Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: rS18ams9IOS4M3Ruffgbd970SQ0HQFp8Iq37VYVAFI0=
Subject key identifier: 3D:2A:22:5C:61:07:08:28:90:A8:D9:C1:D7:9B:1F:30:AD:9B:09:69
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019E20238B6A94289FF46EF6EEED0B6B82B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 07:01:00 +0000
Manifest this update: Wed 13 May 2026 07:01:00 +0000
Manifest next update: Thu 14 May 2026 07:01:00 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: N7HJNvuiSzIXST2h2ukGWRfW4BhPq6oEPf7Y8r3UDaI=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:8b:6a:94:28:9f:f4:6e:f6:ee:ed:0b:6b:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: May 13 07:01:00 2026 GMT
Not After : May 14 07:01:00 2026 GMT
Subject: CN=3d2a225c6107082890a8d9c1d79b1f30ad9b0969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:11:d1:4e:99:09:6b:cd:9a:e9:53:b6:cb:
10:1e:e0:e3:9c:7e:da:07:79:06:b1:f5:85:35:53:
b7:97:33:5c:4d:ca:e7:7b:a6:c6:16:5b:6e:9b:f0:
02:0a:74:3a:d7:80:71:0b:44:5d:db:4a:00:90:9a:
cc:d7:6d:3f:da:0f:3b:79:35:3f:39:3c:1e:38:d5:
33:5a:ed:80:b6:d7:69:a1:55:82:c3:6d:60:37:e7:
28:16:84:03:24:00:c8:50:c8:b0:9d:c8:58:6b:9e:
cf:eb:c6:16:9f:d8:13:f7:37:33:75:4e:00:e4:ea:
0b:57:31:3a:56:5b:d9:fa:52:bf:09:61:9a:89:66:
66:68:28:1c:9c:ec:8a:e1:39:9a:84:52:4b:ab:2d:
3f:ff:5a:d6:23:c2:fc:86:d7:3b:47:71:bd:f2:f6:
d5:ef:7e:54:cf:d6:55:ae:4c:59:56:98:49:32:a2:
8b:36:6a:a6:47:1a:19:a4:dd:b8:78:1c:d2:c4:55:
a4:a6:40:c4:d5:74:81:a7:92:51:d6:1e:fc:09:7f:
01:81:60:4e:45:f5:0d:72:d2:7d:b3:fd:db:e4:fb:
4c:b1:bb:bc:3d:aa:b1:de:b0:8f:5c:47:9c:23:42:
f7:58:37:f8:1d:2f:05:f1:75:e9:54:da:76:d1:a4:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:22:5C:61:07:08:28:90:A8:D9:C1:D7:9B:1F:30:AD:9B:09:69
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:65:63:5f:61:84:d9:8c:c7:f5:cd:10:df:a2:ba:9e:7c:90:
4d:a7:e6:41:36:65:04:85:39:11:0f:2d:da:47:05:46:92:1e:
87:d0:7d:04:df:fb:fc:c2:0a:cd:6e:7a:be:80:df:14:38:e7:
7d:fd:a9:5e:92:41:d9:12:24:86:af:5c:70:07:59:8a:9d:77:
fd:37:19:7c:16:6f:7c:76:d7:69:bf:00:c6:04:77:c8:2d:e6:
e6:86:2e:f4:88:85:97:62:ec:94:f4:2f:c2:06:bb:63:99:b5:
d1:bc:b6:f2:13:83:24:66:17:19:26:97:9a:d8:05:b1:c9:af:
03:51:f0:11:60:96:32:94:af:39:eb:b7:f4:b6:8e:eb:78:74:
f1:a8:28:60:7a:c6:6f:d9:ff:6e:ab:c6:50:c9:4c:e0:42:fb:
81:1f:ec:b8:71:e9:9c:c8:63:62:52:19:05:c8:b0:75:cf:fc:
fe:94:10:5b:3f:9d:23:3c:5b:2e:cd:c5:79:b0:da:45:be:59:
b0:9d:7b:33:76:1a:2f:a0:ce:62:45:dd:fd:8d:5f:77:f5:3c:
1d:54:5c:26:44:65:bb:91:07:ba:9c:fa:36:07:f2:bb:3f:ef:
43:79:2c:b6:ff:f4:c5:1c:ca:fc:ce:f6:ad:91:44:72:eb:ca:
f0:1d:ab:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI4tqlCif9G727u0La4K1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjYwNTEzMDcwMTAwWhcNMjYwNTE0MDcwMTAwWjAzMTEwLwYDVQQD
EygzZDJhMjI1YzYxMDcwODI4OTBhOGQ5YzFkNzliMWYzMGFkOWIwOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi0R0U6ZCWvNmulTtssQHuDjnH7a
B3kGsfWFNVO3lzNcTcrne6bGFltum/ACCnQ614BxC0Rd20oAkJrM120/2g87eTU/
OTweONUzWu2AttdpoVWCw21gN+coFoQDJADIUMiwnchYa57P68YWn9gT9zczdU4A
5OoLVzE6VlvZ+lK/CWGaiWZmaCgcnOyK4TmahFJLqy0//1rWI8L8htc7R3G98vbV
735Uz9ZVrkxZVphJMqKLNmqmRxoZpN24eBzSxFWkpkDE1XSBp5JR1h78CX8BgWBO
RfUNctJ9s/3b5PtMsbu8Paqx3rCPXEecI0L3WDf4HS8F8XXpVNp20aRbXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0qIlxhBwgokKjZwdebHzCtmwlpMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2VjX2GE
2YzH9c0Q36K6nnyQTafmQTZlBIU5EQ8t2kcFRpIeh9B9BN/7/MIKzW56voDfFDjn
ff2pXpJB2RIkhq9ccAdZip13/TcZfBZvfHbXab8AxgR3yC3m5oYu9IiFl2LslPQv
wga7Y5m10by28hODJGYXGSaXmtgFscmvA1HwEWCWMpSvOeu39LaO63h08agoYHrG
b9n/bqvGUMlM4EL7gR/suHHpnMhjYlIZBciwdc/8/pQQWz+dIzxbLs3FebDaRb5Z
sJ17M3YaL6DOYkXd/Y1fd/U8HVRcJkRlu5EHupz6Ngfyuz/vQ3kstv/0xRzK/M72
rZFEcuvK8B2rtQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:44 2026 by rpki-client