Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: oDWeTGtkwB9PM4hVD7xnw3fdPC9OsSXARKpQikS0NbQ=
Subject key identifier: B9:95:90:8B:12:D6:A4:8A:B1:43:0C:39:11:50:C0:13:5F:7C:15:08
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019D37F727EB714671966ECC3F1D4BB13BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 1521
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: hxyVMvIP_SVcBThDF1ToAOfYVKI.roa (hash: 2tvRfORdoA5iduQPZSwIAmQn4zHIFUUAid+3PnQEwek=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: bRmGf7la0LLbjNkq6KsftlnyWW9y9HUpiD2XUlbc+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:27:eb:71:46:71:96:6e:cc:3f:1d:4b:b1:3b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=b995908b12d6a48ab1430c391150c0135f7c1508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:e1:1e:f5:fe:4b:8d:a6:4a:6a:5a:4c:97:
6c:be:91:4b:9c:0d:66:bf:d2:a8:e3:fd:95:91:97:
7e:de:28:c6:5b:e0:62:35:c4:51:83:fe:fb:5a:6f:
a7:46:19:7f:ce:de:df:26:9a:f4:ba:05:b0:6a:ce:
f8:33:b6:7b:b6:ce:f1:1a:13:da:40:7e:a4:d3:b1:
25:20:7f:44:db:6e:32:47:ca:50:ec:c1:20:99:e9:
63:4e:28:a4:17:b3:4d:d5:54:86:e9:5c:34:02:16:
ff:1b:0a:80:f6:06:d9:7f:86:54:92:b8:ea:83:9a:
0e:2d:4f:ba:fe:84:61:4f:fa:e9:64:8b:3a:00:a4:
9e:fd:56:e0:e6:d1:44:bf:cc:99:9e:1a:65:79:e0:
56:b3:e4:3e:0b:d6:6f:cb:58:e0:d4:1a:da:9a:ef:
b8:00:c1:60:84:99:0a:77:ea:6e:52:9f:a4:a3:a7:
59:db:65:b4:5b:18:5a:ff:6f:9c:ae:e5:bc:35:1a:
cc:0e:0b:61:e6:b9:36:31:e8:f7:61:c2:d0:c7:26:
fe:00:c7:0d:89:8b:65:b0:08:f9:75:e8:6c:25:02:
cc:f8:19:79:d5:16:d4:e4:7d:5c:21:17:70:00:9b:
96:05:bf:e8:fe:f6:49:d3:f8:47:96:91:4a:2b:38:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:90:8B:12:D6:A4:8A:B1:43:0C:39:11:50:C0:13:5F:7C:15:08
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1f:63:8e:c3:89:dd:74:1c:71:8a:8c:17:f1:db:fc:6a:f6:
f2:19:6c:b8:7d:43:d4:55:a0:3f:87:0e:5c:0d:d1:a8:fd:7a:
0a:27:3d:fa:bd:90:c8:a3:dc:f2:c2:e7:ca:6b:38:02:fa:ef:
7c:0a:c7:0d:57:9e:5f:5c:51:d3:0d:fa:5e:b7:ab:83:d0:82:
8b:45:98:74:d9:9a:c5:38:e2:9e:c3:1d:cb:6d:7e:ad:99:f4:
af:47:16:c3:c6:24:0f:9a:10:38:97:de:72:c6:04:5b:26:d6:
93:c5:ba:3f:a6:a5:cc:d5:c2:bb:5a:ed:88:45:53:95:af:cd:
bd:83:37:33:2d:87:cd:41:35:38:28:87:59:67:60:74:c8:dc:
67:18:4e:e4:e9:7c:15:b4:a8:51:a1:5a:e8:18:9a:5c:05:be:
f0:9d:66:e5:03:42:5d:27:5f:68:ae:0e:b9:1e:42:27:3d:93:
91:ba:01:93:ee:dc:a0:dc:5d:00:ad:7f:54:a6:46:98:04:8e:
4f:99:db:f4:99:2f:0b:2f:9b:4c:59:ab:bf:c6:50:c3:ef:d1:
0d:e4:d9:1a:9d:c6:0f:c1:7a:4a:4c:e8:24:cb:39:d2:c2:44:
69:a3:07:45:89:e1:cc:c2:ad:e0:37:f3:7d:93:20:7f:7b:97:
a9:93:03:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yfrcUZxlm7MPx1LsTvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjAxZTkwODZkNDBkNTA4ZjU4NDJlOTgyZjI1MzY4OWY3
ZmU0YzkwHhcNMjYwMzI5MDUwMDM3WhcNMjYwMzMwMDUwMDM3WjAzMTEwLwYDVQQD
EyhiOTk1OTA4YjEyZDZhNDhhYjE0MzBjMzkxMTUwYzAxMzVmN2MxNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7hHvX+S42mSmpaTJdsvpFLnA1m
v9Ko4/2VkZd+3ijGW+BiNcRRg/77Wm+nRhl/zt7fJpr0ugWwas74M7Z7ts7xGhPa
QH6k07ElIH9E224yR8pQ7MEgmeljTiikF7NN1VSG6Vw0Ahb/GwqA9gbZf4ZUkrjq
g5oOLU+6/oRhT/rpZIs6AKSe/Vbg5tFEv8yZnhpleeBWs+Q+C9Zvy1jg1Bramu+4
AMFghJkKd+puUp+ko6dZ22W0Wxha/2+cruW8NRrMDgth5rk2Mej3YcLQxyb+AMcN
iYtlsAj5dehsJQLM+Bl51RbU5H1cIRdwAJuWBb/o/vZJ0/hHlpFKKzhJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmVkIsS1qSKsUMMORFQwBNffBUIMB8GA1UdIwQY
MBaAFJPwHpCG1A1Qj1hC6YLyU2iff+TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgt
ZTljOTJiNzFmNTBjLzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgtZTljOTJiNzFmNTBj
LzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh9jjsOJ
3XQccYqMF/Hb/Gr28hlsuH1D1FWgP4cOXA3RqP16Cic9+r2QyKPc8sLnyms4Avrv
fArHDVeeX1xR0w36Xrerg9CCi0WYdNmaxTjinsMdy21+rZn0r0cWw8YkD5oQOJfe
csYEWybWk8W6P6alzNXCu1rtiEVTla/NvYM3My2HzUE1OCiHWWdgdMjcZxhO5Ol8
FbSoUaFa6BiaXAW+8J1m5QNCXSdfaK4OuR5CJz2TkboBk+7coNxdAK1/VKZGmASO
T5nb9JkvCy+bTFmrv8ZQw+/RDeTZGp3GD8F6SkzoJMs50sJEaaMHRYnhzMKt4Dfz
fZMgf3uXqZMDsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client