Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: 1DLoeVmNub/H9GJrd62aNpwztWJUN90cchSnkKvTWf8=
Subject key identifier: 71:7B:5A:32:BF:75:96:73:A2:EF:75:64:49:07:14:D4:81:18:06:6D
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 019D337627E086D6AFCA6439EE0D82BD3C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0E58
Signing time: Sat 28 Mar 2026 08:01:14 +0000
Manifest this update: Sat 28 Mar 2026 08:01:14 +0000
Manifest next update: Sun 29 Mar 2026 08:01:14 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: Bzgcy+KK2Lx9LRX17jePR9ljIWwdaWhKcHYnRg1gVx0=)
2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:27:e0:86:d6:af:ca:64:39:ee:0d:82:bd:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Mar 28 08:01:14 2026 GMT
Not After : Mar 29 08:01:14 2026 GMT
Subject: CN=717b5a32bf759673a2ef7564490714d48118066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:15:3c:de:65:0f:72:d9:b6:28:40:75:bb:
6b:af:2e:7f:23:84:1c:86:4e:38:26:cf:1e:d0:06:
5a:cf:2e:ba:00:61:77:ae:86:fa:80:d6:2b:cd:48:
05:06:a5:27:a2:45:aa:66:11:77:36:0d:d0:76:2f:
b7:18:17:f2:03:a6:78:9d:86:f1:26:b1:b3:48:18:
34:4a:f1:e6:0e:b9:a1:99:48:7f:fe:87:2a:e4:9a:
98:85:86:f6:d2:be:92:f9:79:a2:87:dc:fe:d5:75:
6c:7f:97:dd:da:5a:76:f3:20:c2:9d:09:55:8a:56:
04:0d:bc:2b:5e:ed:dd:44:e3:0d:a3:1c:e0:97:9a:
98:b3:79:bd:cf:9d:7b:ab:66:7d:8a:b7:e4:3f:c8:
ff:19:c7:16:be:80:20:b1:9e:2a:55:f6:18:3c:19:
00:ec:98:b8:c1:d4:e0:c4:82:74:ae:41:95:2c:db:
d9:25:10:b1:84:09:4a:ad:9f:9c:ea:18:8e:c6:7e:
ed:2a:e1:72:cc:d5:7b:7c:93:42:33:d2:48:4a:b0:
af:4b:b2:c4:0a:72:6f:63:df:cb:e1:fb:4d:98:ff:
0b:21:84:d2:8b:05:25:59:aa:25:d9:70:74:bc:32:
3b:ab:4f:28:04:bb:96:90:fb:73:da:cc:a6:03:a9:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:5A:32:BF:75:96:73:A2:EF:75:64:49:07:14:D4:81:18:06:6D
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:f4:6e:68:bd:63:34:67:2e:6b:0d:b8:68:9d:be:36:ef:
9f:93:77:05:2e:ec:bd:a1:01:9b:24:9a:02:83:87:7b:18:4d:
bc:91:2a:ea:9f:e0:dc:2d:e4:31:6a:53:d6:ef:1f:09:4d:01:
93:53:b3:97:56:28:d1:c2:43:4d:a9:0f:cb:2a:da:59:40:45:
62:6d:42:0a:54:32:de:81:be:7b:87:8f:9e:cf:ba:82:8b:d0:
91:dd:86:93:97:d9:66:d3:00:a5:c2:64:c4:65:27:6c:75:e8:
cb:4d:0b:43:a1:00:46:dc:88:e8:d7:b9:9f:6a:db:63:9e:d5:
44:84:76:20:1c:f6:a6:55:15:e6:96:4a:95:e6:ac:c1:f3:17:
e8:c9:31:12:35:c9:d1:ac:ed:55:4d:07:d9:d5:66:1e:60:56:
16:ef:b0:28:fc:d4:c9:39:ef:6b:73:ac:94:73:bc:3c:0a:57:
5b:64:38:57:b9:d7:c2:a3:43:12:b2:90:2e:3d:04:46:21:90:
76:f8:28:dd:13:2c:c7:7c:89:db:1e:6c:48:cd:58:c5:fd:66:
a2:c6:b4:90:bd:09:9d:06:1a:29:07:32:0c:37:ff:c4:88:6f:
3f:cb:3d:35:b3:cc:30:07:7f:bf:24:d5:cc:8d:5d:8a:ea:15:
ed:bf:20:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdifghtavymQ57g2CvTx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0
MTIzNDMwHhcNMjYwMzI4MDgwMTE0WhcNMjYwMzI5MDgwMTE0WjAzMTEwLwYDVQQD
Eyg3MTdiNWEzMmJmNzU5NjczYTJlZjc1NjQ0OTA3MTRkNDgxMTgwNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ4VPN5lD3LZtihAdbtrry5/I4Qc
hk44Js8e0AZazy66AGF3rob6gNYrzUgFBqUnokWqZhF3Ng3Qdi+3GBfyA6Z4nYbx
JrGzSBg0SvHmDrmhmUh//ocq5JqYhYb20r6S+Xmih9z+1XVsf5fd2lp28yDCnQlV
ilYEDbwrXu3dROMNoxzgl5qYs3m9z517q2Z9irfkP8j/GccWvoAgsZ4qVfYYPBkA
7Ji4wdTgxIJ0rkGVLNvZJRCxhAlKrZ+c6hiOxn7tKuFyzNV7fJNCM9JISrCvS7LE
CnJvY9/L4ftNmP8LIYTSiwUlWaol2XB0vDI7q08oBLuWkPtz2symA6nciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF7WjK/dZZzou91ZEkHFNSBGAZtMB8GA1UdIwQY
MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt
Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm
LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOT0bmi9
YzRnLmsNuGidvjbvn5N3BS7svaEBmySaAoOHexhNvJEq6p/g3C3kMWpT1u8fCU0B
k1Ozl1Yo0cJDTakPyyraWUBFYm1CClQy3oG+e4ePns+6govQkd2Gk5fZZtMApcJk
xGUnbHXoy00LQ6EARtyI6Ne5n2rbY57VRIR2IBz2plUV5pZKleaswfMX6MkxEjXJ
0aztVU0H2dVmHmBWFu+wKPzUyTnva3OslHO8PApXW2Q4V7nXwqNDErKQLj0ERiGQ
dvgo3RMsx3yJ2x5sSM1Yxf1mosa0kL0JnQYaKQcyDDf/xIhvP8s9NbPMMAd/vyTV
zI1diuoV7b8gzg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:32 2026 by rpki-client