Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: gpVgBF62UcWKwiiWosq+oX3BUnb17BB2U/xGUDENPjQ=
Subject key identifier: E1:43:B3:21:93:97:F3:5F:E3:FE:42:83:1A:32:E0:22:42:CA:17:58
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019D2816BDD50999244DA82B8D3E7AA7F2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 12C1
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (hash: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ=)
2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: lEPXT51FUEMRoMzhnktyPR/4pzIfe9qUjuupysYg+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bd:d5:09:99:24:4d:a8:2b:8d:3e:7a:a7:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=e143b3219397f35fe3fe42831a32e02242ca1758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:af:8f:4f:91:c1:06:22:ae:8b:9a:50:ce:3f:
c4:5f:c8:0e:98:1c:30:90:78:ac:59:44:3d:4b:59:
f7:5e:64:1f:1b:4c:c3:8d:93:52:39:77:f1:db:b3:
0a:b8:f4:51:d9:f1:6f:a0:31:29:47:a4:e7:a8:df:
3f:3a:7e:17:7b:2c:96:d5:3e:e6:6b:8d:08:55:be:
44:53:64:cc:26:c2:61:db:fe:85:a3:3e:99:d1:a2:
13:cb:25:9a:93:df:50:64:84:48:8d:de:bc:09:58:
3f:bf:95:79:19:ce:a0:3a:00:21:51:b6:4c:51:c9:
a4:f3:5b:49:13:df:ec:71:52:5e:15:a2:a3:aa:7a:
80:4b:ad:36:2a:c3:f1:9b:58:ab:da:67:b2:5b:cb:
a7:2b:c6:1a:5f:c0:b4:52:2b:18:e2:51:fe:b3:69:
41:07:8f:44:47:d0:d7:c7:14:75:f2:c9:89:0b:fb:
d1:b1:b1:88:22:b0:af:1f:9d:a7:09:87:95:ca:d5:
7d:98:86:99:97:a8:77:ef:0f:f3:95:aa:a6:78:4c:
a1:b8:8d:95:7b:63:d6:38:fa:f5:0e:7f:17:e0:ae:
fa:b9:60:23:ca:9a:8c:2b:73:43:55:06:a2:9e:64:
ee:eb:3d:ad:58:04:33:a6:b2:5c:94:23:f8:da:37:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:B3:21:93:97:F3:5F:E3:FE:42:83:1A:32:E0:22:42:CA:17:58
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b2:30:7e:63:4e:2e:83:41:0c:a6:f6:b6:fe:1c:c8:77:7b:
9e:b9:90:c3:30:b7:68:12:fc:b9:4e:01:80:07:9a:02:4d:a7:
72:80:06:89:68:c8:93:99:b7:f3:19:a1:f3:ab:51:da:7c:02:
cc:7f:85:e0:6b:4f:48:02:51:4c:a4:f3:a9:7e:f7:be:82:06:
5b:f1:89:f1:c3:53:d0:ed:6d:0f:f8:9e:73:72:54:0b:cb:8e:
69:93:be:49:5f:90:75:ac:67:6d:dd:7d:3e:f4:a3:04:da:88:
c4:17:e2:3e:fe:22:db:e9:5e:3b:86:1b:d1:33:d1:36:a5:5f:
ea:50:56:fc:b1:c0:7e:da:62:9c:14:2c:64:17:ca:be:32:e1:
3d:d3:7c:46:9a:90:45:a3:24:06:bf:c9:41:96:f3:5f:7b:8a:
04:34:1f:c0:e8:3d:03:60:95:42:14:b4:32:c8:bc:e4:9e:4d:
6d:0a:e4:49:7e:62:f6:ce:80:2c:eb:50:78:f3:48:d0:c9:97:
17:68:1d:78:cf:eb:28:ee:9f:3c:b2:bc:43:74:b1:e4:fe:26:
57:74:ae:b2:93:ac:6f:2e:16:97:4b:a0:bd:df:73:f8:59:3f:
2e:8a:d8:1c:64:4d:c9:4a:c4:e1:1d:2c:7b:c0:00:a3:90:de:
a8:f3:3e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFr3VCZkkTagrjT56p/LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjYwMzI2MDMwMTEyWhcNMjYwMzI3MDMwMTEyWjAzMTEwLwYDVQQD
EyhlMTQzYjMyMTkzOTdmMzVmZTNmZTQyODMxYTMyZTAyMjQyY2ExNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+K+PT5HBBiKui5pQzj/EX8gOmBww
kHisWUQ9S1n3XmQfG0zDjZNSOXfx27MKuPRR2fFvoDEpR6TnqN8/On4XeyyW1T7m
a40IVb5EU2TMJsJh2/6Foz6Z0aITyyWak99QZIRIjd68CVg/v5V5Gc6gOgAhUbZM
Ucmk81tJE9/scVJeFaKjqnqAS602KsPxm1ir2meyW8unK8YaX8C0UisY4lH+s2lB
B49ER9DXxxR18smJC/vRsbGIIrCvH52nCYeVytV9mIaZl6h37w/zlaqmeEyhuI2V
e2PWOPr1Dn8X4K76uWAjypqMK3NDVQainmTu6z2tWAQzprJclCP42jfdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFDsyGTl/Nf4/5Cgxoy4CJCyhdYMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbIwfmNO
LoNBDKb2tv4cyHd7nrmQwzC3aBL8uU4BgAeaAk2ncoAGiWjIk5m38xmh86tR2nwC
zH+F4GtPSAJRTKTzqX73voIGW/GJ8cNT0O1tD/iec3JUC8uOaZO+SV+Qdaxnbd19
PvSjBNqIxBfiPv4i2+leO4Yb0TPRNqVf6lBW/LHAftpinBQsZBfKvjLhPdN8RpqQ
RaMkBr/JQZbzX3uKBDQfwOg9A2CVQhS0Msi85J5NbQrkSX5i9s6ALOtQePNI0MmX
F2gdeM/rKO6fPLK8Q3Sx5P4mV3SuspOsby4Wl0ugvd9z+Fk/LorYHGRNyUrE4R0s
e8AAo5DeqPM+wA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:23 2026 by rpki-client