Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
File: aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft (raw, json)
Hash identifier: dCQx2lEYu3jZT0rpY+cIRlpTBOCB9CCGhYV+Nx8XwoI=
Subject key identifier: 3D:D1:3B:10:14:C9:E8:67:3E:90:DA:FC:C4:DE:0A:0E:4C:5A:C4:60
Authority key identifier: 69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
Certificate issuer: /CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Certificate serial: 019DCE99ADCD388145F572C36F194D71CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
Manifest number: C9
Signing time: Mon 27 Apr 2026 11:01:11 +0000
Manifest this update: Mon 27 Apr 2026 11:01:11 +0000
Manifest next update: Tue 28 Apr 2026 11:01:11 +0000
Files and hashes: 1: aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl (hash: ewWyYNGmJvU74nrKosMvt86X55NyIqL3+YJlRiXc0rM=)
2: iIOXM7fDnZZmLqGkbHXHXQKGGa4.roa (hash: A/Iygha2SGjwHmAbZm3zd/UIf3Y/PB7zRPxZUCvbMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:ad:cd:38:81:45:f5:72:c3:6f:19:4d:71:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694ea82c16223c4778b12f098e721b52e5eccf7b
Validity
Not Before: Apr 27 11:01:11 2026 GMT
Not After : Apr 28 11:01:11 2026 GMT
Subject: CN=3dd13b1014c9e8673e90dafcc4de0a0e4c5ac460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:47:b2:2b:ef:9f:3a:f8:6b:78:16:82:d3:
e5:fb:f0:ab:d7:9f:36:5f:24:d1:01:43:c8:fa:bf:
1f:2c:6c:87:56:08:a8:58:6b:a1:54:84:eb:54:6d:
f5:20:52:66:cc:dd:5e:e6:6d:88:6c:45:14:87:59:
e7:6e:b4:1c:e4:b1:32:01:37:b1:1b:fb:1a:49:37:
2e:ca:ac:ad:48:40:21:bd:e5:22:9f:a3:13:45:a1:
93:7d:4a:d8:66:88:99:91:e9:0f:b3:b3:50:b6:ef:
41:b8:8d:84:16:fe:a7:f6:86:91:e5:2e:cc:1c:61:
54:ca:9d:6c:1c:72:ba:ec:fc:ee:f6:f3:83:d4:96:
6f:08:97:d9:64:b9:97:dd:4d:eb:1a:b4:99:df:5f:
cf:9e:bb:8d:d4:63:e5:4d:fd:c2:82:e9:a0:9a:06:
f6:b8:63:8c:59:0a:c6:69:f7:b3:df:be:7a:48:90:
e1:ed:9e:f5:ce:b7:60:09:3c:75:22:f9:a1:4e:62:
86:ee:5b:41:ac:86:6e:a4:a7:ee:97:b2:d6:75:a4:
ff:5c:87:27:2d:bf:68:c7:07:d0:50:6a:97:b3:ce:
ca:fa:a8:23:f2:1d:d5:de:57:17:bd:67:28:76:11:
7e:20:e6:2f:78:12:1f:3a:e1:b7:95:e9:9a:35:8c:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:3B:10:14:C9:E8:67:3E:90:DA:FC:C4:DE:0A:0E:4C:5A:C4:60
X509v3 Authority Key Identifier:
keyid:69:4E:A8:2C:16:22:3C:47:78:B1:2F:09:8E:72:1B:52:E5:EC:CF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU6oLBYiPEd4sS8JjnIbUuXsz3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af1299-d4a1-439a-8511-2abc1e385465/1/aU6oLBYiPEd4sS8JjnIbUuXsz3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:3c:e6:00:e0:f9:c0:73:04:43:e0:00:5f:f3:c3:5e:2e:
