Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File: AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier: uRvseA6nM/QHPupUlHjhm7z6qMOJK0FIo/tLvgGF7hw=
Subject key identifier: 67:CD:01:66:49:17:B4:8E:D7:74:C6:5A:2A:B4:CF:04:D2:6C:54:9E
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer: /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial: 019D38D30B6845F186736EBC5E0CD62155B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number: 0301
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 0SV00tixxststMcWOBZPt/YQcIkXyz/goBNJGtlwbB8=)
2: sh8M4KLHuLakVIud2TbaHMeCEjw.roa (hash: vWKdYFJEWQq1vzlyAwLNl/BBt4KHaNS4rv484R5g4EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0b:68:45:f1:86:73:6e:bc:5e:0c:d6:21:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=67cd01664917b48ed774c65a2ab4cf04d26c549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:4b:84:36:23:a9:e1:77:00:a3:c4:78:78:
6b:b1:75:29:b0:e7:20:a2:d7:8b:20:f7:83:3d:2a:
fc:4a:5e:1f:e9:b0:14:3d:36:bf:6e:5d:c6:99:a1:
fe:d9:65:1c:13:74:dc:7e:20:12:f0:db:dc:39:4e:
ba:62:ce:29:87:14:f0:32:33:5e:6b:d9:53:ba:b7:
02:7f:9e:12:77:25:7e:ac:b9:7b:0d:d1:82:0e:5e:
a3:90:4f:a3:38:ac:74:8b:1e:b9:cf:5e:db:98:39:
92:0a:1e:fd:4b:09:5b:eb:3b:59:c2:85:54:20:61:
0f:9c:ad:b6:ac:00:44:76:52:89:b4:d1:06:1d:f0:
a6:5f:51:66:8e:53:d2:33:f5:23:2e:8b:80:ea:eb:
53:eb:c4:79:f9:1c:ef:95:8d:2a:9e:ec:ed:a7:f6:
94:50:2b:1e:94:2d:23:4d:a1:fc:63:35:06:5f:c7:
4e:63:6c:4d:73:ee:29:29:f0:48:4b:00:36:84:b4:
a1:d1:c2:be:12:e1:c1:e3:70:73:a1:f1:3a:7c:a9:
9a:68:6b:ff:6f:34:f1:1a:01:31:fb:55:fb:3f:e5:
eb:3c:db:34:51:82:46:1c:ed:76:5a:aa:94:d6:7f:
0f:37:29:ee:33:13:79:fb:eb:3e:8c:59:dc:4c:fe:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:01:66:49:17:B4:8E:D7:74:C6:5A:2A:B4:CF:04:D2:6C:54:9E
X509v3 Authority Key Identifier:
keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:c6:98:9f:61:e8:01:dc:d0:77:3b:dc:94:da:ea:a1:62:
84:0e:76:3a:92:8b:eb:46:63:09:77:ec:3e:35:03:01:15:87:
24:e1:03:84:45:c6:4e:f8:eb:60:0f:88:db:d4:3c:82:4f:01:
e7:dc:62:44:4b:c3:d4:28:de:5b:56:27:96:8c:11:64:a1:22:
42:49:3d:87:38:92:15:b5:50:35:10:09:10:14:69:71:f9:ec:
ff:76:e5:51:1e:2f:41:cc:f8:6b:aa:1a:ee:b3:b2:07:b6:ec:
f6:5a:a2:35:52:3d:ba:0b:e2:13:f4:6f:f8:2f:c7:7a:ff:15:
df:42:3e:05:44:61:4b:59:e8:27:39:87:d0:9e:3b:9f:d6:65:
cf:d8:c6:89:c1:e0:1c:39:82:61:51:49:2b:91:14:f1:cb:9c:
42:16:62:2a:eb:ef:cc:46:88:5a:85:68:d0:88:83:f9:52:b8:
96:6d:d9:16:d3:89:23:ed:78:99:17:ec:e9:ec:33:15:3e:67:
82:ab:a8:a3:3a:26:30:5a:31:d2:cf:3a:f2:9e:83:86:23:d1:
4c:40:fe:fb:0f:fc:4c:d1:f8:94:90:1c:c6:d7:ab:c1:b4:38:
04:8e:b4:51:1c:39:73:6d:8a:f7:14:44:60:6b:94:f6:75:92:
a6:78:87:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wtoRfGGc268XgzWIVW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTYyMjU2NDQ4NDY0OWE1YTY1N2I0NWM5ZDNiYjMwYzc4
OWEzZTQwHhcNMjYwMzI5MDkwMDQ4WhcNMjYwMzMwMDkwMDQ4WjAzMTEwLwYDVQQD
Eyg2N2NkMDE2NjQ5MTdiNDhlZDc3NGM2NWEyYWI0Y2YwNGQyNmM1NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhJLhDYjqeF3AKPEeHhrsXUpsOcg
oteLIPeDPSr8Sl4f6bAUPTa/bl3GmaH+2WUcE3TcfiAS8NvcOU66Ys4phxTwMjNe
a9lTurcCf54SdyV+rLl7DdGCDl6jkE+jOKx0ix65z17bmDmSCh79Swlb6ztZwoVU
IGEPnK22rABEdlKJtNEGHfCmX1FmjlPSM/UjLouA6utT68R5+RzvlY0qnuztp/aU
UCselC0jTaH8YzUGX8dOY2xNc+4pKfBISwA2hLSh0cK+EuHB43BzofE6fKmaaGv/
bzTxGgEx+1X7P+XrPNs0UYJGHO12WqqU1n8PNynuMxN5++s+jFncTP57kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfNAWZJF7SO13TGWiq0zwTSbFSeMB8GA1UdIwQY
MBaAFAHmIlZEhGSaWmV7RcnTuzDHiaPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjIt
NzIyNjE0Y2VjYjA5LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMmYyMDYtMjE5Zi00NTk5LThlMjItNzIyNjE0Y2VjYjA5
LzEvQWVZaVZrU0VaSnBhWlh0RnlkTzdNTWVKby1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP/GmJ9h
6AHc0Hc73JTa6qFihA52OpKL60ZjCXfsPjUDARWHJOEDhEXGTvjrYA+I29Q8gk8B
59xiREvD1CjeW1YnlowRZKEiQkk9hziSFbVQNRAJEBRpcfns/3blUR4vQcz4a6oa
7rOyB7bs9lqiNVI9ugviE/Rv+C/Hev8V30I+BURhS1noJzmH0J47n9Zlz9jGicHg
HDmCYVFJK5EU8cucQhZiKuvvzEaIWoVo0IiD+VK4lm3ZFtOJI+14mRfs6ewzFT5n
gquoozomMFox0s868p6DhiPRTED++w/8TNH4lJAcxterwbQ4BI60URw5c22K9xRE
YGuU9nWSpniHfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:16 2026 by rpki-client