Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: 1QbakirEqTfGHCPQbuLG1RZKLsZPZfiElfcEGltjJlA=
Subject key identifier: 46:C4:45:E2:EE:12:C8:5D:81:20:A4:EE:3B:D7:23:5C:62:88:19:ED
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019CEAEF698B722A12818458EF702DF3BF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 1133
Signing time: Sat 14 Mar 2026 06:01:24 +0000
Manifest this update: Sat 14 Mar 2026 06:01:24 +0000
Manifest next update: Sun 15 Mar 2026 06:01:24 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: BhFegxdYy2vnSLOzkusTXo7MaqQHMMBl2s1Gci6MSzw=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:ef:69:8b:72:2a:12:81:84:58:ef:70:2d:f3:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Mar 14 06:01:24 2026 GMT
Not After : Mar 15 06:01:24 2026 GMT
Subject: CN=46c445e2ee12c85d8120a4ee3bd7235c628819ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:80:0d:0b:d9:0e:99:23:cf:52:d2:76:93:
d9:d5:3b:48:3b:d3:13:f7:a4:ee:97:c0:05:0f:f3:
aa:c8:47:30:84:8c:6a:04:85:02:1a:06:5b:46:99:
cf:ee:bd:ea:3b:04:29:62:4a:1e:26:ac:df:d5:a2:
2d:2b:88:95:83:1f:77:53:20:cd:d2:c0:9a:40:46:
a3:fc:2f:09:96:ea:3e:3c:59:dd:72:9e:cd:bb:31:
98:5c:c3:f2:9b:10:7f:c0:f2:ba:ec:fd:20:be:b5:
c0:8d:82:39:27:5d:94:6e:bd:f4:72:1d:90:f3:55:
c7:37:81:a8:6c:17:68:05:d6:da:bf:42:61:7e:06:
72:63:16:9b:6a:82:c2:8f:e9:ab:98:a6:c8:58:ab:
25:58:94:12:96:f6:90:b3:3b:a4:35:07:d6:88:d7:
fd:78:16:e1:ae:35:b6:67:bc:4b:73:de:9b:ba:52:
cc:62:ed:b4:ff:1f:cd:de:78:87:3a:e0:79:57:75:
9d:3e:3e:89:62:a5:be:fd:e4:21:35:1c:10:46:1b:
de:37:26:1e:de:44:78:f4:98:81:6a:94:42:70:c4:
93:15:78:5a:09:81:e2:54:c7:7d:a9:c1:35:5e:b0:
24:2c:b2:b8:79:7e:47:d0:2c:4a:21:3a:19:e3:cc:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:45:E2:EE:12:C8:5D:81:20:A4:EE:3B:D7:23:5C:62:88:19:ED
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:da:e6:f4:73:bb:70:3c:c5:bd:1c:b4:52:c2:17:b6:86:
6a:93:f2:44:47:ab:22:b6:d0:a1:3c:67:10:5f:ff:2d:47:24:
1e:c3:a1:92:b5:10:a8:22:f9:3b:23:61:14:31:52:c2:dc:4c:
f4:5b:ee:67:76:21:1a:cc:b3:4e:c9:f6:b6:eb:98:e9:c3:e5:
ab:b1:fb:ea:57:c7:b9:95:03:3e:5e:fc:53:41:de:ae:a1:82:
55:16:da:29:8a:07:83:9f:e1:d4:21:af:3e:1b:53:e9:8b:91:
44:32:96:05:03:8d:ca:bd:5e:63:12:7a:0b:9d:af:ac:3b:1e:
3c:03:33:0e:9f:a9:35:e7:42:53:87:a1:97:7d:88:5f:a5:b7:
16:65:ea:14:f7:c4:7e:b6:ff:bd:b4:e9:63:4d:a5:af:71:80:
36:61:97:1c:66:8b:26:96:26:a4:67:b8:5f:4b:60:ed:79:f2:
a7:fb:f3:31:03:32:8f:fd:08:4c:21:f2:a5:d9:f9:6b:f2:44:
a0:5b:1a:11:dc:37:26:73:c1:86:8c:bd:ee:ad:3e:4f:d0:61:
29:e3:7f:8f:c8:5b:50:09:cb:c9:d5:47:50:e1:05:8f:5a:4b:
73:86:d5:54:71:a0:7c:72:46:1d:81:55:4f:57:84:01:0c:b0:
26:06:0a:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzq72mLcioSgYRY73At87+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw
YWIzODcwHhcNMjYwMzE0MDYwMTI0WhcNMjYwMzE1MDYwMTI0WjAzMTEwLwYDVQQD
Eyg0NmM0NDVlMmVlMTJjODVkODEyMGE0ZWUzYmQ3MjM1YzYyODgxOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR6ADQvZDpkjz1LSdpPZ1TtIO9MT
96Tul8AFD/OqyEcwhIxqBIUCGgZbRpnP7r3qOwQpYkoeJqzf1aItK4iVgx93UyDN
0sCaQEaj/C8Jluo+PFndcp7NuzGYXMPymxB/wPK67P0gvrXAjYI5J12Ubr30ch2Q
81XHN4GobBdoBdbav0JhfgZyYxabaoLCj+mrmKbIWKslWJQSlvaQszukNQfWiNf9
eBbhrjW2Z7xLc96bulLMYu20/x/N3niHOuB5V3WdPj6JYqW+/eQhNRwQRhveNyYe
3kR49JiBapRCcMSTFXhaCYHiVMd9qcE1XrAkLLK4eX5H0CxKIToZ48wGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbEReLuEshdgSCk7jvXI1xiiBntMB8GA1UdIwQY
MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt
ZWQwN2Y1Y2FkNmQ3LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3
LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8Xa5vRz
u3A8xb0ctFLCF7aGapPyREerIrbQoTxnEF//LUckHsOhkrUQqCL5OyNhFDFSwtxM
9FvuZ3YhGsyzTsn2tuuY6cPlq7H76lfHuZUDPl78U0HerqGCVRbaKYoHg5/h1CGv
PhtT6YuRRDKWBQONyr1eYxJ6C52vrDsePAMzDp+pNedCU4ehl32IX6W3FmXqFPfE
frb/vbTpY02lr3GANmGXHGaLJpYmpGe4X0tg7Xnyp/vzMQMyj/0ITCHypdn5a/JE
oFsaEdw3JnPBhoy97q0+T9BhKeN/j8hbUAnLydVHUOEFj1pLc4bVVHGgfHJGHYFV
T1eEAQywJgYKtg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:46 2026 by rpki-client