Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: 90HPjCkUR39YE9M1T8RsLN82m+IVhNJeuAeNkTQVbyc=
Subject key identifier: EE:AA:13:C4:CB:78:F7:1E:F8:0F:49:E1:BC:E5:C3:FE:D3:1B:20:40
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019E1CB5678304EFCD2C0B67466FA653B2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 15:01:50 +0000
Manifest this update: Tue 12 May 2026 15:01:50 +0000
Manifest next update: Wed 13 May 2026 15:01:50 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 9L+EKCzT867JW/9OpSomokP5TpDbUVOqVtau1D3Vmt4=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:67:83:04:ef:cd:2c:0b:67:46:6f:a6:53:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: May 12 15:01:50 2026 GMT
Not After : May 13 15:01:50 2026 GMT
Subject: CN=eeaa13c4cb78f71ef80f49e1bce5c3fed31b2040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:d7:11:bc:c9:b9:84:71:f5:c9:59:81:54:
5f:0c:f7:2b:3d:85:71:6f:00:21:ca:a4:68:fd:c4:
08:33:ac:a5:3c:ed:83:0a:6a:76:ec:57:8f:ad:0a:
84:6b:6c:98:e7:f9:f7:ce:8e:7c:d0:e1:fa:dc:5b:
2a:8d:38:07:6a:05:cc:28:ba:ce:97:e2:a9:ce:a6:
5e:59:44:0a:fd:dc:bf:d9:b5:d7:f6:ff:36:2c:cc:
60:d9:b5:8e:ed:6f:5e:df:60:35:66:d8:0e:63:cf:
56:c5:d1:13:60:37:73:8b:97:d1:ec:b0:63:92:7f:
bb:1f:66:fe:25:f3:92:8a:17:79:ff:47:94:c9:41:
e7:83:95:d3:6b:3f:6c:94:43:a5:bd:f4:59:14:d6:
85:9a:ed:29:66:e8:4d:7c:fd:2a:65:6d:fa:7c:e5:
2a:ff:5a:be:ea:3f:32:23:d2:a6:4f:13:a6:ae:8b:
6c:dd:95:e8:2b:d8:ed:5d:49:75:a3:02:cf:2c:94:
30:31:5b:66:a8:f1:fb:90:a3:5c:28:2f:ac:03:fe:
14:d2:9e:03:49:20:11:d7:08:bc:88:f2:9c:41:f5:
af:9a:ef:e3:07:67:db:b4:a2:2d:2e:ad:0b:9b:c0:
0d:3e:ef:82:d4:b1:dc:d7:27:fa:24:87:e0:f4:2b:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:13:C4:CB:78:F7:1E:F8:0F:49:E1:BC:E5:C3:FE:D3:1B:20:40
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:02:61:a7:45:25:01:a0:53:35:d5:b3:c9:18:d2:7f:e3:
2d:d7:27:5e:be:ae:c7:e9:04:bf:f2:1e:88:9e:47:62:4d:1f:
56:57:9f:42:56:54:3f:2c:69:c1:a0:76:1a:d1:e8:fe:37:62:
d6:d2:79:f7:61:9b:66:90:50:e5:c4:f5:57:b1:df:05:5d:82:
e3:ed:6b:aa:3c:bd:70:d7:54:7c:17:00:42:b0:53:5e:60:55:
a2:21:84:a3:5e:89:9e:5e:57:f4:f7:19:48:c9:f5:2f:88:37:
2b:21:94:59:dc:68:c5:f7:48:f5:e5:31:4c:c4:c8:8e:00:ae:
dd:88:1d:29:02:68:25:c1:21:1b:a9:84:b2:08:dc:b1:b5:5f:
45:43:2b:2f:49:fe:07:41:95:ac:46:26:0a:7a:c6:c5:5c:ef:
a7:b3:a0:24:ea:45:5d:30:aa:b8:d9:c0:12:b5:3b:4b:b5:50:
16:cb:9e:13:61:98:7e:b4:3f:46:38:45:84:43:db:9c:cb:12:
7a:3c:3a:52:96:91:a0:c3:fa:8d:b9:0f:03:2e:3e:a0:fa:9c:
ad:ee:f1:99:20:b5:b1:7c:45:4d:a1:bf:72:e2:f7:fa:c4:80:
71:09:c2:b0:e0:51:c4:e4:39:d0:05:0f:57:b9:da:69:b8:34:
32:e7:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:01 2026 by rpki-client