Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: DtF83aNVbCyEUYv03/ZrF83rFM/pluewOjz4JyYWI+k=
Subject key identifier: 4E:1D:55:70:39:F4:77:F5:63:A8:50:89:16:DE:6D:79:4B:01:C4:BB
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 019D277203FCB58B234DD4258A9BF501145B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: aOS5QbtzKoD8gQ5tvfiKHmTbvUW3DUxHlWJD9upt8go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:03:fc:b5:8b:23:4d:d4:25:8a:9b:f5:01:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=4e1d557039f477f563a8508916de6d794b01c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:e2:25:26:2f:12:8b:03:f9:4f:b1:e7:ae:
1f:08:46:d2:45:10:6d:bc:0d:77:3a:70:f5:c7:9c:
59:d0:82:88:cd:87:6d:39:2a:3a:ad:e8:70:0a:2e:
56:b3:e4:f9:04:64:39:dc:2f:27:be:ad:e3:65:d9:
e1:d7:43:dd:a9:f2:dc:af:55:be:e0:f7:9d:f5:8e:
83:b1:96:bb:eb:12:91:f4:7e:fb:c6:6a:4d:61:79:
87:76:94:7e:0d:a8:72:6d:7a:7a:ca:aa:b4:ec:ce:
c8:50:1a:fd:07:cc:32:0d:7c:93:d8:ce:da:96:89:
fe:52:b1:93:45:7f:aa:aa:2c:39:39:53:06:ad:dc:
c5:5c:d8:86:a4:e3:c1:c7:8f:0a:f5:80:0a:22:45:
e0:05:9a:7a:7d:98:88:70:d3:f7:76:68:33:11:5c:
8e:bc:d4:b7:05:1a:56:da:a6:db:68:61:8c:4d:84:
ca:ff:61:f5:f1:89:11:ef:9f:38:56:c7:5f:63:01:
4f:11:dd:d5:73:70:1a:ca:f8:a9:0e:35:20:7f:55:
33:4a:3f:9c:32:89:8c:c6:9a:e8:e6:34:62:5d:f4:
9a:22:98:11:d8:5e:48:7b:00:01:2a:2e:f9:e0:96:
e9:a7:01:9d:97:96:ac:73:23:0c:0c:06:02:fc:07:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:55:70:39:F4:77:F5:63:A8:50:89:16:DE:6D:79:4B:01:C4:BB
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:30:23:e5:4b:b8:d4:70:a2:e1:dc:a3:86:f2:47:56:79:fd:
18:9e:14:e7:44:29:68:22:d4:cb:37:38:5a:07:c0:49:a9:91:
26:75:11:ab:71:ea:8f:a9:74:6e:10:ea:36:b0:5b:84:65:24:
4e:19:f0:fd:36:5b:bb:52:4e:2c:a9:e2:80:39:97:e6:54:f1:
3a:12:34:52:32:3b:13:7f:77:7a:c1:3c:70:27:d6:d6:90:e6:
c9:18:7a:e5:b0:3f:8d:3c:1d:96:0b:60:6e:9a:89:62:7e:4d:
23:2d:08:5c:6c:47:e1:bc:e0:3c:48:49:e3:fd:69:2d:be:93:
ab:0e:70:65:4e:10:42:77:05:eb:02:5e:ef:60:dd:68:bf:5b:
54:9e:07:9c:dd:53:8d:af:11:ad:3a:f1:a8:7f:2a:62:54:2a:
31:8f:41:b8:33:17:db:b8:fc:81:1d:d3:3a:d6:4c:2f:c0:4f:
40:43:b0:c1:88:58:59:37:5e:6e:fc:c0:98:18:4d:da:ce:48:
54:3f:b1:b7:de:77:0c:bf:a5:ac:f4:4b:70:f4:4a:b7:94:b8:
45:1a:89:26:3f:c3:f4:98:7c:4b:54:cc:37:c4:8a:90:8a:89:
88:42:63:87:93:7b:88:2b:03:c9:e2:d7:5b:4f:61:fa:86:a3:
aa:30:66:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgP8tYsjTdQlipv1ARRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWM5MGM2ZDYzMzNkNDc2MjczZDJmZDZjODgzYWEyYWRh
OGQxMTUwHhcNMjYwMzI2MDAwMTE2WhcNMjYwMzI3MDAwMTE2WjAzMTEwLwYDVQQD
Eyg0ZTFkNTU3MDM5ZjQ3N2Y1NjNhODUwODkxNmRlNmQ3OTRiMDFjNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPiJSYvEosD+U+x564fCEbSRRBt
vA13OnD1x5xZ0IKIzYdtOSo6rehwCi5Ws+T5BGQ53C8nvq3jZdnh10PdqfLcr1W+
4Ped9Y6DsZa76xKR9H77xmpNYXmHdpR+DahybXp6yqq07M7IUBr9B8wyDXyT2M7a
lon+UrGTRX+qqiw5OVMGrdzFXNiGpOPBx48K9YAKIkXgBZp6fZiIcNP3dmgzEVyO
vNS3BRpW2qbbaGGMTYTK/2H18YkR7584VsdfYwFPEd3Vc3AayvipDjUgf1UzSj+c
MomMxpro5jRiXfSaIpgR2F5IewABKi754JbppwGdl5ascyMMDAYC/Ad1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4dVXA59Hf1Y6hQiRbebXlLAcS7MB8GA1UdIwQY
MBaAFGlckMbWMz1HYnPS/WyIOqKtqNEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjkt
Nzc1ZTdiNGZiNWM1LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjktNzc1ZTdiNGZiNWM1
LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDAj5Uu4
1HCi4dyjhvJHVnn9GJ4U50QpaCLUyzc4WgfASamRJnURq3Hqj6l0bhDqNrBbhGUk
Thnw/TZbu1JOLKnigDmX5lTxOhI0UjI7E393esE8cCfW1pDmyRh65bA/jTwdlgtg
bpqJYn5NIy0IXGxH4bzgPEhJ4/1pLb6Tqw5wZU4QQncF6wJe72DdaL9bVJ4HnN1T
ja8RrTrxqH8qYlQqMY9BuDMX27j8gR3TOtZML8BPQEOwwYhYWTdebvzAmBhN2s5I
VD+xt953DL+lrPRLcPRKt5S4RRqJJj/D9Jh8S1TMN8SKkIqJiEJjh5N7iCsDyeLX
W09h+oajqjBm3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:39 2026 by rpki-client