Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: H5wLOgIpjRZy/uCkdHrbBq55pD02BfcDu2rsIcjrrGo=
Subject key identifier: 41:2E:D9:49:3E:AE:7B:2A:A6:13:F8:69:D3:1E:5D:75:59:1C:E4:59
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 019D28BB9BE75EFF788D22C623D09831760A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: 0256
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=)
2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: 3ffzN/JZCsWPMsBqIeqDmPSZxO/blHxJiUtpR8AHRXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9b:e7:5e:ff:78:8d:22:c6:23:d0:98:31:76:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=412ed9493eae7b2aa613f869d31e5d75591ce459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:09:28:f1:78:df:bd:c1:eb:f2:03:ca:8e:
6b:f1:4e:46:a3:99:46:d7:95:d6:2c:ae:f0:a7:6d:
44:3a:43:96:f4:34:f0:76:ff:66:1c:86:0d:f8:df:
17:b2:9a:17:6e:91:b2:1c:54:ab:ad:9c:c2:75:39:
53:30:f2:3c:c9:d5:6e:c2:b8:36:49:6d:3f:11:c9:
e3:6b:59:8b:55:f4:a8:c2:ca:c2:02:f8:dd:ce:99:
de:76:61:bb:ca:06:34:4e:b0:41:c4:ef:00:f7:e0:
b0:8a:7a:c2:5e:15:98:b2:8f:3a:7d:f3:aa:00:38:
ed:ed:b1:c3:11:21:2b:44:50:81:f0:ab:86:f6:73:
39:53:69:eb:29:e8:61:dd:9e:36:75:35:89:26:cb:
f4:0f:a8:f4:de:fe:2e:13:73:b3:b8:4f:61:b3:fd:
31:3d:ef:17:02:c3:42:af:6d:6f:17:df:0d:f2:7c:
9c:80:f0:dc:76:05:86:2e:a9:16:9f:05:3f:c6:fd:
ff:0e:9a:f8:3d:c2:7a:6c:5b:94:c5:1c:ae:34:01:
de:30:2d:17:a1:3e:72:fd:a8:d6:44:8f:be:ae:bf:
78:bb:fe:ae:35:bb:13:8f:44:93:d8:1b:77:23:6e:
79:fb:fb:1c:43:05:4e:a9:3e:bc:7c:90:a2:c4:03:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:D9:49:3E:AE:7B:2A:A6:13:F8:69:D3:1E:5D:75:59:1C:E4:59
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:a1:83:5c:0b:fa:53:4f:63:44:7c:c0:73:c0:01:1a:25:
3c:d0:c2:dd:26:5e:99:5d:89:42:72:d6:08:d6:fa:c9:ba:19:
11:d7:3a:b1:bb:1b:14:16:41:1e:9c:1a:da:1a:f0:4c:3e:84:
fd:25:f4:4f:08:60:a4:5c:86:62:5f:97:d2:4c:d3:6f:de:06:
6c:9a:af:35:dc:8b:d1:cf:02:6a:b3:a6:96:74:c5:9e:c0:0b:
83:e3:cf:ea:2b:37:66:59:2d:ec:5c:da:1d:d1:b1:40:35:31:
f9:18:6b:01:13:fd:6f:e7:d7:d7:d6:d3:fc:12:80:2a:28:08:
84:c4:fc:73:10:df:30:0c:6b:2c:be:e7:65:92:40:a6:62:70:
ce:65:49:42:f9:ed:79:53:77:88:0c:ed:8f:77:dd:a5:87:d2:
82:7c:dd:fd:1e:19:81:1a:10:86:ea:86:35:24:f6:43:5b:b2:
0b:10:47:79:0d:65:9e:1c:2b:dc:ce:d0:da:f6:47:f8:0b:77:
70:bf:58:8e:8d:54:8f:5d:6c:17:3c:2b:af:01:af:72:e8:71:
02:b4:c8:c7:70:a7:e9:e1:4f:18:d7:57:cb:92:5f:09:8a:60:
22:3c:cb:a9:da:5f:38:79:d1:cc:05:e8:c7:a7:53:12:0f:bc:
41:a1:71:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5vnXv94jSLGI9CYMXYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODdhNGUyY2ZhOGVjZDAyYjUwNzMwMmIzYzZkYjE3ZjIx
MTc0MmYwHhcNMjYwMzI2MDYwMTE2WhcNMjYwMzI3MDYwMTE2WjAzMTEwLwYDVQQD
Eyg0MTJlZDk0OTNlYWU3YjJhYTYxM2Y4NjlkMzFlNWQ3NTU5MWNlNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfEJKPF4373B6/IDyo5r8U5Go5lG
15XWLK7wp21EOkOW9DTwdv9mHIYN+N8XspoXbpGyHFSrrZzCdTlTMPI8ydVuwrg2
SW0/Ecnja1mLVfSowsrCAvjdzpnedmG7ygY0TrBBxO8A9+CwinrCXhWYso86ffOq
ADjt7bHDESErRFCB8KuG9nM5U2nrKehh3Z42dTWJJsv0D6j03v4uE3OzuE9hs/0x
Pe8XAsNCr21vF98N8nycgPDcdgWGLqkWnwU/xv3/Dpr4PcJ6bFuUxRyuNAHeMC0X
oT5y/ajWRI++rr94u/6uNbsTj0ST2Bt3I255+/scQwVOqT68fJCixAMqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEu2Uk+rnsqphP4adMeXXVZHORZMB8GA1UdIwQY
MBaAFAKHpOLPqOzQK1BzArPG2xfyEXQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAt
OWVmOTY3ZmM3N2Q4LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAtOWVmOTY3ZmM3N2Q4
LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX6hg1wL
+lNPY0R8wHPAARolPNDC3SZemV2JQnLWCNb6yboZEdc6sbsbFBZBHpwa2hrwTD6E
/SX0TwhgpFyGYl+X0kzTb94GbJqvNdyL0c8CarOmlnTFnsALg+PP6is3Zlkt7Fza
HdGxQDUx+RhrARP9b+fX19bT/BKAKigIhMT8cxDfMAxrLL7nZZJApmJwzmVJQvnt
eVN3iAztj3fdpYfSgnzd/R4ZgRoQhuqGNST2Q1uyCxBHeQ1lnhwr3M7Q2vZH+At3
cL9Yjo1Uj11sFzwrrwGvcuhxArTIx3Cn6eFPGNdXy5JfCYpgIjzLqdpfOHnRzAXo
x6dTEg+8QaFxNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:39 2026 by rpki-client