Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: 7eqf+21p7aP8A2FZUID5ORqOi/hMqoM0kI/n7FQrp6s=
Subject key identifier: 59:98:42:D7:FA:E5:56:49:52:5F:87:2F:27:59:C9:63:30:EC:B6:F3
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019D27E0654517FF83838383E0C8898DFF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 14BB
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: RVziop4nM2X8UrjNlUOU1k1vSzMiIwHJcNehe6kg6EU=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:65:45:17:ff:83:83:83:83:e0:c8:89:8d:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=599842d7fae55649525f872f2759c96330ecb6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:aa:32:64:f7:a3:98:3a:2b:5e:0e:36:94:
9d:98:5e:67:3e:cd:48:43:8d:f4:b6:17:fd:bd:c0:
e7:46:42:e0:d3:f2:26:75:5b:3c:5d:05:1f:68:aa:
20:83:d0:6c:a3:68:30:80:e6:f5:03:74:d3:a8:f2:
81:1d:4d:dc:f8:3a:a2:a3:8e:24:f3:c1:8f:5c:67:
97:e3:41:41:4d:a9:78:09:36:a2:06:f0:f2:bb:fe:
9d:1c:aa:4c:02:2a:33:d7:3a:30:9a:9b:92:3f:b9:
8d:b3:08:8b:46:f2:c5:a9:68:cd:0e:ed:84:ed:32:
fc:20:fa:8c:9f:bb:aa:fd:10:48:8b:17:87:29:89:
fe:a8:7d:fb:0e:71:13:a1:b0:96:14:97:35:57:73:
7a:bd:2a:d5:1a:8d:dc:b5:97:61:33:0e:04:7b:6a:
20:05:40:b5:d5:8c:6c:77:53:07:e5:8e:d6:21:85:
8d:cd:5d:56:6e:f8:71:d7:b9:22:27:ab:d0:1c:c3:
94:91:7a:a3:86:a0:2f:b2:43:bb:9e:48:a3:3c:d1:
91:a7:87:be:e1:3d:3e:6e:dc:26:59:a0:ba:56:ce:
96:2b:65:d2:a3:59:43:58:a7:2c:12:52:07:6f:89:
82:06:b4:5f:1d:34:0c:eb:89:77:05:9b:32:40:fb:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:42:D7:FA:E5:56:49:52:5F:87:2F:27:59:C9:63:30:EC:B6:F3
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c3:8f:4a:28:52:a5:8e:e7:b2:89:39:b8:d9:bc:4c:89:e8:
78:92:08:84:05:8c:2b:96:08:4c:53:e6:70:b1:b8:5d:21:f9:
42:32:2b:77:3f:76:a2:63:fa:4c:14:15:ad:0f:1a:52:89:4d:
11:fa:db:72:65:40:80:2e:54:c4:21:ad:df:ee:f8:5a:a2:9e:
d7:8e:b1:69:15:4a:68:93:6f:20:2e:5f:2c:55:54:cb:06:b4:
09:bf:06:e5:f8:e5:14:8c:9e:5b:e8:6f:be:e3:18:54:df:0e:
e0:d9:7f:e7:da:0d:37:cd:47:06:f9:7d:6b:30:57:c9:7f:cf:
7e:58:40:4e:41:a3:81:96:02:44:e0:b1:37:04:90:88:ab:2d:
f5:18:80:40:00:32:52:c6:a4:21:e7:c4:5b:4f:b0:f0:d3:4b:
19:63:3f:c8:bb:23:ba:32:4f:74:d0:61:df:f7:93:ce:41:60:
f9:49:3d:de:5b:b0:0d:d4:88:c6:bb:c9:91:31:52:59:40:46:
54:d1:f4:06:80:2a:91:fb:87:83:34:07:2a:34:b8:df:e4:b7:
4b:af:82:62:a8:eb:2d:5b:83:df:de:e7:2b:93:f5:6d:69:c8:
db:ba:b1:b0:1f:ed:e5:9d:7c:f8:e9:06:11:6d:de:29:1a:45:
cf:a5:06:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GVFF/+Dg4OD4MiJjf+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx
ZjMzMTkwHhcNMjYwMzI2MDIwMTUwWhcNMjYwMzI3MDIwMTUwWjAzMTEwLwYDVQQD
Eyg1OTk4NDJkN2ZhZTU1NjQ5NTI1Zjg3MmYyNzU5Yzk2MzMwZWNiNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA202qMmT3o5g6K14ONpSdmF5nPs1I
Q430thf9vcDnRkLg0/ImdVs8XQUfaKogg9Bso2gwgOb1A3TTqPKBHU3c+Dqio44k
88GPXGeX40FBTal4CTaiBvDyu/6dHKpMAioz1zowmpuSP7mNswiLRvLFqWjNDu2E
7TL8IPqMn7uq/RBIixeHKYn+qH37DnETobCWFJc1V3N6vSrVGo3ctZdhMw4Ee2og
BUC11Yxsd1MH5Y7WIYWNzV1Wbvhx17kiJ6vQHMOUkXqjhqAvskO7nkijPNGRp4e+
4T0+btwmWaC6Vs6WK2XSo1lDWKcsElIHb4mCBrRfHTQM64l3BZsyQPu4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmYQtf65VZJUl+HLydZyWMw7LbzMB8GA1UdIwQY
MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt
YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl
LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcOPSihS
pY7nsok5uNm8TInoeJIIhAWMK5YITFPmcLG4XSH5QjIrdz92omP6TBQVrQ8aUolN
EfrbcmVAgC5UxCGt3+74WqKe146xaRVKaJNvIC5fLFVUywa0Cb8G5fjlFIyeW+hv
vuMYVN8O4Nl/59oNN81HBvl9azBXyX/PflhATkGjgZYCROCxNwSQiKst9RiAQAAy
UsakIefEW0+w8NNLGWM/yLsjujJPdNBh3/eTzkFg+Uk93luwDdSIxrvJkTFSWUBG
VNH0BoAqkfuHgzQHKjS43+S3S6+CYqjrLVuD397nK5P1bWnI27qxsB/t5Z18+OkG
EW3eKRpFz6UGRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:38 2026 by rpki-client