Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: 0qhPz6GcN5u+ca4tXc94PPJWpGNvK3hbwxGoIjyAYVA=
Subject key identifier: 16:15:09:62:D7:44:EB:01:6F:9D:CF:17:85:2A:6D:15:5C:54:93:7A
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019D26CD52169D6D6BE4D1C69E858BE8149E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0F27
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: MfqNhZIx+4+qso8HD5eMHRokhtG+xfrDISlItYFaZJg=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:52:16:9d:6d:6b:e4:d1:c6:9e:85:8b:e8:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=16150962d744eb016f9dcf17852a6d155c54937a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:66:de:9c:b7:de:e5:7b:0d:c1:bc:a4:42:
df:84:72:7d:51:67:8b:94:a2:93:21:0b:0c:dd:a6:
3d:f8:f5:0f:50:be:15:bc:01:e8:ae:a0:2d:ad:35:
c2:62:80:33:dc:29:eb:aa:ae:f2:03:76:18:eb:6b:
c0:55:6b:cb:31:34:27:e5:9e:f4:7e:83:05:6f:f0:
ce:df:f9:e0:6c:c3:02:b1:39:40:95:52:6e:d3:19:
97:2a:6b:fc:2f:f2:0e:68:9c:9e:06:6d:e9:f9:30:
fc:1f:28:94:30:63:db:e6:81:fa:e8:c2:a6:be:9a:
8f:99:be:c8:6e:5e:34:cc:47:fa:ca:d4:1c:99:3f:
16:b8:2e:aa:01:2a:7e:32:40:aa:d4:70:57:7e:12:
15:55:22:6c:06:56:58:a0:2c:c8:6a:e9:52:11:ba:
59:a5:f0:f3:9d:e0:7c:d7:36:75:ec:cf:5a:d5:3c:
5c:54:bb:b3:40:77:1d:88:db:89:45:b0:23:34:5b:
54:b3:23:48:fc:54:bb:40:d9:55:81:c4:3a:81:ef:
47:2e:4f:8c:41:8a:c8:5e:21:d8:ba:63:18:2b:a7:
ea:f7:cb:9d:d3:e5:4e:d4:21:38:65:21:f2:40:d3:
81:f4:27:e1:c7:ec:e4:af:bb:5c:65:9c:21:00:d6:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:09:62:D7:44:EB:01:6F:9D:CF:17:85:2A:6D:15:5C:54:93:7A
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:b6:ce:23:da:5a:03:08:b2:6a:c6:c6:29:f6:b2:75:19:
41:21:ed:31:6e:3f:b4:76:08:44:c3:52:a2:49:d3:20:16:9e:
05:ff:9b:17:ea:ca:74:72:f7:22:0e:68:75:63:43:61:b5:5d:
60:b7:7c:e0:39:aa:32:23:67:ab:44:d1:f5:99:2f:7f:04:c4:
36:a8:6d:44:48:36:45:c7:43:73:ee:e7:be:81:16:ce:cc:b3:
49:87:89:47:ca:ee:c1:92:ed:f4:2c:57:d2:4a:2f:ae:4d:23:
41:4a:5e:e1:9e:80:50:b8:34:75:68:a0:61:62:58:15:1b:f2:
9d:54:95:3e:2e:4d:94:85:1f:4f:0e:b5:d5:01:0f:21:4a:b6:
25:48:a1:a7:9b:8e:61:06:32:e9:02:1d:20:48:04:0a:fe:c3:
a0:64:6d:80:bf:8e:b4:9f:cc:a9:42:7d:1d:88:9c:53:3b:a7:
a8:39:a7:7b:7f:43:ca:d8:5e:69:ea:46:3f:ac:04:51:8b:eb:
1a:b2:52:61:1b:a5:08:f0:e3:49:62:b4:dd:53:a1:d3:82:97:
26:b5:4f:ed:73:7f:00:19:91:73:3b:d5:48:1e:63:3f:26:97:
87:e4:2a:8a:3f:64:ed:a2:b8:26:74:09:d9:b7:4b:c3:3f:9e:
83:3a:48:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVIWnW1r5NHGnoWL6BSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4
ZWRhOTEwHhcNMjYwMzI1MjEwMTIzWhcNMjYwMzI2MjEwMTIzWjAzMTEwLwYDVQQD
EygxNjE1MDk2MmQ3NDRlYjAxNmY5ZGNmMTc4NTJhNmQxNTVjNTQ5MzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUxm3py33uV7DcG8pELfhHJ9UWeL
lKKTIQsM3aY9+PUPUL4VvAHorqAtrTXCYoAz3Cnrqq7yA3YY62vAVWvLMTQn5Z70
foMFb/DO3/ngbMMCsTlAlVJu0xmXKmv8L/IOaJyeBm3p+TD8HyiUMGPb5oH66MKm
vpqPmb7Ibl40zEf6ytQcmT8WuC6qASp+MkCq1HBXfhIVVSJsBlZYoCzIaulSEbpZ
pfDzneB81zZ17M9a1TxcVLuzQHcdiNuJRbAjNFtUsyNI/FS7QNlVgcQ6ge9HLk+M
QYrIXiHYumMYK6fq98ud0+VO1CE4ZSHyQNOB9Cfhx+zkr7tcZZwhANaSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYVCWLXROsBb53PF4UqbRVcVJN6MB8GA1UdIwQY
MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt
ODE5ZGIxNmI2NmVlLzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl
LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9u2ziPa
WgMIsmrGxin2snUZQSHtMW4/tHYIRMNSoknTIBaeBf+bF+rKdHL3Ig5odWNDYbVd
YLd84DmqMiNnq0TR9ZkvfwTENqhtREg2RcdDc+7nvoEWzsyzSYeJR8ruwZLt9CxX
0kovrk0jQUpe4Z6AULg0dWigYWJYFRvynVSVPi5NlIUfTw611QEPIUq2JUihp5uO
YQYy6QIdIEgECv7DoGRtgL+OtJ/MqUJ9HYicUzunqDmne39DytheaepGP6wEUYvr
GrJSYRulCPDjSWK03VOh04KXJrVP7XN/ABmRczvVSB5jPyaXh+Qqij9k7aK4JnQJ
2bdLwz+egzpICg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:10 2026 by rpki-client