Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: FzYQFFr3zy9kNiHO156YbeF4jVJ8B2fdq3ZxduQ4YqQ=
Subject key identifier: 2D:BD:ED:C1:61:29:AE:40:89:78:16:BB:85:56:32:ED:96:01:D7:6A
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019E1CB52AC1C57428450F4679E60BF6DC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 0831
Signing time: Tue 12 May 2026 15:01:35 +0000
Manifest this update: Tue 12 May 2026 15:01:35 +0000
Manifest next update: Wed 13 May 2026 15:01:35 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: JsOXtebqo5OTsUDIFKZhgItDxfMFQKiYtmA7ZTBaLbM=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:2a:c1:c5:74:28:45:0f:46:79:e6:0b:f6:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: May 12 15:01:35 2026 GMT
Not After : May 13 15:01:35 2026 GMT
Subject: CN=2dbdedc16129ae40897816bb855632ed9601d76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:f5:5d:ce:bf:36:19:80:84:45:fc:a1:95:
51:c6:5c:ad:52:33:a9:17:73:f8:5d:b5:50:d9:2d:
80:24:c2:6d:bc:19:a8:7d:5e:09:53:e7:c8:b2:7f:
6e:a2:a3:36:0d:55:4e:75:a1:dc:45:f4:ec:17:db:
36:32:15:0d:89:91:3b:d1:69:1d:34:f5:3c:f1:96:
06:ed:64:16:6f:17:c6:c5:ff:91:91:d3:e0:d6:84:
7d:30:64:5c:fd:b6:cf:bc:4a:f2:8a:32:4b:ce:e1:
04:19:87:7e:1d:20:58:d2:9b:91:f2:71:48:72:e4:
64:bf:2d:c2:4d:d2:de:1a:86:c5:89:e7:bd:61:3b:
23:bf:b9:71:9a:a6:f8:c7:89:20:60:63:89:00:bb:
26:e9:c4:a2:2c:5b:4e:ff:38:af:de:7d:de:10:d1:
86:5d:a7:47:0f:cc:47:32:34:e0:f3:96:3a:de:f9:
84:2e:0f:f3:e7:70:bc:3d:f4:b9:1b:fb:c6:ad:47:
98:2b:e9:79:21:e4:a3:52:95:9b:9d:63:1d:aa:03:
f3:3e:98:a6:02:76:d7:2d:4a:bf:e3:5f:55:eb:68:
c8:95:c1:9f:60:1a:70:ae:f6:b4:fc:2d:17:e5:4f:
46:0f:32:10:21:55:ff:0a:de:a2:f4:55:1c:bf:bd:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:ED:C1:61:29:AE:40:89:78:16:BB:85:56:32:ED:96:01:D7:6A
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:26:bc:a9:3f:80:1e:dc:e5:47:65:88:38:df:8a:30:3a:
00:ea:cb:40:2b:ac:fb:59:7f:a8:d3:44:fd:90:b0:1c:12:a7:
fc:bb:2d:0f:59:1f:cc:34:96:8d:39:95:13:38:4d:b6:38:48:
e1:af:f0:aa:a6:32:ee:35:a6:6e:2b:75:45:53:7c:8a:8e:50:
54:51:b5:8a:99:c4:2e:4c:79:4d:91:98:b1:a8:fe:89:48:c9:
d9:37:39:40:0f:be:2f:4b:97:89:77:23:f2:58:d9:17:80:f1:
08:80:30:ad:b8:e2:b8:46:1a:be:c3:62:8d:87:ad:1e:fc:8a:
f0:d5:4b:2f:48:10:4e:ff:05:97:0a:c3:bc:55:ce:ea:9f:cd:
0a:1b:d7:5d:35:8c:93:e9:aa:2c:b0:d4:eb:95:8a:cd:65:61:
f5:f1:47:5d:f5:b4:93:5f:92:05:50:11:3a:20:d1:c2:a9:ae:
6c:05:30:16:2e:09:7c:ff:4c:7c:e0:40:1d:d6:80:62:1c:30:
e3:16:0e:b3:61:5d:26:57:cb:d9:06:83:49:f9:f2:2e:63:ea:
e5:8a:72:8a:30:89:8d:51:ce:62:cc:50:d5:4e:25:3d:5e:35:
45:59:64:d9:8e:dd:2e:2b:6c:78:89:c3:07:89:4d:73:97:18:
2d:d0:2a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctSrBxXQoRQ9GeeYL9txLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjYwNTEyMTUwMTM1WhcNMjYwNTEzMTUwMTM1WjAzMTEwLwYDVQQD
EygyZGJkZWRjMTYxMjlhZTQwODk3ODE2YmI4NTU2MzJlZDk2MDFkNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmln1Xc6/NhmAhEX8oZVRxlytUjOp
F3P4XbVQ2S2AJMJtvBmofV4JU+fIsn9uoqM2DVVOdaHcRfTsF9s2MhUNiZE70Wkd
NPU88ZYG7WQWbxfGxf+RkdPg1oR9MGRc/bbPvEryijJLzuEEGYd+HSBY0puR8nFI
cuRkvy3CTdLeGobFiee9YTsjv7lxmqb4x4kgYGOJALsm6cSiLFtO/ziv3n3eENGG
XadHD8xHMjTg85Y63vmELg/z53C8PfS5G/vGrUeYK+l5IeSjUpWbnWMdqgPzPpim
AnbXLUq/419V62jIlcGfYBpwrva0/C0X5U9GDzIQIVX/Ct6i9FUcv73aQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC297cFhKa5AiXgWu4VWMu2WAddqMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF4mvKk/
gB7c5UdliDjfijA6AOrLQCus+1l/qNNE/ZCwHBKn/LstD1kfzDSWjTmVEzhNtjhI
4a/wqqYy7jWmbit1RVN8io5QVFG1ipnELkx5TZGYsaj+iUjJ2Tc5QA++L0uXiXcj
8ljZF4DxCIAwrbjiuEYavsNijYetHvyK8NVLL0gQTv8FlwrDvFXO6p/NChvXXTWM
k+mqLLDU65WKzWVh9fFHXfW0k1+SBVAROiDRwqmubAUwFi4JfP9MfOBAHdaAYhww
4xYOs2FdJlfL2QaDSfnyLmPq5YpyijCJjVHOYsxQ1U4lPV41RVlk2Y7dLitseInD
B4lNc5cYLdAqvQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:11 2026 by rpki-client