
71:e3:f4:94:e9:6a:24:3a:8e:1c:79:2f:97:5e:f7:c4:8e:74:
43:91:ed:cb:9b:76:83:97:5b:b4:37:8c:6f:8b:53:54:a5:e3:
18:71:74:56:f5:ff:fd:12:66:7c:0e:c0:68:1a:a5:a4:ef:88:
d2:5a:ac:ce:17:86:ee:fb:74:c0:33:20:87:bf:5d:22:4a:bf:
dc:3d:14:a7:77:cc:06:b9:f3:39:af:f6:9a:39:14:30:9d:42:
f1:27:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:40 2026 by rpki-client