Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: S6V4WlR235MrY+8TOYcxS/fJTttM/yDGLcYOHPAY+Io=
Subject key identifier: DC:B1:2E:9A:18:18:3C:0C:F8:1C:0B:7C:B8:C2:2B:C1:31:A2:5E:C4
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019D254C525F5B4F6C5EE3CDC15AF4A74EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 14:00:51 +0000
Manifest this update: Wed 25 Mar 2026 14:00:51 +0000
Manifest next update: Thu 26 Mar 2026 14:00:51 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: 6uMtJ+Qbbf1lqRzkEh7W6YhOpnYHHTbR/mENEkNW9+E=)
2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:52:5f:5b:4f:6c:5e:e3:cd:c1:5a:f4:a7:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Mar 25 14:00:51 2026 GMT
Not After : Mar 26 14:00:51 2026 GMT
Subject: CN=dcb12e9a18183c0cf81c0b7cb8c22bc131a25ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:59:e3:14:98:f2:d5:3f:fa:03:ce:28:20:
7f:07:87:80:05:c0:ee:df:7c:ca:a9:36:67:84:be:
dc:27:d9:42:9f:2c:e4:a8:28:f4:b8:ec:28:2c:b3:
70:78:a9:27:ef:f9:ed:2c:eb:82:51:82:d6:1b:1c:
0a:9e:82:9e:f1:04:51:cd:48:01:41:48:64:8c:3f:
57:fe:09:26:24:06:de:d6:a2:03:1b:c7:60:91:5b:
4f:6a:72:8f:30:6c:91:e5:6d:e2:43:da:26:db:df:
d7:4b:62:ef:6b:a1:39:d4:6d:ab:f7:1f:2d:4e:1d:
f3:6c:10:93:f3:bd:95:c1:d3:a0:89:93:90:83:37:
c1:d7:35:0b:fc:34:9e:51:8b:30:93:84:38:cf:aa:
6f:2f:f9:e4:0f:d7:35:78:73:a1:f7:51:32:50:0a:
69:bf:08:11:ce:3f:d4:9c:fe:7a:50:e8:a2:31:cf:
d3:34:3d:26:cc:45:a6:5a:7f:f9:e1:50:ef:02:f6:
ca:64:b9:ad:19:24:f8:48:d0:a1:96:06:c4:f0:1e:
35:30:61:34:d4:8f:eb:ff:b4:64:cb:d9:91:70:27:
09:57:1c:c7:82:07:0b:86:56:e2:49:09:bf:f3:7c:
7d:7e:f4:a5:92:7c:e2:1d:16:53:90:b3:5c:7d:6f:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B1:2E:9A:18:18:3C:0C:F8:1C:0B:7C:B8:C2:2B:C1:31:A2:5E:C4
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:20:b3:68:24:1c:3d:bb:43:e3:d2:0c:af:43:b7:85:4e:
48:5f:7f:86:7f:3f:ea:b9:22:8d:dd:41:78:ae:d4:42:f3:64:
42:9a:92:05:89:22:03:5b:42:fe:70:fe:a2:c5:ce:09:40:db:
8d:1b:7c:3c:40:a7:c9:47:7c:b2:42:27:d2:74:f0:68:5d:5d:
d9:38:2c:cb:f6:6c:ef:dd:cd:66:91:d1:97:51:4f:e7:06:fd:
96:de:44:4f:49:1a:c0:39:dd:42:7d:6f:af:c8:28:36:87:db:
cb:ee:28:66:87:7f:8b:0e:bb:ff:de:40:ee:e5:51:09:52:0e:
04:dd:b9:cd:f4:2f:ff:05:c8:10:ba:93:e7:5f:ea:99:e2:06:
c6:0c:bc:4d:27:73:e2:40:c9:69:01:7b:1c:93:99:27:1b:97:
9d:09:d1:d9:00:43:88:1d:ad:26:f2:56:46:69:2f:4b:25:aa:
46:c0:44:26:0c:b0:14:0e:99:1e:18:ff:b8:64:ed:be:73:34:
02:df:11:d9:67:81:1d:42:c8:6b:62:0a:2c:cc:0d:a4:a1:70:
93:de:d5:70:9d:7b:10:82:e6:32:2e:de:d2:c3:19:45:ee:7c:
c6:ad:3a:11:94:66:2b:dd:49:17:bd:4b:1e:c5:cb:d8:47:28:
fa:52:fe:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTFJfW09sXuPNwVr0p07GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjYwMzI1MTQwMDUxWhcNMjYwMzI2MTQwMDUxWjAzMTEwLwYDVQQD
EyhkY2IxMmU5YTE4MTgzYzBjZjgxYzBiN2NiOGMyMmJjMTMxYTI1ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLpZ4xSY8tU/+gPOKCB/B4eABcDu
33zKqTZnhL7cJ9lCnyzkqCj0uOwoLLNweKkn7/ntLOuCUYLWGxwKnoKe8QRRzUgB
QUhkjD9X/gkmJAbe1qIDG8dgkVtPanKPMGyR5W3iQ9om29/XS2Lva6E51G2r9x8t
Th3zbBCT872VwdOgiZOQgzfB1zUL/DSeUYswk4Q4z6pvL/nkD9c1eHOh91EyUApp
vwgRzj/UnP56UOiiMc/TND0mzEWmWn/54VDvAvbKZLmtGST4SNChlgbE8B41MGE0
1I/r/7Rky9mRcCcJVxzHggcLhlbiSQm/83x9fvSlknziHRZTkLNcfW/e4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyxLpoYGDwM+BwLfLjCK8Exol7EMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwAgs2gk
HD27Q+PSDK9Dt4VOSF9/hn8/6rkijd1BeK7UQvNkQpqSBYkiA1tC/nD+osXOCUDb
jRt8PECnyUd8skIn0nTwaF1d2Tgsy/Zs793NZpHRl1FP5wb9lt5ET0kawDndQn1v
r8goNofby+4oZod/iw67/95A7uVRCVIOBN25zfQv/wXIELqT51/qmeIGxgy8TSdz
4kDJaQF7HJOZJxuXnQnR2QBDiB2tJvJWRmkvSyWqRsBEJgywFA6ZHhj/uGTtvnM0
At8R2WeBHULIa2IKLMwNpKFwk97VcJ17EILmMi7e0sMZRe58xq06EZRmK91JF71L
HsXL2Eco+lL+Og==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:56 2026 by rpki-client