Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: c4E7LZnUq9e5RhkI8zySHcZSha7pcEdKyK8uJuUOpfg=
Subject key identifier: 8E:9C:DB:22:F7:33:01:F7:32:3B:E8:D8:5C:2E:EB:C1:D0:45:CB:4F
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019D3AC1903C30200EB90D804B95D6AC0937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 07BC
Signing time: Sun 29 Mar 2026 18:00:56 +0000
Manifest this update: Sun 29 Mar 2026 18:00:56 +0000
Manifest next update: Mon 30 Mar 2026 18:00:56 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: gO1WaGH+bnaTWcNyN3mHfb8vPVR87hnzrGtK2HP8rWA=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:90:3c:30:20:0e:b9:0d:80:4b:95:d6:ac:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Mar 29 18:00:56 2026 GMT
Not After : Mar 30 18:00:56 2026 GMT
Subject: CN=8e9cdb22f73301f7323be8d85c2eebc1d045cb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:dc:73:1b:b0:a8:05:be:8f:a8:6a:89:67:
32:53:a0:f6:e8:c0:04:73:2d:07:2d:16:55:24:a4:
81:1f:e1:2d:91:dd:53:54:37:6f:74:b2:f0:4d:fa:
97:96:f2:9c:5b:0f:29:77:fa:41:43:7d:34:50:e2:
f7:de:62:00:d1:1d:6c:7d:f2:e1:f1:ba:0e:9b:b8:
55:4b:d4:4a:e1:de:c5:06:df:a5:94:4b:f6:c4:c1:
1b:33:58:c1:1a:af:9b:49:83:e2:39:62:19:46:34:
78:d4:e9:12:a9:c1:81:46:37:f3:f9:17:f4:91:14:
15:a4:1b:6f:c1:c0:15:0f:b0:e9:1f:aa:b8:88:ad:
63:d6:94:7c:ff:a0:9a:97:69:2a:a3:43:21:cb:40:
62:2e:68:69:1c:6f:53:12:8d:44:bd:20:e6:fa:93:
70:66:19:d5:a7:61:7a:5e:8e:5b:00:b1:08:2d:e9:
89:d8:67:c9:43:6d:70:e2:e5:02:c6:f2:a0:0f:ac:
0e:b1:7c:e3:2f:35:ca:5f:5d:a1:9d:4a:ee:81:3e:
23:17:bb:5f:dd:35:fa:9d:22:00:fa:74:5d:c1:ec:
08:a8:f6:90:41:cb:5a:d1:9f:b5:78:70:52:d9:24:
6c:34:a1:ad:54:29:67:6d:17:2e:94:46:a4:c5:31:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:DB:22:F7:33:01:F7:32:3B:E8:D8:5C:2E:EB:C1:D0:45:CB:4F
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fd:dc:d5:ea:40:83:c1:38:1d:02:42:ab:8e:6c:02:84:a3:
1e:f6:ce:de:7c:ca:44:ae:dd:59:52:7a:97:7d:f2:84:79:2f:
2a:9d:ff:9b:0f:a1:bd:75:46:3e:c3:91:35:1e:34:e6:fa:f0:
63:d6:06:e1:3f:f9:0e:58:b2:23:ce:5c:48:68:2d:0f:6c:23:
33:2b:23:0a:1d:15:ab:2b:a3:d0:fa:67:e4:bc:d8:fe:f8:b9:
01:e3:85:15:91:8b:0b:51:b9:2d:86:28:07:c7:56:e0:b2:0a:
57:c2:52:3a:a6:0e:59:af:ef:f7:c1:64:d0:ac:e4:18:93:12:
9d:e2:1d:df:ae:63:8d:b8:c6:76:17:a3:5c:80:51:db:9e:25:
d2:de:64:40:43:e0:5d:fc:6e:63:39:5b:f8:27:0e:dd:c9:4a:
99:f3:0d:ca:c1:1d:f4:eb:35:83:2e:0d:f6:b8:34:ca:e5:eb:
a7:0b:be:ff:aa:1c:63:c4:96:6d:ef:8f:78:5c:8e:57:a5:59:
52:d6:54:06:00:c3:f4:c8:70:6d:70:7d:f3:28:fe:66:24:ac:
68:5b:d5:3d:77:52:b2:49:cd:89:e3:c2:85:78:ec:74:0a:12:
6f:f4:3b:43:9a:0e:19:7c:d3:0e:b2:52:2c:f3:89:87:de:14:
74:11:c5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wZA8MCAOuQ2AS5XWrAk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjYwMzI5MTgwMDU2WhcNMjYwMzMwMTgwMDU2WjAzMTEwLwYDVQQD
Eyg4ZTljZGIyMmY3MzMwMWY3MzIzYmU4ZDg1YzJlZWJjMWQwNDVjYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LccxuwqAW+j6hqiWcyU6D26MAE
cy0HLRZVJKSBH+Etkd1TVDdvdLLwTfqXlvKcWw8pd/pBQ300UOL33mIA0R1sffLh
8boOm7hVS9RK4d7FBt+llEv2xMEbM1jBGq+bSYPiOWIZRjR41OkSqcGBRjfz+Rf0
kRQVpBtvwcAVD7DpH6q4iK1j1pR8/6Cal2kqo0Mhy0BiLmhpHG9TEo1EvSDm+pNw
ZhnVp2F6Xo5bALEILemJ2GfJQ21w4uUCxvKgD6wOsXzjLzXKX12hnUrugT4jF7tf
3TX6nSIA+nRdwewIqPaQQcta0Z+1eHBS2SRsNKGtVClnbRculEakxTEuFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6c2yL3MwH3Mjvo2Fwu68HQRctPMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGP3c1epA
g8E4HQJCq45sAoSjHvbO3nzKRK7dWVJ6l33yhHkvKp3/mw+hvXVGPsORNR405vrw
Y9YG4T/5DliyI85cSGgtD2wjMysjCh0Vqyuj0Ppn5LzY/vi5AeOFFZGLC1G5LYYo
B8dW4LIKV8JSOqYOWa/v98Fk0KzkGJMSneId365jjbjGdhejXIBR254l0t5kQEPg
XfxuYzlb+CcO3clKmfMNysEd9Os1gy4N9rg0yuXrpwu+/6ocY8SWbe+PeFyOV6VZ
UtZUBgDD9MhwbXB98yj+ZiSsaFvVPXdSsknNiePChXjsdAoSb/Q7Q5oOGXzTDrJS
LPOJh94UdBHFJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:45 2026 by rpki-client