Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: q95V5WE9Hmrk1zWxgOYCvtw20GqhOHBTEf4+6P1GVy8=
Subject key identifier: FE:D6:60:A9:77:56:A1:3A:43:37:AD:F5:02:DC:FD:6F:B6:88:EB:EC
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019E1FB599D926C8690AF4495E76F8F84A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 15FF
Signing time: Wed 13 May 2026 05:00:55 +0000
Manifest this update: Wed 13 May 2026 05:00:55 +0000
Manifest next update: Thu 14 May 2026 05:00:55 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: AgMLwEe7J92rS77oKdOSsFlF9Qlw+pEzEq/QzISuzY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:99:d9:26:c8:69:0a:f4:49:5e:76:f8:f8:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: May 13 05:00:55 2026 GMT
Not After : May 14 05:00:55 2026 GMT
Subject: CN=fed660a97756a13a4337adf502dcfd6fb688ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:b4:70:e0:8e:7a:12:00:70:67:39:8f:5c:
21:19:ba:2d:3a:01:47:4b:b1:f2:9a:a7:d0:3d:58:
79:ed:79:14:9b:38:db:da:55:72:3e:ea:83:39:62:
c8:a8:af:b3:65:60:fa:a5:cb:0f:4c:b3:46:09:2c:
a6:aa:b5:9d:47:51:d7:af:67:67:7e:c2:13:29:b8:
af:0a:7d:ab:a7:a8:87:1c:c3:93:df:95:5c:3c:91:
82:58:ce:97:0b:f2:99:15:d2:09:a5:98:b0:a1:e1:
04:dd:9f:e5:9f:a0:db:3b:bd:42:77:01:87:1c:52:
9a:22:c2:5d:3c:12:6e:7c:e4:ad:1d:4d:ab:db:74:
0d:ed:16:d4:21:bc:2f:8a:01:54:f4:77:bd:a5:b5:
07:88:bb:33:e4:cc:0b:57:7d:37:b4:58:c5:11:6b:
6d:9e:96:19:43:df:cb:30:ee:d0:12:c6:4a:8e:2e:
90:9c:b3:41:ae:91:b6:51:9c:2e:cf:c9:f7:37:78:
a1:c5:36:cf:cc:f0:02:71:89:0f:79:34:13:e2:95:
f4:48:74:39:73:5d:94:55:2b:27:91:c1:a0:68:13:
22:02:89:0d:a2:ee:7a:a9:a8:90:84:57:50:01:4b:
2d:01:6f:59:5d:45:1a:73:37:c3:02:b1:66:09:bd:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:60:A9:77:56:A1:3A:43:37:AD:F5:02:DC:FD:6F:B6:88:EB:EC
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:db:7b:95:df:f7:55:e0:b9:6b:bd:eb:98:23:2a:de:ee:
85:a2:82:d9:3d:bc:ed:95:ae:7d:d4:4b:2d:83:1d:a0:5b:7a:
d5:b3:cc:49:e1:ed:a7:b4:d5:6a:c8:85:47:e3:59:e7:67:96:
4b:6b:32:3a:15:e8:96:7d:41:fa:05:e5:86:8b:f5:92:ba:9e:
54:30:1b:4d:51:cc:d4:a7:8d:8b:c9:02:61:da:5a:b5:91:4f:
76:b0:3a:a0:4a:e5:23:13:36:ae:da:b3:9d:13:cd:07:2e:ef:
38:82:0e:70:c4:ee:a2:62:be:74:f6:0b:26:4d:4a:a7:08:df:
17:bd:86:be:08:89:03:05:c1:1b:b3:cf:f4:17:80:53:89:a9:
49:ce:93:bb:24:b2:eb:50:6e:26:9c:09:66:44:3e:6a:3a:9c:
cf:d7:62:c8:b9:a2:cc:71:3c:68:65:44:14:ee:1b:b6:4c:92:
1c:8a:3f:3d:34:c4:39:d4:a2:37:2a:56:82:43:72:e3:65:db:
81:d8:d1:60:78:e9:dc:a6:c0:21:51:5e:86:42:ae:46:e9:ab:
62:ac:6b:9b:7c:4c:2a:13:0c:79:63:e5:ad:2a:17:22:2a:1b:
17:6d:c3:8c:18:2c:25:ba:09:6c:9e:bd:9f:f2:cc:cc:29:9c:
1d:0f:84:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftZnZJshpCvRJXnb4+EqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjYwNTEzMDUwMDU1WhcNMjYwNTE0MDUwMDU1WjAzMTEwLwYDVQQD
EyhmZWQ2NjBhOTc3NTZhMTNhNDMzN2FkZjUwMmRjZmQ2ZmI2ODhlYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcm0cOCOehIAcGc5j1whGbotOgFH
S7HymqfQPVh57XkUmzjb2lVyPuqDOWLIqK+zZWD6pcsPTLNGCSymqrWdR1HXr2dn
fsITKbivCn2rp6iHHMOT35VcPJGCWM6XC/KZFdIJpZiwoeEE3Z/ln6DbO71CdwGH
HFKaIsJdPBJufOStHU2r23QN7RbUIbwvigFU9He9pbUHiLsz5MwLV303tFjFEWtt
npYZQ9/LMO7QEsZKji6QnLNBrpG2UZwuz8n3N3ihxTbPzPACcYkPeTQT4pX0SHQ5
c12UVSsnkcGgaBMiAokNou56qaiQhFdQAUstAW9ZXUUaczfDArFmCb24NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7WYKl3VqE6Qzet9QLc/W+2iOvsMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY7be5Xf
91XguWu965gjKt7uhaKC2T287ZWufdRLLYMdoFt61bPMSeHtp7TVasiFR+NZ52eW
S2syOhXoln1B+gXlhov1krqeVDAbTVHM1KeNi8kCYdpatZFPdrA6oErlIxM2rtqz
nRPNBy7vOIIOcMTuomK+dPYLJk1KpwjfF72GvgiJAwXBG7PP9BeAU4mpSc6TuySy
61BuJpwJZkQ+ajqcz9diyLmizHE8aGVEFO4btkySHIo/PTTEOdSiNypWgkNy42Xb
gdjRYHjp3KbAIVFehkKuRumrYqxrm3xMKhMMeWPlrSoXIiobF23DjBgsJboJbJ69
n/LMzCmcHQ+Ejg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:32:51 2026 by rpki-client