Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: v2uOFu9WVNf2TQZFnfQMVRwZSERubv/nSvhMxOS2VBQ=
Subject key identifier: F2:08:AF:9E:29:18:7D:4A:B2:28:D3:93:BB:A1:9C:CC:DC:1D:F3:91
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 019D2703C0AD3233003B929CA42BA8F9D978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: xyMCDIOGRIzen0Tlq4XUeOFQ168xezt3VEEodTMSDUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c0:ad:32:33:00:3b:92:9c:a4:2b:a8:f9:d9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=f208af9e29187d4ab228d393bba19cccdc1df391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4f:05:7f:25:f9:45:38:57:da:6b:20:18:1d:
29:f4:c8:9d:08:18:74:60:4f:3e:a7:07:c5:6c:12:
a6:af:36:c0:b9:68:e0:80:37:4e:40:87:81:55:f7:
05:de:0f:ca:3e:d8:f6:55:ad:1a:01:0a:3b:b0:dd:
c0:6e:98:58:1f:da:77:c5:d8:39:a0:47:e2:3a:cb:
f5:22:41:d6:33:18:aa:69:cd:63:7e:ee:93:48:05:
c7:d8:52:65:b5:09:4e:60:c5:0b:1c:be:4e:45:84:
df:f9:ae:34:f5:27:67:6a:6c:85:db:f7:c3:f1:25:
ee:26:26:93:59:2e:b4:ea:f2:33:8a:9d:1e:a1:00:
3e:57:16:99:17:d3:0d:dd:50:ab:20:74:68:44:95:
54:9c:1a:dc:0e:4d:a8:42:50:70:00:ac:47:4d:da:
5f:3c:be:f2:3e:48:c3:f1:81:12:5e:fd:7b:36:76:
1e:0b:3e:c8:0b:c1:e6:c9:df:91:31:d8:8b:32:f1:
80:1d:64:08:24:bb:e4:a8:f3:36:41:7b:39:9f:ec:
8f:29:28:a7:c4:40:0c:b8:b7:7d:ed:cb:e3:3a:ca:
6f:7e:b0:f9:a5:ab:ac:06:3e:ce:a7:61:34:60:d4:
3d:c1:33:7e:1f:94:a7:52:dd:f9:2d:f5:36:13:02:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:AF:9E:29:18:7D:4A:B2:28:D3:93:BB:A1:9C:CC:DC:1D:F3:91
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:08:2d:39:39:80:9b:03:69:2b:7a:8c:43:eb:09:8d:8b:f9:
39:54:9f:14:6a:33:35:01:cf:bc:5b:21:3e:de:70:09:63:f8:
1e:30:38:a2:7d:1e:b6:0a:19:f9:a0:dc:f0:10:70:87:97:99:
08:94:47:fa:6e:6c:1e:d4:5a:e6:8e:b5:b3:9e:7c:5c:1c:d4:
7e:a8:6c:2a:3f:14:34:1e:c4:a5:57:0a:72:9e:27:f0:0b:1a:
e9:b1:3d:11:02:0b:f0:95:6f:ea:6b:74:dc:ec:46:cd:a0:46:
88:f3:16:de:56:38:9c:92:9b:04:c2:1e:d9:39:c3:86:1b:53:
83:c8:cc:a2:cd:c0:b7:88:28:75:a4:2b:54:34:1e:08:ae:e7:
ad:71:5d:ca:31:6e:02:d3:1a:58:45:3f:b1:80:83:a0:fb:fd:
04:ba:bc:3c:0d:37:50:7c:14:c4:4c:68:a0:cc:35:2f:b0:cd:
ef:1d:6c:3d:3f:8b:26:a2:0d:aa:41:39:23:1b:ad:1e:43:62:
c7:cf:d9:da:83:d4:c4:f7:2a:a0:7f:c6:d4:c9:42:d6:5a:fc:
bd:6f:83:ad:c6:37:aa:09:0c:d3:01:2f:08:a5:1c:bc:aa:36:
a8:44:c7:6f:7d:ec:35:38:3d:cd:ae:e7:b4:bb:92:76:3c:c3:
a5:e2:10:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA8CtMjMAO5KcpCuo+dl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwYTgwMWNmZGI0YjU4MDM1YTVkMDc1YTI5MDRiMmVh
YTVmOTEwHhcNMjYwMzI1MjIwMDUwWhcNMjYwMzI2MjIwMDUwWjAzMTEwLwYDVQQD
EyhmMjA4YWY5ZTI5MTg3ZDRhYjIyOGQzOTNiYmExOWNjY2RjMWRmMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E8FfyX5RThX2msgGB0p9MidCBh0
YE8+pwfFbBKmrzbAuWjggDdOQIeBVfcF3g/KPtj2Va0aAQo7sN3AbphYH9p3xdg5
oEfiOsv1IkHWMxiqac1jfu6TSAXH2FJltQlOYMULHL5ORYTf+a409SdnamyF2/fD
8SXuJiaTWS606vIzip0eoQA+VxaZF9MN3VCrIHRoRJVUnBrcDk2oQlBwAKxHTdpf
PL7yPkjD8YESXv17NnYeCz7IC8Hmyd+RMdiLMvGAHWQIJLvkqPM2QXs5n+yPKSin
xEAMuLd97cvjOspvfrD5pausBj7Op2E0YNQ9wTN+H5SnUt35LfU2EwIGfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIIr54pGH1KsijTk7uhnMzcHfORMB8GA1UdIwQY
MBaAFGnrCoAc/bS1gDWl0HWikEsuql+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzkt
MDBmNTZmNDcyMWMyLzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzktMDBmNTZmNDcyMWMy
LzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwgtOTmA
mwNpK3qMQ+sJjYv5OVSfFGozNQHPvFshPt5wCWP4HjA4on0etgoZ+aDc8BBwh5eZ
CJRH+m5sHtRa5o61s558XBzUfqhsKj8UNB7EpVcKcp4n8Asa6bE9EQIL8JVv6mt0
3OxGzaBGiPMW3lY4nJKbBMIe2TnDhhtTg8jMos3At4godaQrVDQeCK7nrXFdyjFu
AtMaWEU/sYCDoPv9BLq8PA03UHwUxExooMw1L7DN7x1sPT+LJqINqkE5IxutHkNi
x8/Z2oPUxPcqoH/G1MlC1lr8vW+DrcY3qgkM0wEvCKUcvKo2qETHb33sNTg9za7n
tLuSdjzDpeIQ3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:59 2026 by rpki-client