Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: rVfQiXumCUaFsxZ5hJozPrQt49bCd53qVyye9hpmXuM=
Subject key identifier: 35:3C:ED:69:B9:3E:B4:43:99:0C:1E:AD:8D:A8:18:CF:4C:B4:1E:34
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 019D2AE00700A5D27AFA079D4D4AB4225DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0F9A
Signing time: Thu 26 Mar 2026 16:00:18 +0000
Manifest this update: Thu 26 Mar 2026 16:00:18 +0000
Manifest next update: Fri 27 Mar 2026 16:00:18 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: d+oaMcz9EvBxrZDiAvqCUwS39leN8Y990PMvku+WqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:07:00:a5:d2:7a:fa:07:9d:4d:4a:b4:22:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Mar 26 16:00:18 2026 GMT
Not After : Mar 27 16:00:18 2026 GMT
Subject: CN=353ced69b93eb443990c1ead8da818cf4cb41e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:37:4d:aa:c6:00:17:39:6c:72:3f:1d:86:
ba:06:ff:b4:a3:e0:8c:c4:f3:ed:8f:9c:e3:c9:b5:
fb:2e:a3:48:ad:55:e8:46:e0:a1:67:37:96:dd:d4:
d0:6e:d6:74:89:05:25:19:4f:03:8b:e9:59:0b:fe:
e3:ec:ac:2d:1b:b1:b1:ab:eb:82:63:78:2a:49:e1:
0e:35:43:64:0f:4a:c0:2f:9c:7c:81:aa:d6:b1:b5:
37:fb:d2:52:0e:6b:88:d7:be:9b:61:fe:15:9b:2d:
d8:35:8d:06:46:f9:e7:af:bd:74:36:43:b9:f1:a5:
59:50:da:02:02:e4:cb:ae:3e:52:ac:b8:e3:15:df:
fb:05:89:de:91:ef:ff:f8:ca:80:76:00:a7:eb:77:
19:26:e1:9f:ee:d4:84:d6:22:01:3d:28:a4:45:6f:
b0:b2:6a:3f:15:97:fd:50:9b:e9:47:27:96:76:c4:
99:3d:09:7a:c1:eb:5e:2c:f9:c4:fd:e6:21:ab:83:
6a:f2:c2:00:e2:77:46:13:ee:2e:98:de:aa:10:73:
88:29:35:17:12:00:09:8b:92:94:48:9c:1e:ca:df:
da:b1:27:9a:37:ee:ba:1b:01:f2:18:64:d9:20:d5:
d4:a4:4a:1c:cf:61:ab:e3:06:ee:00:bb:87:61:32:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:ED:69:B9:3E:B4:43:99:0C:1E:AD:8D:A8:18:CF:4C:B4:1E:34
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:c6:f3:f0:aa:e8:c6:bf:df:98:b7:50:43:e7:d0:30:b5:
1e:48:07:6f:2c:6c:78:bf:93:ca:77:93:a3:1c:3e:60:d5:0f:
f7:ee:44:4a:65:ff:92:6d:71:13:da:df:9e:a0:e6:6d:86:17:
a1:b9:5b:6d:50:c6:fd:1c:36:16:31:66:6f:56:52:cf:1a:57:
20:89:dd:e3:a7:8f:10:6c:41:3a:69:51:94:19:4f:06:65:f9:
92:2e:e2:37:43:2e:c8:42:71:e2:64:f9:2e:7b:29:af:0a:9a:
a0:4e:e4:bb:ac:13:cb:e0:c0:73:98:81:c7:53:b4:71:ce:62:
74:a1:fd:13:77:db:05:b0:b6:aa:0e:d7:26:e5:0b:e8:e5:5e:
14:28:e4:f8:dd:6e:bb:8e:87:d0:d9:5a:da:b9:78:a5:08:25:
40:d9:02:70:18:08:38:1f:35:40:38:f9:a4:d4:c9:85:a0:f6:
2e:4a:71:eb:de:7a:4f:f7:17:d8:41:19:ff:d5:39:84:ac:dd:
0e:84:ab:f3:8b:c8:60:32:b6:e1:d6:c2:d4:34:60:c0:65:bb:
e8:75:1a:b3:ca:bd:77:3f:9f:b0:cf:09:9e:2a:d9:3e:0a:a8:
45:a9:de:e0:2b:27:0f:89:e2:74:aa:a3:61:32:1c:3c:50:ca:
ce:ee:7f:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4AcApdJ6+gedTUq0Il21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTdiMzYzNWIzZDU3ODU2MDM3MGE1ODMwM2NmY2Q1Y2Q5
MjkxMDUwHhcNMjYwMzI2MTYwMDE4WhcNMjYwMzI3MTYwMDE4WjAzMTEwLwYDVQQD
EygzNTNjZWQ2OWI5M2ViNDQzOTkwYzFlYWQ4ZGE4MThjZjRjYjQxZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZc3TarGABc5bHI/HYa6Bv+0o+CM
xPPtj5zjybX7LqNIrVXoRuChZzeW3dTQbtZ0iQUlGU8Di+lZC/7j7KwtG7Gxq+uC
Y3gqSeEONUNkD0rAL5x8garWsbU3+9JSDmuI176bYf4Vmy3YNY0GRvnnr710NkO5
8aVZUNoCAuTLrj5SrLjjFd/7BYneke//+MqAdgCn63cZJuGf7tSE1iIBPSikRW+w
smo/FZf9UJvpRyeWdsSZPQl6weteLPnE/eYhq4Nq8sIA4ndGE+4umN6qEHOIKTUX
EgAJi5KUSJweyt/asSeaN+66GwHyGGTZINXUpEocz2Gr4wbuALuHYTJVAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU87Wm5PrRDmQwerY2oGM9MtB40MB8GA1UdIwQY
MBaAFADns2NbPVeFYDcKWDA8/NXNkpEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9lelkxczlWNFZnTndwWU1EejgxYzJTa1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80NjIzOGEtYTE5YS00OTE1LThhNDct
YTBjZDE0MTUxM2NiLzEvQU9lelkxczlWNFZnTndwWU1EejgxYzJTa1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80NjIzOGEtYTE5YS00OTE1LThhNDctYTBjZDE0MTUxM2Ni
LzEvQU9lelkxczlWNFZnTndwWU1EejgxYzJTa1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcnG8/Cq
6Ma/35i3UEPn0DC1HkgHbyxseL+TyneToxw+YNUP9+5ESmX/km1xE9rfnqDmbYYX
oblbbVDG/Rw2FjFmb1ZSzxpXIInd46ePEGxBOmlRlBlPBmX5ki7iN0MuyEJx4mT5
LnsprwqaoE7ku6wTy+DAc5iBx1O0cc5idKH9E3fbBbC2qg7XJuUL6OVeFCjk+N1u
u46H0Nla2rl4pQglQNkCcBgIOB81QDj5pNTJhaD2Lkpx6956T/cX2EEZ/9U5hKzd
DoSr84vIYDK24dbC1DRgwGW76HUas8q9dz+fsM8JnirZPgqoRane4CsnD4nidKqj
YTIcPFDKzu5/kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:03 2026 by rpki-client