Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: e41z28WVjtss40RmZHbc0ZJ3IDUMf2GkvQ4P7DSQWP8=
Subject key identifier: 54:8D:D5:FA:77:A3:3A:AC:9C:23:F7:EC:DC:B1:F8:28:76:DA:B5:40
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 019D28F2519AE2C91905B4E50C009EF014C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 104C
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: QWouqhGKH3UBKJzGN2k6yKhI+ZRs+A/5pzjDVprWLDk=)
2: hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa (hash: UNg1Ev3uL6ITTCViVHYmyV+MQPsqTHd5HHXqSXS8miA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:51:9a:e2:c9:19:05:b4:e5:0c:00:9e:f0:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=548dd5fa77a33aac9c23f7ecdcb1f82876dab540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:95:c5:bb:98:15:cf:ae:2e:81:c7:98:3e:
1e:7f:36:f9:ec:35:9f:7c:7b:b2:c9:22:80:d5:dc:
06:f8:e3:32:ac:eb:a5:b0:bc:b8:ae:1e:ac:7b:50:
ef:04:1d:62:ba:a2:47:41:61:6a:cb:67:e5:b2:39:
32:01:ae:43:49:ed:8b:99:cd:98:a9:62:da:40:ac:
81:46:99:55:1e:e2:b0:04:5f:e6:3b:a1:c3:3a:52:
fa:b9:29:fd:28:94:12:2b:20:cd:e3:df:1c:f9:c9:
b1:87:db:d2:13:7f:51:f4:51:c8:ec:29:81:26:56:
c8:2b:54:00:c6:d9:a7:cc:cb:a8:46:0d:80:a0:94:
f9:ae:d7:19:c4:00:18:ba:5d:fb:4b:ad:af:99:de:
cd:71:fa:9d:06:8c:5f:a8:8c:ec:13:06:d6:7e:d7:
79:eb:e0:ad:86:e7:d6:3c:bb:c6:c7:a5:81:b9:12:
8d:b7:51:65:ca:af:74:78:02:d9:07:2a:a6:6c:b3:
8e:8c:63:92:16:d8:e0:aa:ff:35:7f:ee:2b:68:2e:
a9:7d:94:21:ea:3f:e2:97:4d:07:3d:9c:8c:a3:cf:
85:ef:70:3f:6f:3e:10:44:24:2e:1e:dc:6a:4c:7d:
9c:4d:1b:1f:60:ce:5c:aa:ea:e1:9a:8a:1b:a9:12:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:D5:FA:77:A3:3A:AC:9C:23:F7:EC:DC:B1:F8:28:76:DA:B5:40
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:d7:3b:e9:9d:de:1d:70:a6:8e:94:4f:a5:e5:41:eb:90:
d1:ce:c3:86:36:d8:8c:f1:8b:66:ca:28:ad:ea:b7:ac:f3:fe:
6c:03:7a:0d:1a:4d:48:bc:19:b9:2f:1e:0b:ae:5b:24:84:e3:
4d:a0:ff:c0:da:7e:22:16:a6:fd:d0:a1:ce:8c:92:14:87:6b:
18:1b:8a:49:a7:6c:3c:73:ae:4f:76:ac:c9:a6:57:4e:62:a7:
28:f0:34:9e:a0:4a:8a:68:77:0f:5c:f3:56:94:95:95:20:f0:
ce:05:07:61:ea:a8:d1:9a:32:61:8c:38:d0:63:7b:3a:42:b4:
05:ac:4f:13:96:4c:08:29:e3:1d:1d:7e:eb:27:a2:96:6e:8b:
0f:77:09:b1:34:29:b6:6a:a1:00:5f:49:21:b3:b4:6d:4f:b3:
d5:65:64:b6:5f:ec:5d:2e:89:a0:a0:74:3e:d3:9d:89:47:a9:
93:f2:55:93:d9:06:a7:6a:79:67:91:18:4b:50:20:dc:f8:e7:
74:0c:bc:ac:ce:cc:9d:fe:0b:22:87:29:d8:da:a5:01:c5:51:
79:85:14:b5:f1:00:48:74:af:c5:23:16:e2:48:39:e5:a7:2a:
57:bf:7c:74:1c:03:ec:d5:a6:11:98:f1:d9:08:89:3b:81:d2:
62:87:6e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lGa4skZBbTlDACe8BTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw
MjVhYzIwHhcNMjYwMzI2MDcwMTAyWhcNMjYwMzI3MDcwMTAyWjAzMTEwLwYDVQQD
Eyg1NDhkZDVmYTc3YTMzYWFjOWMyM2Y3ZWNkY2IxZjgyODc2ZGFiNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZKVxbuYFc+uLoHHmD4efzb57DWf
fHuyySKA1dwG+OMyrOulsLy4rh6se1DvBB1iuqJHQWFqy2flsjkyAa5DSe2Lmc2Y
qWLaQKyBRplVHuKwBF/mO6HDOlL6uSn9KJQSKyDN498c+cmxh9vSE39R9FHI7CmB
JlbIK1QAxtmnzMuoRg2AoJT5rtcZxAAYul37S62vmd7NcfqdBoxfqIzsEwbWftd5
6+CthufWPLvGx6WBuRKNt1Flyq90eALZByqmbLOOjGOSFtjgqv81f+4raC6pfZQh
6j/il00HPZyMo8+F73A/bz4QRCQuHtxqTH2cTRsfYM5cqurhmoobqRIA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSN1fp3ozqsnCP37Nyx+Ch22rVAMB8GA1UdIwQY
MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt
OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx
LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0zXO+md
3h1wpo6UT6XlQeuQ0c7DhjbYjPGLZsooreq3rPP+bAN6DRpNSLwZuS8eC65bJITj
TaD/wNp+Iham/dChzoySFIdrGBuKSadsPHOuT3asyaZXTmKnKPA0nqBKimh3D1zz
VpSVlSDwzgUHYeqo0ZoyYYw40GN7OkK0BaxPE5ZMCCnjHR1+6yeilm6LD3cJsTQp
tmqhAF9JIbO0bU+z1WVktl/sXS6JoKB0PtOdiUepk/JVk9kGp2p5Z5EYS1Ag3Pjn
dAy8rM7Mnf4LIocp2NqlAcVReYUUtfEASHSvxSMW4kg55acqV798dBwD7NWmEZjx
2QiJO4HSYoduyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:33 2026 by rpki-client