Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: B2da55E4jMvijIxJUkl4lk2lNjKNULlX8hFQ6kOv/H4=
Subject key identifier: 77:B1:90:C2:B8:AD:12:DB:E5:C1:AB:86:F7:7E:92:31:FA:87:AE:99
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 019D25F1C3EC05AE26C0A73D823C9634D03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 05FE
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 91SeViQ8hmvoQzYeH5NaZJ6BNQ1ho3WHFS9yXLtSDFk=)
2: hOzUFEchirVSZu4kGiThKl20Lag.roa (hash: H5zzg9d1gpHKYOjHoQCkEIEH4mlnH12RrDwh03hHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c3:ec:05:ae:26:c0:a7:3d:82:3c:96:34:d0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=77b190c2b8ad12dbe5c1ab86f77e9231fa87ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:28:6e:b5:26:cc:7b:a3:a5:d4:de:65:55:
05:8a:da:9e:11:6e:87:51:2a:16:a7:dc:65:74:69:
e3:fd:f8:8b:cb:c9:cf:42:fa:46:a0:c8:9a:e6:47:
81:16:bf:07:d9:a4:b3:2f:c0:55:91:50:9b:03:e3:
9d:8e:9b:25:e9:d7:f5:c7:e5:0f:a9:99:7f:67:58:
63:2b:60:ac:fc:e2:b5:3e:1b:c7:d1:cc:9f:1c:4d:
25:8c:27:fd:74:eb:6f:a7:1b:13:55:52:f4:af:b6:
54:45:2f:ca:c3:70:8b:21:a9:2a:1a:ca:a5:3d:e5:
d7:91:56:98:2d:44:13:fc:de:5c:8c:35:ea:73:7e:
3c:ab:ee:e8:3a:fe:a9:35:1f:fc:99:4f:2f:49:f2:
51:2c:b2:0f:93:5d:19:24:ad:1d:18:37:3e:72:73:
d6:1e:83:9f:d2:01:62:03:4d:c4:c9:be:8e:f6:d1:
42:99:00:f1:a2:bc:fe:ed:6b:15:72:70:8e:76:fa:
0c:49:72:e6:e2:4e:67:8c:ca:d7:f5:d2:ff:f8:b7:
a5:8d:13:72:d7:89:b3:1f:1b:16:4b:45:97:05:df:
57:4f:b0:7c:d0:8c:b5:f0:91:c0:8b:6e:db:88:77:
fd:80:6c:5a:21:d4:73:05:05:fc:b4:55:d3:a8:3c:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:90:C2:B8:AD:12:DB:E5:C1:AB:86:F7:7E:92:31:FA:87:AE:99
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:23:7a:bb:38:06:d4:3d:b1:6b:e5:56:fc:ff:a5:b4:f3:b9:
b6:c4:f2:68:b6:65:fa:f4:0f:83:58:f0:ca:7c:d9:1c:36:6a:
04:72:7e:b4:d9:18:7a:d1:20:c3:ef:35:ba:e5:5e:cd:2f:03:
3f:71:23:7a:84:ca:f9:22:fd:15:57:80:da:f1:4c:22:3f:0f:
d9:05:3f:b8:36:51:ff:be:09:0d:ad:8e:05:f5:32:fc:94:ae:
42:10:b2:ed:5a:48:01:91:24:c8:af:e8:dd:b7:53:98:16:18:
61:a1:b9:e4:d8:94:62:7a:60:d4:b8:4e:55:31:06:0a:b9:63:
26:b3:ed:fb:b0:f2:39:c7:71:d1:f4:17:47:09:21:59:05:c6:
57:22:6b:67:bc:7f:c2:e1:81:3f:bd:5b:d4:18:3a:4a:36:91:
b1:df:bd:e7:13:fb:06:3a:94:c5:9a:33:b4:08:0a:c3:5f:1e:
78:49:84:41:ba:84:b5:8f:21:8b:bf:0f:4f:2c:8d:29:28:91:
1e:10:5a:cc:01:ea:f3:d9:77:19:05:f9:45:b3:7f:d6:d9:73:
e2:c8:5e:16:98:83:0d:9e:b5:fb:9c:e6:8a:af:94:ab:a6:97:
22:d8:fb:bd:17:a4:80:d1:f5:0b:be:ef:e6:17:1a:02:5b:a4:
12:18:af:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8cPsBa4mwKc9gjyWNNA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjYwMzI1MTcwMTM0WhcNMjYwMzI2MTcwMTM0WjAzMTEwLwYDVQQD
Eyg3N2IxOTBjMmI4YWQxMmRiZTVjMWFiODZmNzdlOTIzMWZhODdhZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtsobrUmzHujpdTeZVUFitqeEW6H
USoWp9xldGnj/fiLy8nPQvpGoMia5keBFr8H2aSzL8BVkVCbA+Odjpsl6df1x+UP
qZl/Z1hjK2Cs/OK1PhvH0cyfHE0ljCf9dOtvpxsTVVL0r7ZURS/Kw3CLIakqGsql
PeXXkVaYLUQT/N5cjDXqc348q+7oOv6pNR/8mU8vSfJRLLIPk10ZJK0dGDc+cnPW
HoOf0gFiA03Eyb6O9tFCmQDxorz+7WsVcnCOdvoMSXLm4k5njMrX9dL/+LeljRNy
14mzHxsWS0WXBd9XT7B80Iy18JHAi27biHf9gGxaIdRzBQX8tFXTqDzD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHexkMK4rRLb5cGrhvd+kjH6h66ZMB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCN6uzgG
1D2xa+VW/P+ltPO5tsTyaLZl+vQPg1jwynzZHDZqBHJ+tNkYetEgw+81uuVezS8D
P3EjeoTK+SL9FVeA2vFMIj8P2QU/uDZR/74JDa2OBfUy/JSuQhCy7VpIAZEkyK/o
3bdTmBYYYaG55NiUYnpg1LhOVTEGCrljJrPt+7DyOcdx0fQXRwkhWQXGVyJrZ7x/
wuGBP71b1Bg6SjaRsd+95xP7BjqUxZoztAgKw18eeEmEQbqEtY8hi78PTyyNKSiR
HhBazAHq89l3GQX5RbN/1tlz4sheFpiDDZ61+5zmiq+Uq6aXItj7vRekgNH1C77v
5hcaAlukEhivNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:56 2026 by rpki-client