Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: ZDC9xkG5BQDHcjI8sSpl42kWlTDovTQdW5aJ3qx1QTU=
Subject key identifier: 91:DF:FC:76:26:08:C6:9B:ED:81:7C:D5:A7:19:03:DA:E1:86:32:0D
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 019D2961AD16538622E72A7D9A1F7F73FE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 09:02:40 +0000
Manifest this update: Thu 26 Mar 2026 09:02:40 +0000
Manifest next update: Fri 27 Mar 2026 09:02:40 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: qtKPMn21LVggKBE5GBLoOOOivmTe82IpCmEWHVBB+us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ad:16:53:86:22:e7:2a:7d:9a:1f:7f:73:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Mar 26 09:02:40 2026 GMT
Not After : Mar 27 09:02:40 2026 GMT
Subject: CN=91dffc762608c69bed817cd5a71903dae186320d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:e5:cf:de:a8:49:9a:36:ea:d1:ef:d0:43:
8b:89:d7:b7:30:46:3d:88:55:65:5c:1d:8d:ab:c6:
d3:35:2d:85:00:96:e0:d4:e5:9a:59:5f:c8:1c:f9:
e7:af:07:51:a0:fb:6f:15:f0:a5:99:1a:e3:19:48:
3f:32:06:35:c1:0b:94:26:b7:81:8b:3f:02:61:1f:
c2:f9:3b:f9:0a:6b:29:b3:ae:49:63:b5:bb:f6:24:
b0:0f:4e:c7:85:ae:0b:c6:9a:11:d5:46:56:97:fd:
2f:32:01:a8:63:f7:91:0b:08:af:c6:0c:1b:30:4e:
74:4e:20:14:16:a7:a5:75:57:d5:bf:56:b9:8c:ab:
cc:13:b3:a6:b5:d1:ac:39:64:47:00:c0:e6:81:ab:
ea:31:6f:7a:0e:f7:53:73:76:fd:1d:bd:25:b2:91:
88:63:f7:e7:21:81:18:77:e8:28:32:2c:8c:d0:b5:
e7:0e:62:04:f7:ae:45:3d:d4:e8:a5:9c:6c:d4:ad:
b4:d4:2e:19:de:a9:6d:30:4a:f7:29:9c:02:14:26:
8d:04:ef:da:de:2c:89:74:17:eb:ce:c6:25:a9:21:
15:ca:7e:cf:aa:f0:51:d7:7b:b2:56:7f:05:9c:3f:
b6:48:31:2d:8c:83:40:4d:0f:c7:af:49:dd:37:14:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:FC:76:26:08:C6:9B:ED:81:7C:D5:A7:19:03:DA:E1:86:32:0D
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e0:bc:07:41:d9:65:0a:f1:47:f2:67:bb:d1:aa:9c:d6:9b:
5e:f4:95:0e:6a:b4:bd:1c:fe:15:85:07:fe:f9:fb:fc:f1:2a:
3a:74:04:87:f5:d1:9d:0c:a3:4e:8f:dd:de:c9:36:45:39:8b:
31:1b:b7:e2:05:fb:7f:a0:4c:94:09:f6:b6:cb:57:b7:32:c4:
65:54:fa:ca:c7:8e:c5:f4:ec:0d:d0:94:d1:e6:21:5e:1b:6a:
1d:8c:fd:ff:b2:e1:06:40:22:fd:f1:a3:39:07:c0:06:2d:8d:
9f:6a:7e:01:1e:b5:df:6b:ec:1e:2b:df:35:ee:89:17:bb:8f:
6e:af:ee:61:4a:e0:67:43:3d:9c:d8:48:c8:a9:66:25:b0:4e:
28:9b:31:08:cd:03:dc:62:9a:44:65:d3:01:db:2a:79:55:21:
8b:15:f2:2d:15:ad:92:ed:09:24:3c:09:87:01:5c:66:8a:c7:
4c:75:4d:9f:63:ed:b4:3c:37:88:1d:56:72:29:f1:c3:9d:0b:
7d:4d:f7:ac:dc:5c:ef:a7:b0:70:6c:5b:d3:df:14:33:30:ab:
3a:3b:44:81:d6:7a:32:79:51:6d:cf:3b:5f:e4:36:5c:c4:18:
92:16:34:6d:b7:6f:01:2e:8e:18:f5:39:41:d9:63:b1:a8:11:
d7:ba:a9:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYa0WU4Yi5yp9mh9/c/5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzIzMTkzNzEwNGIyNjkwMDdhNmNhODNjN2ZkOTI5ZWIz
OWY0NzcwHhcNMjYwMzI2MDkwMjQwWhcNMjYwMzI3MDkwMjQwWjAzMTEwLwYDVQQD
Eyg5MWRmZmM3NjI2MDhjNjliZWQ4MTdjZDVhNzE5MDNkYWUxODYzMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04/lz96oSZo26tHv0EOLide3MEY9
iFVlXB2Nq8bTNS2FAJbg1OWaWV/IHPnnrwdRoPtvFfClmRrjGUg/MgY1wQuUJreB
iz8CYR/C+Tv5Cmsps65JY7W79iSwD07Hha4LxpoR1UZWl/0vMgGoY/eRCwivxgwb
ME50TiAUFqeldVfVv1a5jKvME7OmtdGsOWRHAMDmgavqMW96DvdTc3b9Hb0lspGI
Y/fnIYEYd+goMiyM0LXnDmIE965FPdTopZxs1K201C4Z3qltMEr3KZwCFCaNBO/a
3iyJdBfrzsYlqSEVyn7PqvBR13uyVn8FnD+2SDEtjINATQ/Hr0ndNxRiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHf/HYmCMab7YF81acZA9rhhjINMB8GA1UdIwQY
MBaAFK5yMZNxBLJpAHpsqDx/2SnrOfR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMt
ZjM1ZjBjNmM0NmE5LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMtZjM1ZjBjNmM0NmE5
LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneC8B0HZ
ZQrxR/Jnu9GqnNabXvSVDmq0vRz+FYUH/vn7/PEqOnQEh/XRnQyjTo/d3sk2RTmL
MRu34gX7f6BMlAn2tstXtzLEZVT6yseOxfTsDdCU0eYhXhtqHYz9/7LhBkAi/fGj
OQfABi2Nn2p+AR6132vsHivfNe6JF7uPbq/uYUrgZ0M9nNhIyKlmJbBOKJsxCM0D
3GKaRGXTAdsqeVUhixXyLRWtku0JJDwJhwFcZorHTHVNn2PttDw3iB1Wcinxw50L
fU33rNxc76ewcGxb098UMzCrOjtEgdZ6MnlRbc87X+Q2XMQYkhY0bbdvAS6OGPU5
QdljsagR17qpDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:35 2026 by rpki-client