Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: ILppKS0QRz0OY5oFpbnqxmPIgrOLQ5FK1MYAYssezJ4=
Subject key identifier: 6D:55:2C:3D:FD:06:D6:D4:86:BE:C1:48:94:D2:A2:87:45:D5:F3:72
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019D3940A889F8FF36CF0A8FE90E0B518EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 14C4
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: Yljy3bYcWOQZjzCbMrL4T2+CD5AC+KKJEG0/zQCq+08=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a8:89:f8:ff:36:cf:0a:8f:e9:0e:0b:51:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=6d552c3dfd06d6d486bec14894d2a28745d5f372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:c2:d1:7b:6d:14:a3:a9:4d:bc:98:74:7f:
3a:b5:55:8b:b9:b4:91:ac:e8:16:01:a8:41:a9:77:
46:c9:e7:d3:56:82:c1:ce:c7:01:da:96:06:77:52:
f2:89:af:15:c3:60:55:33:1d:71:fa:35:95:34:37:
3f:b7:ac:fc:15:a5:f4:73:c4:28:d4:5c:88:06:71:
65:ff:6f:67:56:a6:66:7d:b0:2d:4c:a5:45:05:ff:
2c:25:4d:5e:7e:72:d9:b3:89:7d:31:57:f3:cc:23:
0d:1e:47:27:5d:65:94:07:45:88:cf:c3:ae:25:93:
2f:47:17:8f:29:0b:9e:dc:3f:f3:78:6f:e2:62:80:
9d:71:af:2c:40:ff:88:c0:57:64:84:34:95:b5:41:
aa:96:8d:a0:d3:aa:13:09:10:51:d5:43:41:66:b9:
b1:e9:7c:fd:bf:da:87:8c:3b:75:9d:b6:4e:24:43:
a6:88:99:9d:2d:88:85:cd:e7:6c:6b:b2:21:2a:84:
9a:60:86:ef:97:e0:1b:4e:4e:c5:6d:3a:e1:32:53:
a9:ac:48:41:15:d9:2a:0f:b3:17:9b:0f:e0:7f:89:
a7:54:5c:75:47:31:31:49:dc:19:9b:db:62:a0:28:
6c:6f:e3:5c:91:ff:ca:84:e6:f0:5c:ac:b4:76:b3:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:2C:3D:FD:06:D6:D4:86:BE:C1:48:94:D2:A2:87:45:D5:F3:72
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fb:ad:ee:dc:5b:f6:23:54:35:c5:44:95:d9:bc:7a:bb:dc:
4f:fa:b9:a9:ad:ed:83:e9:3a:01:22:f9:df:a8:a4:51:2a:16:
3b:9d:e7:12:ed:42:71:96:8d:80:88:38:42:16:9e:4a:b0:0b:
8f:d7:c6:53:21:5d:24:69:32:94:37:40:f0:41:43:f3:7d:01:
dd:f5:20:74:40:92:5c:78:87:03:fc:c4:57:b9:aa:d7:3b:7a:
b8:54:52:63:dc:08:ee:7b:44:93:69:80:7e:ca:3d:7a:da:aa:
a6:fb:f7:8c:0d:23:fc:21:4d:39:a6:b9:7b:06:c8:6c:ce:45:
82:26:e8:47:fb:de:f6:a2:97:7c:2d:40:9f:2f:2e:27:cf:a0:
48:21:9c:dc:d6:59:5c:42:1c:4a:22:f8:f9:d0:21:5a:f2:29:
19:3d:24:9d:3b:95:1b:83:41:a3:3b:ec:05:4a:6f:6e:45:86:
60:47:1d:99:cf:e9:af:da:5f:f7:24:79:46:37:ad:8b:37:e4:
f5:10:ed:c0:64:2b:95:ed:8b:a1:f9:6c:5f:34:28:e4:b7:3d:
c5:27:db:dd:77:f4:31:da:4a:d0:98:48:58:92:80:88:4a:9c:
06:14:76:cc:a3:05:a6:42:1b:b6:73:d8:26:b9:1c:94:89:d6:
00:95:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client