
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: IzmceMCTX5iG6LcMT4kljdpgNtPI5ZFADttg5z/UhC8=
Subject key identifier: F9:DD:61:48:36:35:0E:1F:A4:42:3F:E9:69:1E:3D:34:66:C2:B0:1D
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019E205A79CF9C9B3C4DCE10C4FE6FFEBFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 08:01:00 +0000
Manifest this update: Wed 13 May 2026 08:01:00 +0000
Manifest next update: Thu 14 May 2026 08:01:00 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: WvPqyWS8FauZj6RostJ+RWqU+dpQxbx7DJT/HY/90Zw=)
2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:79:cf:9c:9b:3c:4d:ce:10:c4:fe:6f:fe:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: May 13 08:01:00 2026 GMT
Not After : May 14 08:01:00 2026 GMT
Subject: CN=f9dd614836350e1fa4423fe9691e3d3466c2b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:d8:8d:1c:2f:ec:3c:51:5a:07:63:09:6e:
7f:4d:b0:38:7f:87:10:89:a4:96:83:1e:c3:bd:65:
41:54:c6:6a:65:0a:ca:19:19:49:cf:57:55:8e:9f:
00:3b:cc:9b:e5:30:2d:5f:f3:84:c9:a4:f5:16:a3:
a1:38:22:4b:d4:43:0a:44:2f:6b:d2:e6:b3:3d:94:
7d:92:48:5d:98:28:0a:a7:6d:f9:23:1f:7a:69:1a:
f8:64:a0:f4:ed:cd:f9:6c:98:e6:ef:03:97:d4:a2:
ad:e6:f9:3b:78:c6:c5:90:84:da:3f:79:d8:e2:93:
2b:65:34:7c:e9:08:5d:e8:64:2b:87:73:b7:fd:16:
0d:24:ab:74:ff:e2:f3:27:7d:08:3f:64:f7:b3:10:
52:60:d7:dc:e1:79:17:ed:59:77:59:cf:26:a5:da:
8f:91:be:2f:1f:d9:09:3b:06:b0:da:a5:92:45:39:
26:3a:3e:7c:02:fa:d5:33:11:50:a1:18:ce:40:07:
25:6c:86:6e:a8:03:f3:f2:96:a7:11:ee:5a:dc:6e:
8b:06:e8:6c:49:c6:30:9d:2b:e8:3d:93:b3:05:47:
77:69:42:81:13:ad:c0:30:47:5d:31:80:ad:ba:62:
2a:1a:97:08:0a:14:35:a0:e2:42:fc:64:70:33:a3:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:61:48:36:35:0E:1F:A4:42:3F:E9:69:1E:3D:34:66:C2:B0:1D
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ca:84:6b:24:c6:eb:ec:f6:54:ca:13:fc:03:da:d0:23:d9:
db:7a:81:c2:01:79:66:b2:7d:9b:b6:2f:42:6c:70:09:58:69:
cc:63:19:45:d3:17:85:87:e3:08:35:f9:41:d9:bc:0b:37:1d:
31:b8:a0:94:65:a5:d8:78:c0:d4:72:aa:93:9e:5f:12:53:08:
59:fb:90:e1:4d:89:23:a6:8e:a7:4f:b2:c0:01:5f:a0:5f:63:
18:71:de:f4:e2:a7:08:a1:b8:8a:ae:88:50:0a:07:3a:9e:13:
9f:38:6e:84:ea:3b:08:df:a9:73:04:ce:e6:b7:dd:c8:9e:5c:
d5:ec:48:ef:79:9c:b6:bf:70:bf:99:b9:ea:ca:6e:6d:e1:34:
cd:55:c5:d6:a7:3c:e1:ef:aa:a7:96:75:06:d7:ab:b3:e3:4a:
b4:04:f1:43:74:24:87:13:70:33:75:c1:97:23:61:3b:9a:b4:
98:cd:4a:60:a7:59:97:ec:b1:2e:a9:ce:35:58:e7:55:e9:ac:
91:f6:f8:4f:b6:42:17:24:96:76:28:10:a4:e4:17:2f:5a:a8:
64:99:4f:00:b3:02:aa:50:36:b1:4c:d4:a4:a5:8a:d7:8b:87:
cd:eb:78:94:b4:5a:51:e0:43:7b:fd:13:db:8d:ff:c8:a3:8b:
e0:38:88:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWnnPnJs8Tc4QxP5v/r/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjYwNTEzMDgwMTAwWhcNMjYwNTE0MDgwMTAwWjAzMTEwLwYDVQQD
EyhmOWRkNjE0ODM2MzUwZTFmYTQ0MjNmZTk2OTFlM2QzNDY2YzJiMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wrYjRwv7DxRWgdjCW5/TbA4f4cQ
iaSWgx7DvWVBVMZqZQrKGRlJz1dVjp8AO8yb5TAtX/OEyaT1FqOhOCJL1EMKRC9r
0uazPZR9kkhdmCgKp235Ix96aRr4ZKD07c35bJjm7wOX1KKt5vk7eMbFkITaP3nY
4pMrZTR86Qhd6GQrh3O3/RYNJKt0/+LzJ30IP2T3sxBSYNfc4XkX7Vl3Wc8mpdqP
kb4vH9kJOwaw2qWSRTkmOj58AvrVMxFQoRjOQAclbIZuqAPz8panEe5a3G6LBuhs
ScYwnSvoPZOzBUd3aUKBE63AMEddMYCtumIqGpcIChQ1oOJC/GRwM6OnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPndYUg2NQ4fpEI/6WkePTRmwrAdMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMqEayTG
6+z2VMoT/APa0CPZ23qBwgF5ZrJ9m7YvQmxwCVhpzGMZRdMXhYfjCDX5Qdm8Czcd
MbiglGWl2HjA1HKqk55fElMIWfuQ4U2JI6aOp0+ywAFfoF9jGHHe9OKnCKG4iq6I
UAoHOp4TnzhuhOo7CN+pcwTO5rfdyJ5c1exI73mctr9wv5m56spubeE0zVXF1qc8
4e+qp5Z1Bters+NKtATxQ3QkhxNwM3XBlyNhO5q0mM1KYKdZl+yxLqnONVjnVems
kfb4T7ZCFySWdigQpOQXL1qoZJlPALMCqlA2sUzUpKWK14uHzet4lLRaUeBDe/0T
243/yKOL4DiIHw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:33:10 2026 by rpki-client