Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: y4xaPhjHW9Z7Z3GoFgKzS9t6NWMs/4Y4JJ5PwY4fh5Y=
Subject key identifier: C7:19:B8:AA:55:62:65:B3:FE:9A:94:31:B7:DE:D4:59:8B:67:15:EA
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 019D2961959CBBDDB3B9940BC9DAC62042B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 0A90
Signing time: Thu 26 Mar 2026 09:02:34 +0000
Manifest this update: Thu 26 Mar 2026 09:02:34 +0000
Manifest next update: Fri 27 Mar 2026 09:02:34 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: gvkZZUMTQsSFwagmVbhdFFI/RJSrj9xIMAiXZ3Gk9O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:95:9c:bb:dd:b3:b9:94:0b:c9:da:c6:20:42:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Mar 26 09:02:34 2026 GMT
Not After : Mar 27 09:02:34 2026 GMT
Subject: CN=c719b8aa556265b3fe9a9431b7ded4598b6715ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:72:8c:27:ca:42:9b:07:b7:29:55:70:c3:
f9:f3:c2:d7:0a:78:a0:cd:b6:47:b5:63:3e:4c:5f:
a7:66:9e:d7:d1:84:c8:72:1f:68:69:d5:4b:af:fa:
cd:68:0a:28:73:83:d4:fd:25:21:22:e5:5c:b1:75:
4a:34:ff:69:32:ce:b3:18:67:0d:6a:e0:2f:3f:76:
6d:fa:3c:e8:45:a4:d7:ab:d0:a5:5b:f4:df:95:e6:
9f:ad:db:d8:05:c1:a5:9f:15:f5:91:19:ad:7c:e2:
d0:c5:3b:f5:54:8d:d4:b2:8f:dc:d3:6a:34:b0:3e:
31:4b:73:03:4a:2b:43:d2:5d:36:fa:bb:d9:86:ee:
e0:26:d1:f6:0b:52:2b:d8:c3:35:40:e1:8b:c7:65:
9a:0e:21:69:d3:bd:f0:80:da:64:38:de:8b:a9:40:
52:1d:d5:d1:4a:18:8b:d5:90:36:df:87:4f:ed:a6:
0e:ee:62:4a:2c:f6:19:a1:22:05:58:c1:db:64:3b:
39:2a:bf:81:07:f4:bb:7f:f4:14:0e:bc:46:5a:8d:
7e:ad:7e:00:9a:73:10:de:44:61:c7:ba:5b:ee:75:
25:06:ef:01:6e:06:1d:b4:95:8e:aa:25:22:3e:d1:
2f:9b:2d:fc:73:96:f6:66:17:bd:42:9b:71:c1:3a:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:B8:AA:55:62:65:B3:FE:9A:94:31:B7:DE:D4:59:8B:67:15:EA
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e6:a8:cd:91:6b:75:f3:a9:f7:c6:a5:22:ed:e4:93:29:0e:
5c:16:d3:12:5f:87:5e:ba:55:2d:e5:6a:6f:04:b3:40:89:31:
f7:4c:3f:13:e9:2d:5f:15:ee:a9:97:2b:94:31:31:2e:dc:47:
46:b1:8d:e4:1f:d3:da:8f:61:52:d6:ee:c1:1d:c5:46:3c:bb:
61:9b:d4:22:21:cc:52:df:6d:df:03:5b:1b:e6:a8:00:3c:c0:
66:1b:1a:3d:4e:c4:e8:8a:f2:ad:86:4b:e4:f6:b8:68:95:78:
38:da:d0:91:f2:21:22:c1:30:7c:1d:a3:95:12:6e:3c:ac:f2:
e2:d9:6a:15:eb:7c:b3:e3:54:2b:08:b9:c3:41:98:30:48:a9:
ba:60:7d:50:a8:ee:b2:91:cf:e3:f6:e1:7d:d8:09:51:b3:98:
79:11:9f:36:d8:02:6b:a3:6c:c6:d6:15:b6:a8:f5:bf:f1:90:
61:87:f3:44:a4:73:2a:48:ed:f4:65:0d:82:22:f5:39:80:0e:
11:f6:a2:26:76:27:39:3f:e4:53:c0:b0:8b:a7:ce:0f:b2:c0:
30:bd:b0:0a:68:93:ee:c9:7c:3f:13:68:bd:85:4d:1e:d0:66:
c1:0e:8b:f9:0b:be:78:94:32:fc:eb:2e:72:e2:2b:84:b3:c5:
25:9f:e8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYZWcu92zuZQLydrGIEK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWExNTkzZDZhMTI4MmI2ZTg0YzJkMzMyNTExZWEyYTk5
YTg0MjAwHhcNMjYwMzI2MDkwMjM0WhcNMjYwMzI3MDkwMjM0WjAzMTEwLwYDVQQD
EyhjNzE5YjhhYTU1NjI2NWIzZmU5YTk0MzFiN2RlZDQ1OThiNjcxNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB9yjCfKQpsHtylVcMP588LXCnig
zbZHtWM+TF+nZp7X0YTIch9oadVLr/rNaAooc4PU/SUhIuVcsXVKNP9pMs6zGGcN
auAvP3Zt+jzoRaTXq9ClW/TfleafrdvYBcGlnxX1kRmtfOLQxTv1VI3Uso/c02o0
sD4xS3MDSitD0l02+rvZhu7gJtH2C1Ir2MM1QOGLx2WaDiFp073wgNpkON6LqUBS
HdXRShiL1ZA234dP7aYO7mJKLPYZoSIFWMHbZDs5Kr+BB/S7f/QUDrxGWo1+rX4A
mnMQ3kRhx7pb7nUlBu8BbgYdtJWOqiUiPtEvmy38c5b2Zhe9QptxwTrqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcZuKpVYmWz/pqUMbfe1FmLZxXqMB8GA1UdIwQY
MBaAFGnqFZPWoSgrboTC0zJRHqKpmoQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQt
Nzk2ZmJiNmFlOWJlLzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQtNzk2ZmJiNmFlOWJl
LzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOaozZFr
dfOp98alIu3kkykOXBbTEl+HXrpVLeVqbwSzQIkx90w/E+ktXxXuqZcrlDExLtxH
RrGN5B/T2o9hUtbuwR3FRjy7YZvUIiHMUt9t3wNbG+aoADzAZhsaPU7E6IryrYZL
5Pa4aJV4ONrQkfIhIsEwfB2jlRJuPKzy4tlqFet8s+NUKwi5w0GYMEipumB9UKju
spHP4/bhfdgJUbOYeRGfNtgCa6NsxtYVtqj1v/GQYYfzRKRzKkjt9GUNgiL1OYAO
EfaiJnYnOT/kU8Cwi6fOD7LAML2wCmiT7sl8PxNovYVNHtBmwQ6L+Qu+eJQy/Osu
cuIrhLPFJZ/o1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:12 2026 by rpki-client