Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: 1rgt+6c5itKGkv1qP4qeMSV9d0jx45XeBm6+jrfCQU8=
Subject key identifier: BE:5D:2D:1B:A9:7E:46:F6:60:63:FE:37:22:85:E0:DE:61:F8:F3:0F
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 01A0CA4707931D48C3D37707CF095CFC192E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:47 +0000
Manifest this update: Tue 22 Sep 2026 18:00:47 +0000
Manifest next update: Wed 23 Sep 2026 18:00:47 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: enxgeuqkTwXO9ghf9G0+i3ViYHaFbbP/zSRU8i3efss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:07:93:1d:48:c3:d3:77:07:cf:09:5c:fc:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Sep 22 18:00:47 2026 GMT
Not After : Sep 23 18:00:47 2026 GMT
Subject: CN=be5d2d1ba97e46f66063fe372285e0de61f8f30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:0a:a9:ea:f0:64:ce:45:a1:9c:d7:2d:ba:
c5:3c:15:5a:32:ec:93:d9:92:ef:ce:43:a4:84:19:
29:a8:55:58:ad:9f:d6:ca:ff:5e:c1:9b:e5:1f:92:
68:9b:aa:e6:94:98:9c:f4:78:54:b9:e7:4e:c8:b2:
0a:34:e1:35:ad:a9:41:88:9c:ad:c5:a1:5c:16:f6:
42:26:ac:69:dc:55:e7:24:bb:64:4b:0a:9f:e4:da:
79:ab:94:79:fd:7b:67:35:d8:05:46:f3:11:39:ef:
89:b8:2f:1f:58:60:40:5c:97:48:1a:39:c6:54:6d:
47:bc:aa:ad:fd:ff:9a:92:d1:d6:d1:3e:b9:81:c4:
ee:f6:52:fb:c2:5f:08:ff:b3:f2:c8:5d:fb:9e:2c:
ef:ba:ac:2c:25:5a:21:91:0a:cb:8a:a1:e6:43:28:
b8:32:12:5a:e7:bd:65:47:b5:5f:2c:29:e9:db:ea:
76:24:f4:3d:1f:68:1c:64:2e:ab:8e:fa:d8:c3:c3:
90:bd:45:2d:6d:1a:5f:ac:e0:ac:ea:8c:ea:bf:c9:
02:50:27:2f:01:10:62:02:09:c9:64:08:67:19:96:
f6:c8:86:e6:c5:92:7d:94:33:f9:b8:4c:ae:88:75:
e4:3d:81:f8:ab:62:5f:b5:0e:1d:85:e2:88:ae:e7:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:2D:1B:A9:7E:46:F6:60:63:FE:37:22:85:E0:DE:61:F8:F3:0F
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:38:6a:d5:1f:d3:7c:49:33:46:5a:d3:c0:cf:5e:2a:b7:37:
9c:1c:24:b1:c0:b6:4c:88:d3:3d:83:f6:14:65:63:ba:8e:06:
3e:61:0a:98:ce:85:c9:c2:de:2f:0a:da:07:18:4f:7a:08:bc:
09:8c:e1:30:81:f1:85:aa:d3:f0:da:a7:b3:89:81:1d:9c:a3:
3b:32:cc:1a:98:19:e4:88:67:5e:b5:fa:d7:1c:8c:03:3e:6f:
8e:f7:d1:86:61:1d:e6:a0:91:f3:c3:19:ab:1e:d8:f0:89:97:
eb:98:58:0f:bd:c3:6b:d2:75:4d:f4:1d:90:57:a2:0a:55:b2:
49:b6:72:7c:14:0b:94:43:f1:f4:f6:15:a3:02:93:d0:3e:46:
8f:62:e0:a0:5c:59:29:44:14:ff:15:8f:11:a9:8a:e2:ee:88:
bb:2a:a2:fc:a9:72:1f:92:32:59:69:56:33:93:5f:0a:65:d4:
53:fd:2c:78:21:98:c0:ce:3b:0c:4d:bb:a0:e2:e5:26:e1:b1:
a7:79:1d:8c:71:de:9d:c9:b5:be:54:06:9c:55:44:f5:eb:00:
46:cd:88:ad:01:72:82:bd:0e:65:12:a2:db:21:db:a6:9b:3f:
28:f2:f4:ae:2e:cf:85:11:22:b8:62:08:6a:e3:bc:0b:20:f2:
e7:e4:bf:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRweTHUjD03cHzwlc/BkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTk4NGJlODhjYWI4MzBhZWI4MWQwZWQ4NzY4ZjQzMzEz
NWQ1OWEwHhcNMjYwOTIyMTgwMDQ3WhcNMjYwOTIzMTgwMDQ3WjAzMTEwLwYDVQQD
EyhiZTVkMmQxYmE5N2U0NmY2NjA2M2ZlMzcyMjg1ZTBkZTYxZjhmMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFMKqerwZM5FoZzXLbrFPBVaMuyT
2ZLvzkOkhBkpqFVYrZ/Wyv9ewZvlH5Jom6rmlJic9HhUuedOyLIKNOE1ralBiJyt
xaFcFvZCJqxp3FXnJLtkSwqf5Np5q5R5/XtnNdgFRvMROe+JuC8fWGBAXJdIGjnG
VG1HvKqt/f+aktHW0T65gcTu9lL7wl8I/7PyyF37nizvuqwsJVohkQrLiqHmQyi4
MhJa571lR7VfLCnp2+p2JPQ9H2gcZC6rjvrYw8OQvUUtbRpfrOCs6ozqv8kCUCcv
ARBiAgnJZAhnGZb2yIbmxZJ9lDP5uEyuiHXkPYH4q2JftQ4dheKIrucl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5dLRupfkb2YGP+NyKF4N5h+PMPMB8GA1UdIwQY
MBaAFAHphL6IyrgwrrgdDth2j0MxNdWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVtRXZvakt1REN1dUIwTzJIYVBRekUxMVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt
NjdhOThlMjU2Y2M3LzEvQWVtRXZvakt1REN1dUIwTzJIYVBRekUxMVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3
LzEvQWVtRXZvakt1REN1dUIwTzJIYVBRekUxMVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjhq1R/T
fEkzRlrTwM9eKrc3nBwkscC2TIjTPYP2FGVjuo4GPmEKmM6FycLeLwraBxhPegi8
CYzhMIHxharT8Nqns4mBHZyjOzLMGpgZ5IhnXrX61xyMAz5vjvfRhmEd5qCR88MZ
qx7Y8ImX65hYD73Da9J1TfQdkFeiClWySbZyfBQLlEPx9PYVowKT0D5Gj2LgoFxZ
KUQU/xWPEamK4u6Iuyqi/KlyH5IyWWlWM5NfCmXUU/0seCGYwM47DE27oOLlJuGx
p3kdjHHencm1vlQGnFVE9esARs2IrQFygr0OZRKi2yHbpps/KPL0ri7PhREiuGII
auO8CyDy5+S/Ww==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:10:13 2026 by rpki-client