Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: w/l+90EXKMCmYQpgw12Ikw0Qctl+UJl3rIhjWNZhD9Q=
Subject key identifier: 8D:C1:D9:94:D5:AC:44:24:80:14:95:14:22:84:FA:D1:EA:BD:39:F9
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019E1FB5CFE96686A6831B129D8D8F027F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 049A
Signing time: Wed 13 May 2026 05:01:09 +0000
Manifest this update: Wed 13 May 2026 05:01:09 +0000
Manifest next update: Thu 14 May 2026 05:01:09 +0000
Files and hashes: 1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: 7MWE4HNoPJigzMraWzXUGnjRrV76HJ70Zge838ZEuWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:cf:e9:66:86:a6:83:1b:12:9d:8d:8f:02:7f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: May 13 05:01:09 2026 GMT
Not After : May 14 05:01:09 2026 GMT
Subject: CN=8dc1d994d5ac4424801495142284fad1eabd39f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:e0:b3:b5:23:13:2d:28:b9:99:6f:96:14:
54:0f:12:ed:b0:56:72:33:36:7f:6b:2a:c5:c1:97:
e2:a2:4c:99:0e:a1:0d:a6:bc:f7:75:be:e8:2c:13:
37:04:09:b9:ce:48:b3:a8:00:f2:7b:39:80:cb:46:
92:f0:e4:3b:8c:d2:77:d2:08:f4:9b:87:f8:ba:1e:
b0:1c:d1:5d:75:cb:b4:f8:0c:a4:55:37:26:2d:97:
b8:8a:ff:f6:9a:5d:d6:a8:72:d4:86:ba:fa:a1:23:
6b:0c:fa:7d:40:8e:fd:43:8d:9b:c5:5b:26:f6:4f:
cd:bd:51:3b:a2:14:ea:f5:5b:31:8f:5c:fb:00:e5:
5e:ae:13:a4:32:b0:3a:12:4e:d0:ee:51:4d:74:c0:
d8:03:cd:08:d5:51:8d:93:c5:3e:3c:70:82:d0:58:
bb:66:52:7c:5b:51:41:0c:a7:3a:52:05:00:01:13:
8c:99:2a:74:e4:7f:4e:30:12:e2:25:75:9f:fe:d1:
6c:e6:48:51:66:ce:24:17:f6:b2:e2:1c:ac:2b:3e:
a3:69:25:13:1e:f1:33:55:8a:54:bc:cf:f8:5e:e5:
95:21:14:c7:a1:8d:73:85:4f:72:0d:d2:85:75:d7:
9b:3f:ae:94:64:97:3d:c0:f0:a9:8a:34:c8:bc:9d:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:D9:94:D5:AC:44:24:80:14:95:14:22:84:FA:D1:EA:BD:39:F9
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:99:df:48:77:cd:4e:07:cf:02:41:38:3f:62:dd:ca:ba:ee:
c9:e6:fa:fa:29:b2:b3:74:41:da:26:03:c3:72:c9:79:63:7c:
99:dd:8c:08:60:74:97:a8:e1:b0:85:8c:69:9c:68:8a:6e:74:
7e:49:af:aa:b1:1b:db:14:fa:49:ac:01:41:1e:7a:3a:c2:61:
96:c9:5d:b6:67:4b:8e:58:42:4f:4e:e2:e7:5a:02:8c:3f:38:
36:47:a8:4e:74:f8:d4:96:ed:48:16:4f:ba:a6:6c:32:7b:a3:
53:8b:32:1e:33:b9:f4:f4:0c:3d:7d:e0:2a:2e:bd:6c:14:2e:
0f:05:57:d5:7b:7a:1d:28:31:01:55:ae:9e:d5:fe:5e:10:b3:
72:37:7c:08:84:39:14:2b:c5:33:4e:39:c7:dc:66:fa:52:e0:
53:c6:10:13:58:2f:d8:73:4d:65:e8:70:d1:a2:9b:c9:39:7e:
8c:09:b2:76:21:ad:36:63:c9:bf:e1:d9:4e:73:94:86:94:25:
87:0b:52:a4:e1:e3:70:10:69:73:47:a2:d8:01:18:49:7c:6f:
b1:3b:59:8d:f6:64:34:34:91:b3:36:0c:3c:86:9e:17:d1:51:
fe:65:00:49:95:4f:55:51:20:a8:7e:e0:3b:26:59:a1:2f:1f:
08:7a:ae:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftc/pZoamgxsSnY2PAn97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjZiOWU4ZGY1ZGE1Njk4NTRjNjFhZjcxNGRiMzAzNDky
YjYyZjEwHhcNMjYwNTEzMDUwMTA5WhcNMjYwNTE0MDUwMTA5WjAzMTEwLwYDVQQD
Eyg4ZGMxZDk5NGQ1YWM0NDI0ODAxNDk1MTQyMjg0ZmFkMWVhYmQzOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB/gs7UjEy0ouZlvlhRUDxLtsFZy
MzZ/ayrFwZfiokyZDqENprz3db7oLBM3BAm5zkizqADyezmAy0aS8OQ7jNJ30gj0
m4f4uh6wHNFddcu0+AykVTcmLZe4iv/2ml3WqHLUhrr6oSNrDPp9QI79Q42bxVsm
9k/NvVE7ohTq9Vsxj1z7AOVerhOkMrA6Ek7Q7lFNdMDYA80I1VGNk8U+PHCC0Fi7
ZlJ8W1FBDKc6UgUAAROMmSp05H9OMBLiJXWf/tFs5khRZs4kF/ay4hysKz6jaSUT
HvEzVYpUvM/4XuWVIRTHoY1zhU9yDdKFddebP66UZJc9wPCpijTIvJ1gaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3B2ZTVrEQkgBSVFCKE+tHqvTn5MB8GA1UdIwQY
MBaAFGomuejfXaVphUxhr3FNswNJK2LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzkt
MDUxYjAwZjg1OGVkLzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzktMDUxYjAwZjg1OGVk
LzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpnfSHfN
TgfPAkE4P2Ldyrruyeb6+imys3RB2iYDw3LJeWN8md2MCGB0l6jhsIWMaZxoim50
fkmvqrEb2xT6SawBQR56OsJhlsldtmdLjlhCT07i51oCjD84NkeoTnT41JbtSBZP
uqZsMnujU4syHjO59PQMPX3gKi69bBQuDwVX1Xt6HSgxAVWuntX+XhCzcjd8CIQ5
FCvFM045x9xm+lLgU8YQE1gv2HNNZehw0aKbyTl+jAmydiGtNmPJv+HZTnOUhpQl
hwtSpOHjcBBpc0ei2AEYSXxvsTtZjfZkNDSRszYMPIaeF9FR/mUASZVPVVEgqH7g
OyZZoS8fCHqu3w==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:11 2026 by rpki-client