Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: 3RSbMlyv6uKivs3Dp0izF0unuEx3Pwt9tYIE1qYdNoU=
Subject key identifier: C7:F4:92:CE:82:03:58:42:60:B8:3B:5E:4D:9C:55:95:1C:69:1D:DD
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 01A13891E9E201AC39A5B12D64C60162D7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 18B0
Signing time: Wed 14 Oct 2026 04:00:49 +0000
Manifest this update: Wed 14 Oct 2026 04:00:49 +0000
Manifest next update: Thu 15 Oct 2026 04:00:49 +0000
Files and hashes: 1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: WLJ2YLd88q1wrek2htQo4WTQRomQ+3jyyPajriSFp/o=)
2: pOIuDBEkoq7VJ1WH33qIfih-ISc.roa (hash: X4NB/WumcFxqMtQqwFAxWEPHaQYbJfAGl8Ne+TeIR0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:91:e9:e2:01:ac:39:a5:b1:2d:64:c6:01:62:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Oct 14 04:00:49 2026 GMT
Not After : Oct 15 04:00:49 2026 GMT
Subject: CN=c7f492ce8203584260b83b5e4d9c55951c691ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:18:a0:51:2d:2c:10:8e:48:95:80:b0:ea:
bf:86:13:f2:14:e0:42:f8:05:7a:b2:87:15:e4:b5:
e4:59:2b:30:c4:84:39:79:3b:32:a8:e1:b6:5b:f1:
89:f4:f2:57:85:86:66:de:f6:af:c7:63:90:7d:91:
1c:d4:12:a8:84:89:0f:15:67:85:09:dc:95:36:b5:
38:94:f8:fe:a0:11:77:90:ba:40:7a:36:db:53:9c:
57:7a:26:ca:64:48:38:1c:78:39:de:4e:75:67:28:
25:fa:3a:69:59:a8:02:42:bd:4f:3f:21:2e:c6:a1:
c4:4a:d3:6c:11:79:3c:92:59:d8:13:ef:6f:bc:3d:
e0:bb:a4:1c:8e:e2:ce:0d:f3:cc:e7:dc:9c:d9:a5:
52:09:b4:e1:f9:0a:ac:f7:84:d8:86:3a:b9:4e:42:
46:65:95:d4:65:37:c9:20:35:1e:23:56:d4:d1:d1:
3a:39:0f:20:4f:9c:c7:1d:9a:2a:7e:d5:1f:25:be:
ad:f1:14:c6:db:a6:92:b7:a6:39:23:f0:cb:0f:13:
e7:8b:95:c5:9b:5d:3f:c1:df:49:2a:d3:2f:07:e0:
17:5d:ac:15:e6:52:39:e3:bc:1d:69:71:19:4e:0a:
94:c3:bb:08:70:80:0b:ba:b1:2f:60:89:ae:af:6f:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:92:CE:82:03:58:42:60:B8:3B:5E:4D:9C:55:95:1C:69:1D:DD
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6d:74:be:d6:07:a2:82:3c:17:d8:0b:5e:81:91:a3:1f:4c:
56:9b:42:17:11:9b:61:24:81:cf:9a:d3:06:59:ed:30:ab:7b:
29:67:f1:1e:56:7f:0d:18:10:38:bb:7f:25:96:8c:6f:88:e0:
64:d7:33:7d:06:51:23:e8:37:e3:55:2d:60:a6:02:f5:9e:d4:
b6:8d:b7:d3:1a:1f:08:3a:65:52:33:c4:b5:99:e0:ad:a0:81:
75:02:9e:f7:8f:86:9a:23:d5:72:44:8b:32:3a:1a:51:7d:1b:
ce:24:63:23:8f:fe:05:1f:f7:4a:62:ec:61:fb:8b:d5:a4:48:
51:63:ac:b7:7c:b8:80:60:ce:19:a4:c5:55:e8:5a:8a:c8:3d:
7e:6f:65:95:87:0a:25:2f:e6:f1:f9:5d:1e:33:2a:56:1d:e5:
e1:c9:78:9b:d2:16:9b:d9:11:02:b2:50:ac:09:55:ad:52:9c:
cb:be:6d:cb:81:93:73:34:46:c6:63:e8:b2:73:14:53:25:a4:
2e:5d:72:02:5e:40:df:1a:ff:a3:f9:2e:89:d7:95:95:a6:0a:
81:5a:35:09:c5:0d:c9:f2:43:a3:70:1e:e5:07:1f:7d:10:a2:
ad:61:c8:a6:4a:be:fb:73:56:ed:87:7b:e3:8b:8f:ba:13:0a:
8d:80:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:52:54 2026 by rpki-client