Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: in9Qpzhl6OhzTUgSLIDYlxJsHTWOSUMoPjZJx0s8rus=
Subject key identifier: 0F:D8:42:39:44:ED:B5:6F:BA:FC:25:C3:65:12:31:E1:85:AB:B9:D6
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019D2703B6B8EE8292BED24D83D7E55B61EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 02EE
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: Eiaph02pY9P06EfSt/+XJ0o7eYY804XVYRdtU4WDAKE=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b6:b8:ee:82:92:be:d2:4d:83:d7:e5:5b:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=0fd8423944edb56fbafc25c3651231e185abb9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:08:c0:f8:33:11:c2:d7:d8:d4:ea:99:02:
ad:fd:ce:ae:df:c2:ae:18:ce:3f:03:ca:97:2d:7c:
a1:09:79:73:72:76:83:37:87:d4:fd:93:a9:04:00:
c6:ba:f4:72:50:88:81:d8:5a:4a:2d:9d:7b:bc:26:
c6:1c:39:23:95:32:f1:d8:b3:48:68:33:2d:4e:33:
51:9b:4b:ea:a2:aa:fd:c0:ed:50:94:7b:49:22:a9:
59:b2:5b:a2:b1:63:2b:3b:82:cd:6f:bf:0a:67:ad:
20:9b:3c:99:7e:0e:74:ae:6a:be:1a:f1:f7:29:0c:
26:77:aa:dc:a5:81:d1:03:5e:1d:7f:19:d2:6a:c8:
70:74:f8:a0:ce:21:21:6f:a7:a0:ef:08:aa:7e:15:
20:17:93:b5:dd:bc:c9:aa:d3:a1:71:72:ec:3d:c6:
e1:c9:f6:75:60:f9:60:1c:a9:85:23:6f:ea:f7:91:
e3:a8:cc:7e:b5:31:90:9c:d9:3e:30:7c:8d:73:14:
39:a9:8c:f8:27:1a:16:29:11:bc:6e:28:29:7a:f3:
58:6f:d5:3f:5a:bf:64:92:ef:05:5e:35:aa:cb:79:
5a:2a:c3:35:3e:c6:c7:3c:aa:fa:6e:7e:88:f3:e6:
b6:6e:0c:c7:1c:2e:ba:44:7d:ec:5c:21:2b:60:3c:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D8:42:39:44:ED:B5:6F:BA:FC:25:C3:65:12:31:E1:85:AB:B9:D6
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:93:8a:38:06:f4:26:8a:36:94:9e:24:77:ae:2d:b7:c5:8a:
34:d0:be:ed:5c:4d:b2:1e:99:55:0a:64:29:c8:28:f4:f6:a1:
d5:36:9e:26:dd:77:e3:5e:c9:4a:f3:77:63:95:74:5f:e4:c7:
1b:3b:07:2a:35:d3:b9:eb:8c:4a:cd:d6:d1:22:f7:e4:52:a6:
26:8c:1a:c2:0f:6a:50:f5:17:db:c9:9c:67:62:ab:82:a8:90:
80:da:11:ef:21:5c:39:90:96:03:6f:a7:05:92:54:ac:fc:3d:
83:a6:7c:66:35:70:47:47:15:6f:ed:09:af:9d:f4:67:5f:ca:
c0:a3:61:50:cc:a6:f2:bc:db:d4:4b:d3:c9:8e:96:f6:1a:29:
95:4a:be:65:46:61:b3:df:25:10:bc:64:49:77:1e:97:9b:b7:
58:f0:33:90:41:64:55:df:69:d8:77:fe:39:9b:62:b9:5b:7b:
ae:51:8d:23:13:ad:61:f5:03:29:79:f3:02:3c:48:0d:b9:e1:
7e:f1:e8:b2:cf:84:60:0f:45:ce:3b:25:ca:52:0b:51:76:bf:
11:d9:e9:e1:d2:42:c6:29:2d:fb:eb:31:13:5f:c7:f3:f0:97:
ac:29:8a:75:83:b6:76:1f:d6:bc:ca:26:d2:d7:50:71:13:23:
38:ba:08:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7a47oKSvtJNg9flW2HsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx
YzhjZGQwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
EygwZmQ4NDIzOTQ0ZWRiNTZmYmFmYzI1YzM2NTEyMzFlMTg1YWJiOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ8IwPgzEcLX2NTqmQKt/c6u38Ku
GM4/A8qXLXyhCXlzcnaDN4fU/ZOpBADGuvRyUIiB2FpKLZ17vCbGHDkjlTLx2LNI
aDMtTjNRm0vqoqr9wO1QlHtJIqlZsluisWMrO4LNb78KZ60gmzyZfg50rmq+GvH3
KQwmd6rcpYHRA14dfxnSashwdPigziEhb6eg7wiqfhUgF5O13bzJqtOhcXLsPcbh
yfZ1YPlgHKmFI2/q95HjqMx+tTGQnNk+MHyNcxQ5qYz4JxoWKRG8bigpevNYb9U/
Wr9kku8FXjWqy3laKsM1PsbHPKr6bn6I8+a2bgzHHC66RH3sXCErYDzEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/YQjlE7bVvuvwlw2USMeGFq7nWMB8GA1UdIwQY
MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt
YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2
LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpOKOAb0
Joo2lJ4kd64tt8WKNNC+7VxNsh6ZVQpkKcgo9Pah1TaeJt13417JSvN3Y5V0X+TH
GzsHKjXTueuMSs3W0SL35FKmJowawg9qUPUX28mcZ2KrgqiQgNoR7yFcOZCWA2+n
BZJUrPw9g6Z8ZjVwR0cVb+0Jr530Z1/KwKNhUMym8rzb1EvTyY6W9hoplUq+ZUZh
s98lELxkSXcel5u3WPAzkEFkVd9p2Hf+OZtiuVt7rlGNIxOtYfUDKXnzAjxIDbnh
fvHoss+EYA9FzjslylILUXa/Ednp4dJCxikt++sxE1/H8/CXrCmKdYO2dh/WvMom
0tdQcRMjOLoIzg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:34 2026 by rpki-client