Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: +Vna2DVioMFH97JOMV97RsN/Duc6XFYLbxFqItDTYXg=
Subject key identifier: 65:20:C9:F6:BF:CD:4A:D3:5F:7A:7A:44:75:32:7F:40:69:47:3C:2A
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 01A0CD7F1DC295FA7AF512BC7F5A355F279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 1767
Signing time: Wed 23 Sep 2026 09:00:54 +0000
Manifest this update: Wed 23 Sep 2026 09:00:54 +0000
Manifest next update: Thu 24 Sep 2026 09:00:54 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: Mbs0+tt7Syelfoteq1aL26JnXYHvvgv6zyzKAWY0mzo=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:1d:c2:95:fa:7a:f5:12:bc:7f:5a:35:5f:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Sep 23 09:00:54 2026 GMT
Not After : Sep 24 09:00:54 2026 GMT
Subject: CN=6520c9f6bfcd4ad35f7a7a4475327f4069473c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:05:3f:8d:72:b0:08:9c:60:56:e7:9b:9e:
e3:a5:7c:0e:ab:c6:84:cb:16:23:a8:b7:c9:8e:04:
1d:f7:8b:46:ca:19:16:6d:fc:e7:3e:33:4c:8c:b9:
4c:19:a1:d1:c9:48:d7:0c:a3:b2:e2:53:49:df:72:
d3:81:0f:34:ac:d8:3f:5e:31:2d:d5:f5:4e:2a:e1:
2f:f0:5c:10:c4:0a:b2:72:b1:04:ba:0b:4e:26:7e:
c3:d5:c3:74:a8:2c:65:18:24:f9:65:8f:f1:aa:42:
ca:f7:7c:f7:02:d6:15:8c:bd:85:cc:a2:d5:a2:73:
ca:ff:3e:07:e2:e3:eb:e8:9a:e6:e5:22:b9:52:5b:
67:bc:1a:98:47:df:dc:9a:1b:32:ea:67:35:09:2a:
ea:56:d9:64:af:fb:c5:a7:4f:48:a1:34:99:7e:43:
c6:79:fd:87:f9:34:72:50:43:f0:62:0e:a7:c1:d1:
b4:26:52:e5:c0:8a:71:04:a7:80:60:e4:be:08:34:
90:fe:74:c7:21:18:c5:99:c9:f1:74:2b:e5:b9:42:
e4:de:50:a4:35:14:43:18:98:60:cc:88:0d:ae:20:
6e:0e:a6:12:d4:be:d9:ef:5e:3f:19:89:53:93:6c:
16:e8:ab:0b:18:8d:96:b8:1f:db:96:73:8a:22:a7:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:C9:F6:BF:CD:4A:D3:5F:7A:7A:44:75:32:7F:40:69:47:3C:2A
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:21:11:cb:6c:84:83:6f:55:e2:d7:89:be:cd:48:d0:a1:20:
c0:14:d0:1b:7b:63:8f:80:af:72:0b:64:66:06:1b:a7:c4:fe:
39:83:81:e1:be:d3:13:05:95:f6:b8:88:f5:29:f7:da:ec:8e:
a6:e0:60:ef:5c:9d:f2:c6:27:d3:4f:10:aa:60:af:2b:f9:58:
c2:33:5d:58:f6:ad:7d:44:de:d4:f3:08:e8:fe:e1:4d:a5:94:
7c:a6:f4:7a:b8:f5:cf:2e:ab:b8:f4:11:be:db:65:7c:04:42:
86:09:ec:28:60:d0:f2:ea:f0:d2:48:cb:6e:c5:1e:8f:de:b7:
c4:19:33:5f:a4:a9:50:0d:ca:d3:d5:f3:81:c0:34:2c:4d:68:
53:df:ae:d2:de:af:a5:3d:2c:4c:40:52:e0:a5:6d:73:be:da:
b1:83:ff:e3:28:f9:e5:66:25:2c:16:2f:18:27:0f:4d:35:18:
e8:8e:eb:2e:27:59:7c:14:29:94:50:48:2c:12:d9:9b:e0:75:
63:78:b1:6b:d4:dd:50:b6:de:d7:5c:a5:ff:3a:63:8f:ae:39:
11:8d:45:99:9d:0a:bc:0a:d8:0b:c3:10:86:12:e2:29:b8:ae:
e5:51:5b:45:40:8a:cc:e1:d9:3d:8c:54:83:55:a6:5f:33:df:
d4:37:6c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfx3Clfp69RK8f1o1XyebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDcxOGU3YTI2M2ViZTQ1ZTc3MDY3MzkyNDFlYzZkNmFl
NThlNzQwHhcNMjYwOTIzMDkwMDU0WhcNMjYwOTI0MDkwMDU0WjAzMTEwLwYDVQQD
Eyg2NTIwYzlmNmJmY2Q0YWQzNWY3YTdhNDQ3NTMyN2Y0MDY5NDczYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcUFP41ysAicYFbnm57jpXwOq8aE
yxYjqLfJjgQd94tGyhkWbfznPjNMjLlMGaHRyUjXDKOy4lNJ33LTgQ80rNg/XjEt
1fVOKuEv8FwQxAqycrEEugtOJn7D1cN0qCxlGCT5ZY/xqkLK93z3AtYVjL2FzKLV
onPK/z4H4uPr6Jrm5SK5UltnvBqYR9/cmhsy6mc1CSrqVtlkr/vFp09IoTSZfkPG
ef2H+TRyUEPwYg6nwdG0JlLlwIpxBKeAYOS+CDSQ/nTHIRjFmcnxdCvluULk3lCk
NRRDGJhgzIgNriBuDqYS1L7Z714/GYlTk2wW6KsLGI2WuB/blnOKIqeIdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUgyfa/zUrTX3p6RHUyf0BpRzwqMB8GA1UdIwQY
MBaAFABHGOeiY+vkXncGc5JB7G1q5Y50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYt
M2E5MWE2MTNhNDA3LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zZWVjZjgtZWIwNC00MWNlLWE5ZjYtM2E5MWE2MTNhNDA3
LzEvQUVjWTU2Smo2LVJlZHdaemtrSHNiV3Jsam5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyERy2yE
g29V4teJvs1I0KEgwBTQG3tjj4CvcgtkZgYbp8T+OYOB4b7TEwWV9riI9Sn32uyO
puBg71yd8sYn008QqmCvK/lYwjNdWPatfUTe1PMI6P7hTaWUfKb0erj1zy6ruPQR
vttlfARChgnsKGDQ8urw0kjLbsUej963xBkzX6SpUA3K09XzgcA0LE1oU9+u0t6v
pT0sTEBS4KVtc77asYP/4yj55WYlLBYvGCcPTTUY6I7rLidZfBQplFBILBLZm+B1
Y3ixa9TdULbe11yl/zpjj645EY1FmZ0KvArYC8MQhhLiKbiu5VFbRUCKzOHZPYxU
g1WmXzPf1DdssQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:30:17 2026 by rpki-client