
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: mftYYiAdEtsnOsevMDTg2SwAtHL1fUEfcmlMmmDGtIo=
Subject key identifier: 76:97:84:6F:7C:D0:55:1F:66:F2:95:CC:D6:91:B1:BC:61:99:AD:38
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019E1D909114D0D114E309A47EB547037C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 19:01:14 +0000
Manifest this update: Tue 12 May 2026 19:01:14 +0000
Manifest next update: Wed 13 May 2026 19:01:14 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: ak6VkIoRS6B5/RIQCWhWG6ibDXqBlrGxaHhFmYFMIaA=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:91:14:d0:d1:14:e3:09:a4:7e:b5:47:03:7c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: May 12 19:01:14 2026 GMT
Not After : May 13 19:01:14 2026 GMT
Subject: CN=7697846f7cd0551f66f295ccd691b1bc6199ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:b7:36:36:97:d6:1d:a7:9a:b5:97:41:42:
02:71:b9:a4:71:87:cb:91:00:ae:7a:eb:ee:d7:bd:
a3:1c:b4:3d:dc:66:e5:31:a4:13:78:6f:29:57:7f:
25:c8:71:26:b3:c7:98:7a:07:d0:56:ba:15:76:5d:
24:fc:cc:41:6d:c3:f3:5b:19:57:f9:2f:81:20:12:
8f:13:b0:d9:cd:1b:5e:1a:54:a6:47:d1:e0:e6:8c:
6c:fa:cd:35:ca:8b:82:b4:50:46:fc:d3:6c:90:44:
b7:88:89:f6:ad:14:97:a2:4b:da:6b:68:20:64:ac:
26:bc:c8:19:21:55:4c:52:22:91:21:99:3e:6a:1b:
15:cb:6e:9e:62:e7:ef:31:51:ef:5e:46:21:92:9b:
b7:5b:f3:62:8d:bb:80:2f:64:a6:77:e2:c6:ed:e8:
eb:4e:df:aa:24:ab:62:bd:0a:0c:7f:cd:22:4c:fc:
10:74:32:05:9e:3f:c7:92:1c:13:fc:b9:b5:2d:86:
2f:95:18:ac:78:61:5e:af:78:0b:91:cc:b8:98:d8:
cd:79:d5:4a:e2:dd:10:b1:11:24:00:6a:42:b5:9d:
63:c6:f0:b7:17:85:ae:53:fb:6a:0d:ca:be:d0:ab:
98:02:56:6b:6f:e0:64:10:36:08:04:34:7a:5c:fa:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:84:6F:7C:D0:55:1F:66:F2:95:CC:D6:91:B1:BC:61:99:AD:38
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:de:18:c5:09:97:8b:6f:cb:ff:c1:02:6b:b5:aa:1a:ca:
97:3d:d2:2c:e9:5b:49:2a:fd:50:57:48:2b:6e:16:6f:a8:76:
be:d9:38:8b:6f:c6:40:5b:b7:04:c0:96:8b:f8:10:26:e4:66:
1d:d3:5c:c3:19:86:c9:bc:a9:4a:36:ab:e7:64:f9:32:01:71:
25:3e:1a:b3:cf:c1:a4:38:a0:6f:2d:d8:a8:9b:fb:ca:33:83:
bd:a3:de:2f:30:fa:76:88:24:d7:07:cc:64:9e:ee:08:85:4c:
69:81:28:8e:09:2d:34:e4:fb:92:d1:75:18:0b:e0:15:7f:ad:
f3:e3:b2:57:cc:8c:98:c3:33:dd:8f:5e:8e:49:85:6f:b5:aa:
50:bc:85:73:aa:76:24:f6:5d:29:4e:ad:70:49:73:18:f6:05:
96:75:f3:26:44:a0:69:69:fb:89:01:a4:f1:cb:d9:80:10:93:
1c:1c:38:7b:6a:28:fc:8f:41:40:e5:de:02:c7:ee:e9:1f:b8:
a3:96:9e:29:5d:4b:20:34:f4:34:63:14:d9:20:c3:8a:8f:e5:
50:80:bf:21:0b:e8:2c:48:9b:e1:2f:04:5a:c8:88:b3:78:a2:
0e:38:2f:a2:d3:db:11:9f:b6:fe:7a:4d:ac:a4:ba:70:b3:80:
cb:62:07:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJEU0NEU4wmkfrVHA3yNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYwNTEyMTkwMTE0WhcNMjYwNTEzMTkwMTE0WjAzMTEwLwYDVQQD
Eyg3Njk3ODQ2ZjdjZDA1NTFmNjZmMjk1Y2NkNjkxYjFiYzYxOTlhZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXy3NjaX1h2nmrWXQUICcbmkcYfL
kQCueuvu172jHLQ93GblMaQTeG8pV38lyHEms8eYegfQVroVdl0k/MxBbcPzWxlX
+S+BIBKPE7DZzRteGlSmR9Hg5oxs+s01youCtFBG/NNskES3iIn2rRSXokvaa2gg
ZKwmvMgZIVVMUiKRIZk+ahsVy26eYufvMVHvXkYhkpu3W/NijbuAL2Smd+LG7ejr
Tt+qJKtivQoMf80iTPwQdDIFnj/HkhwT/Lm1LYYvlRiseGFer3gLkcy4mNjNedVK
4t0QsREkAGpCtZ1jxvC3F4WuU/tqDcq+0KuYAlZrb+BkEDYIBDR6XPrFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaXhG980FUfZvKVzNaRsbxhma04MB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIneGMUJ
l4tvy//BAmu1qhrKlz3SLOlbSSr9UFdIK24Wb6h2vtk4i2/GQFu3BMCWi/gQJuRm
HdNcwxmGybypSjar52T5MgFxJT4as8/BpDigby3YqJv7yjODvaPeLzD6dogk1wfM
ZJ7uCIVMaYEojgktNOT7ktF1GAvgFX+t8+OyV8yMmMMz3Y9ejkmFb7WqULyFc6p2
JPZdKU6tcElzGPYFlnXzJkSgaWn7iQGk8cvZgBCTHBw4e2oo/I9BQOXeAsfu6R+4
o5aeKV1LIDT0NGMU2SDDio/lUIC/IQvoLEib4S8EWsiIs3iiDjgvotPbEZ+2/npN
rKS6cLOAy2IH8g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:50 2026 by rpki-client