Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: nmCs4e65zQys19vga4NZJRUuS8eWsX67H5sozjlgNuY=
Subject key identifier: EF:52:0A:F7:C2:8E:E0:C9:50:34:DB:F3:C2:9C:E5:8A:29:D4:6C:52
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019F190C7FD06ABADE8FBF676CB5DC110011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 1029
Signing time: Tue 30 Jun 2026 15:01:17 +0000
Manifest this update: Tue 30 Jun 2026 15:01:17 +0000
Manifest next update: Wed 01 Jul 2026 15:01:17 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: doQsXZ1HtVs8WIgWXGP+E5gZgBrZP31CZWCjMaLxgKg=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:7f:d0:6a:ba:de:8f:bf:67:6c:b5:dc:11:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jun 30 15:01:17 2026 GMT
Not After : Jul 1 15:01:17 2026 GMT
Subject: CN=ef520af7c28ee0c95034dbf3c29ce58a29d46c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:78:e4:07:b9:01:98:2d:29:cd:ae:fe:4a:
11:c1:c1:84:df:90:0b:ad:25:58:46:fa:41:62:88:
0b:e1:fb:fa:a6:0c:ed:58:22:22:84:29:d8:4b:f8:
9b:e9:c1:1c:e8:26:71:61:76:25:5d:15:54:72:66:
90:f3:25:e6:53:62:b9:fc:d2:7f:aa:5a:54:fa:75:
5d:26:0f:7b:da:8a:94:1b:55:62:92:69:59:1c:5a:
4e:94:b0:f0:2e:c9:b5:83:1b:60:4e:a1:ad:a1:7e:
7a:fe:f3:e7:5a:c0:36:a7:15:9d:f0:da:24:80:56:
f8:6d:3d:75:82:b2:bb:76:a1:58:71:36:72:72:b7:
86:03:6f:7e:d8:98:81:a3:6a:bb:d4:81:ef:e5:2a:
b9:2c:52:45:e9:04:43:0d:f3:bb:d5:6f:71:9f:95:
22:0d:c4:ff:72:a0:63:8b:36:37:79:c7:bd:9a:bb:
b1:e5:69:05:70:03:66:e9:b4:e0:d4:a1:c9:85:49:
bd:28:5d:02:e1:f6:6d:b3:0c:3d:a7:b3:95:82:95:
62:cd:61:53:ae:4a:90:29:52:f1:54:36:53:88:7f:
ce:ec:47:a9:00:dc:7c:d4:51:ef:19:80:c9:fa:d9:
54:68:45:52:f9:d9:3d:80:5d:67:0e:36:58:0f:83:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:0A:F7:C2:8E:E0:C9:50:34:DB:F3:C2:9C:E5:8A:29:D4:6C:52
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:58:05:54:9f:2d:97:e8:14:32:49:a5:8e:b3:75:ea:28:a6:
1c:9f:76:d4:8e:1b:8f:f1:a0:bb:4d:bc:9f:e2:af:0b:e8:6e:
6c:93:13:3c:fe:a2:eb:e4:29:b6:5b:62:da:36:d8:a8:25:fb:
e4:22:64:63:8b:3f:ce:6d:b7:63:2a:d6:a4:f7:62:e3:a7:f8:
36:55:94:20:49:8e:78:0e:7e:1b:d6:32:49:66:48:da:cd:b4:
92:ca:50:ef:42:71:02:ff:bc:52:25:11:f5:dd:53:5e:50:b8:
d8:2f:ff:b4:55:9e:c5:69:bb:84:d4:3d:e3:51:81:4e:e0:95:
46:e9:24:13:01:60:6c:36:7d:02:6f:4f:07:51:a8:7b:b5:1f:
7e:5a:88:57:da:54:47:32:42:1d:fb:54:0f:0a:23:0e:e9:7f:
8d:38:b2:64:73:35:c6:f2:8e:53:08:04:61:70:23:02:eb:8b:
61:ef:d1:83:86:a9:47:eb:9d:9e:d8:78:d5:88:3c:8e:77:e9:
47:fb:ab:d9:f5:63:2a:6d:00:99:13:fa:d7:ac:c8:f3:e2:c3:
83:97:a0:f6:b7:53:93:30:9e:4d:2c:72:4f:13:74:6d:49:4c:
ac:36:da:ef:7b:f4:e1:22:58:19:b2:38:32:2b:05:49:af:51:
25:81:34:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDH/Qarrej79nbLXcEQARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4
ZWRhOTEwHhcNMjYwNjMwMTUwMTE3WhcNMjYwNzAxMTUwMTE3WjAzMTEwLwYDVQQD
EyhlZjUyMGFmN2MyOGVlMGM5NTAzNGRiZjNjMjljZTU4YTI5ZDQ2YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveZ45Ae5AZgtKc2u/koRwcGE35AL
rSVYRvpBYogL4fv6pgztWCIihCnYS/ib6cEc6CZxYXYlXRVUcmaQ8yXmU2K5/NJ/
qlpU+nVdJg972oqUG1VikmlZHFpOlLDwLsm1gxtgTqGtoX56/vPnWsA2pxWd8Nok
gFb4bT11grK7dqFYcTZycreGA29+2JiBo2q71IHv5Sq5LFJF6QRDDfO71W9xn5Ui
DcT/cqBjizY3ece9mrux5WkFcANm6bTg1KHJhUm9KF0C4fZtsww9p7OVgpVizWFT
rkqQKVLxVDZTiH/O7EepANx81FHvGYDJ+tlUaEVS+dk9gF1nDjZYD4O9mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9SCvfCjuDJUDTb88Kc5Yop1GxSMB8GA1UdIwQY
MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt
ODE5ZGIxNmI2NmVlLzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl
LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlgFVJ8t
l+gUMkmljrN16iimHJ921I4bj/Ggu028n+KvC+hubJMTPP6i6+Qptlti2jbYqCX7
5CJkY4s/zm23YyrWpPdi46f4NlWUIEmOeA5+G9YySWZI2s20kspQ70JxAv+8UiUR
9d1TXlC42C//tFWexWm7hNQ941GBTuCVRukkEwFgbDZ9Am9PB1Goe7UfflqIV9pU
RzJCHftUDwojDul/jTiyZHM1xvKOUwgEYXAjAuuLYe/Rg4apR+udnth41Yg8jnfp
R/ur2fVjKm0AmRP616zI8+LDg5eg9rdTkzCeTSxyTxN0bUlMrDba73v04SJYGbI4
MisFSa9RJYE0uQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:10:28 2026 by rpki-client