c8:ae:cf:74:47:c6:0f:33:10:1f:d5:64:ee:91:62:54:fe:21:
01:b4:a9:89:c6:19:29:12:da:8c:3a:1f:13:6d:5c:d3:9f:6e:
09:80:e8:43:e5:cf:62:c1:e3:fd:b2:1f:42:91:a1:80:9c:6e:
aa:d8:31:b3:ef:a6:d1:b7:e9:75:34:0f:8a:40:b1:63:13:a4:
88:57:4c:6d:71:d3:d9:8e:c1:ad:b3:c7:f5:f7:ce:29:5a:70:
b0:ad:7c:f9:df:8b:4d:8e:62:46:3d:75:e3:e1:a8:41:94:fc:
c3:4f:d6:75:e8:4a:30:96:a3:2e:d2:dc:8c:b9:e7:83:fd:c7:
61:b8:07:9a:5a:a5:01:3d:ee:d4:75:a2:16:57:d4:6e:de:dd:
27:ae:15:1c:ab:f6:53:6d:84:d1:fd:db:f6:e0:76:51:12:3d:
05:21:86:93:c4:01:d4:45:d8:b1:4e:43:dd:17:a6:f9:ec:c2:
45:8f:8f:42:0b:dd:50:ec:95:48:b0:1e:f4:8f:e4:63:a5:b1:
22:63:96:c4:0a:7d:9a:bf:bf:cc:7c:42:9f:5d:5f:2c:e2:fc:
1c:9b:16:d4:fb:5f:b2:f8:5d:60:b0:71:88:57:33:c7:0f:09:
f6:b3:7e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Oma3NOIFF9XLDbxlNcc9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGVhODJjMTYyMjNjNDc3OGIxMmYwOThlNzIxYjUyZTVl
Y2NmN2IwHhcNMjYwNDI3MTEwMTExWhcNMjYwNDI4MTEwMTExWjAzMTEwLwYDVQQD
EygzZGQxM2IxMDE0YzllODY3M2U5MGRhZmNjNGRlMGEwZTRjNWFjNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ilHsivvnzr4a3gWgtPl+/Cr1582
XyTRAUPI+r8fLGyHVgioWGuhVITrVG31IFJmzN1e5m2IbEUUh1nnbrQc5LEyATex
G/saSTcuyqytSEAhveUin6MTRaGTfUrYZoiZkekPs7NQtu9BuI2EFv6n9oaR5S7M
HGFUyp1sHHK67Pzu9vOD1JZvCJfZZLmX3U3rGrSZ31/PnruN1GPlTf3Cgumgmgb2
uGOMWQrGafez3756SJDh7Z71zrdgCTx1IvmhTmKG7ltBrIZupKful7LWdaT/XIcn
Lb9oxwfQUGqXs87K+qgj8h3V3lcXvWcodhF+IOYveBIfOuG3lemaNYwCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3ROxAUyehnPpDa/MTeCg5MWsRgMB8GA1UdIwQY
MBaAFGlOqCwWIjxHeLEvCY5yG1Ll7M97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU2b0xCWWlQRWQ0c1M4SmpuSWJVdVhzejNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjEyOTktZDRhMS00MzlhLTg1MTEt
MmFiYzFlMzg1NDY1LzEvYVU2b0xCWWlQRWQ0c1M4SmpuSWJVdVhzejNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjEyOTktZDRhMS00MzlhLTg1MTEtMmFiYzFlMzg1NDY1
LzEvYVU2b0xCWWlQRWQ0c1M4SmpuSWJVdVhzejNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPU85gDg
+cBzBEPgAF/zw14uyK7PdEfGDzMQH9Vk7pFiVP4hAbSpicYZKRLajDofE21c059u
CYDoQ+XPYsHj/bIfQpGhgJxuqtgxs++m0bfpdTQPikCxYxOkiFdMbXHT2Y7BrbPH
9ffOKVpwsK18+d+LTY5iRj114+GoQZT8w0/WdehKMJajLtLcjLnng/3HYbgHmlql
AT3u1HWiFlfUbt7dJ64VHKv2U22E0f3b9uB2URI9BSGGk8QB1EXYsU5D3Rem+ezC
RY+PQgvdUOyVSLAe9I/kY6WxImOWxAp9mr+/zHxCn11fLOL8HJsW1PtfsvhdYLBx
iFczxw8J9rN+CA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:41:52 2026 by rpki-client