Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: xF3DXs0W0gVp/ChX0j8IHCqIEDqBezLugxEHCtOC8bg=
Subject key identifier: 51:4A:F8:55:A2:D3:63:58:DF:10:1F:10:FF:7D:95:5E:7F:FD:1E:A2
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019D277265AFEC1472097CD2E5674903F921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:41 +0000
Manifest this update: Thu 26 Mar 2026 00:01:41 +0000
Manifest next update: Fri 27 Mar 2026 00:01:41 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: JoPXGpjcfP8HWx4z9SVsN8Ntq+tTZsjmVieATTj0M9k=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:65:af:ec:14:72:09:7c:d2:e5:67:49:03:f9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Mar 26 00:01:41 2026 GMT
Not After : Mar 27 00:01:41 2026 GMT
Subject: CN=514af855a2d36358df101f10ff7d955e7ffd1ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:4a:54:6a:66:52:e3:9d:eb:5d:83:7d:d2:
30:27:6a:23:cd:f6:62:3f:5c:4d:85:b7:ac:65:a1:
79:ff:61:48:79:45:b0:8d:97:ec:08:37:26:34:6b:
2a:67:f2:57:1b:e7:41:fb:b7:7c:cf:73:85:f5:ea:
e2:af:87:ea:bc:af:ff:2f:70:d8:ed:b8:a2:23:f5:
21:ef:f2:83:f4:d2:6e:04:fc:7c:3d:70:ca:02:12:
5a:7f:b0:6d:dd:b0:dc:3e:cb:b5:ae:c5:db:cd:d6:
13:d7:ba:eb:52:08:9d:0c:97:b9:b1:9c:02:fc:04:
f9:dc:ce:9b:fd:4d:7f:df:85:bc:53:c4:79:17:f3:
c6:6e:5a:05:fa:f1:bc:aa:e1:42:bb:68:0b:40:fd:
50:57:53:c9:8f:34:3f:8d:ff:fd:55:cf:29:f1:32:
76:de:1e:f7:04:73:2f:0b:e8:d0:b1:89:5d:b9:b2:
44:f4:d1:4d:58:10:ef:03:94:dc:b9:05:1a:bb:bd:
6f:5d:97:b1:39:b5:ad:cf:7c:6b:3f:28:ca:3e:52:
23:ca:db:7c:9f:c4:d8:45:f1:cb:2c:d6:3b:89:34:
a0:b5:29:41:c3:25:b6:43:7b:64:cc:b3:b5:96:c6:
24:96:65:3b:4a:96:60:34:fc:5e:ce:d6:66:2c:45:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:F8:55:A2:D3:63:58:DF:10:1F:10:FF:7D:95:5E:7F:FD:1E:A2
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:73:ee:d1:22:31:2e:52:fa:6e:a4:f2:f7:d3:56:1d:ab:
c7:9a:4a:75:76:0e:7d:71:f5:e0:ab:79:1c:92:86:90:2e:c3:
ba:05:e5:d7:ec:31:77:db:8e:7b:ea:5c:c0:93:66:4d:7b:76:
18:f3:54:b1:09:3e:35:09:c4:44:ef:03:80:c5:e5:97:61:26:
e4:a9:28:08:43:ec:07:d8:1c:64:49:83:ae:91:5f:8e:e6:73:
22:12:94:c2:37:e9:e6:0d:78:7f:ac:a5:47:09:78:3a:bf:ca:
80:97:ac:c4:c8:0d:6f:fc:4d:63:00:d8:e1:1c:54:db:7b:bb:
da:33:a3:08:d8:4b:02:dd:11:c6:3d:76:0a:a4:0f:52:c7:ff:
d7:65:e7:2e:bc:b3:89:b7:29:19:db:75:a6:bc:53:d8:37:83:
89:b7:22:bf:13:c6:27:70:0a:76:e0:2f:63:20:1a:d5:15:f7:
4d:c8:5c:e0:c1:0a:e4:8b:59:8e:1e:cb:de:04:58:5b:5f:bb:
11:b1:a5:c1:00:d3:c8:68:71:49:2a:85:38:77:b9:9f:3b:94:
65:31:9e:62:1c:a1:ab:6b:d2:9a:d8:53:c1:b7:b1:e8:02:aa:
0c:1b:3e:b4:f8:5b:ac:d7:fb:fa:38:cb:19:36:13:e0:c1:4d:
9d:16:ce:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncmWv7BRyCXzS5WdJA/khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjYwMzI2MDAwMTQxWhcNMjYwMzI3MDAwMTQxWjAzMTEwLwYDVQQD
Eyg1MTRhZjg1NWEyZDM2MzU4ZGYxMDFmMTBmZjdkOTU1ZTdmZmQxZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5KVGpmUuOd612DfdIwJ2ojzfZi
P1xNhbesZaF5/2FIeUWwjZfsCDcmNGsqZ/JXG+dB+7d8z3OF9erir4fqvK//L3DY
7biiI/Uh7/KD9NJuBPx8PXDKAhJaf7Bt3bDcPsu1rsXbzdYT17rrUgidDJe5sZwC
/AT53M6b/U1/34W8U8R5F/PGbloF+vG8quFCu2gLQP1QV1PJjzQ/jf/9Vc8p8TJ2
3h73BHMvC+jQsYldubJE9NFNWBDvA5TcuQUau71vXZexObWtz3xrPyjKPlIjytt8
n8TYRfHLLNY7iTSgtSlBwyW2Q3tkzLO1lsYklmU7SpZgNPxeztZmLEW4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFK+FWi02NY3xAfEP99lV5//R6iMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoNz7tEi
MS5S+m6k8vfTVh2rx5pKdXYOfXH14Kt5HJKGkC7DugXl1+wxd9uOe+pcwJNmTXt2
GPNUsQk+NQnERO8DgMXll2Em5KkoCEPsB9gcZEmDrpFfjuZzIhKUwjfp5g14f6yl
Rwl4Or/KgJesxMgNb/xNYwDY4RxU23u72jOjCNhLAt0Rxj12CqQPUsf/12XnLryz
ibcpGdt1prxT2DeDibcivxPGJ3AKduAvYyAa1RX3Tchc4MEK5ItZjh7L3gRYW1+7
EbGlwQDTyGhxSSqFOHe5nzuUZTGeYhyhq2vSmthTwbex6AKqDBs+tPhbrNf7+jjL
GTYT4MFNnRbOtg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:01 2026 by rpki-client