Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: cWe//2N2ACEfMSUZfm6B9zlc4oy8Yb+gOG7m+8+HTIk=
Subject key identifier: 64:BD:FD:CB:99:C6:DC:56:F5:DF:F0:82:3D:41:0E:C6:9F:85:DA:07
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 019D3A1CD64650F712A402694E4C63F827A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 15D4
Signing time: Sun 29 Mar 2026 15:01:01 +0000
Manifest this update: Sun 29 Mar 2026 15:01:01 +0000
Manifest next update: Mon 30 Mar 2026 15:01:01 +0000
Files and hashes: 1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: AseQ35GOGdWUbQbMwLFUR0VoDPwntjWbMLpRdYE+WZo=)
4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d6:46:50:f7:12:a4:02:69:4e:4c:63:f8:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Mar 29 15:01:01 2026 GMT
Not After : Mar 30 15:01:01 2026 GMT
Subject: CN=64bdfdcb99c6dc56f5dff0823d410ec69f85da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:9b:07:25:a6:64:ec:de:35:45:ab:c3:b5:
e0:0b:02:1f:8a:ba:7a:fb:16:a0:06:3d:b4:6e:16:
fe:c4:0b:bb:5a:66:43:39:1f:54:50:b9:52:33:7a:
ee:05:ce:36:b3:c2:a6:83:8b:d6:02:15:5e:39:87:
52:2c:41:cb:3a:c4:9f:38:26:b4:3c:18:7c:20:f4:
18:ec:08:19:6f:95:6c:41:cd:bf:3e:a0:84:8f:f7:
4c:92:c6:e1:c4:34:32:2a:95:41:c0:e9:6d:34:6a:
fb:54:95:1d:06:47:81:8b:be:f3:a8:24:37:41:4e:
4c:2c:75:b4:b4:83:6d:aa:df:28:97:b7:bf:4e:fa:
c7:0f:a1:98:16:88:4c:7f:a6:df:51:3b:93:d4:d9:
e8:ce:65:b6:4e:2b:2e:a0:80:fd:00:35:9b:f2:c0:
28:e3:ba:52:2a:2b:17:21:8a:54:43:3f:00:cf:a7:
72:b4:5d:c7:07:fe:65:77:3a:8d:60:cd:b3:6a:5e:
03:fe:2c:de:2e:c5:83:c3:fd:06:86:50:87:62:1d:
35:e6:a8:bc:da:f6:50:89:f2:b6:93:b3:87:8c:ad:
4f:b7:4a:5c:fc:c5:23:96:e6:2d:a1:35:99:55:62:
d2:51:e4:31:2f:27:2b:e3:f1:34:2b:18:d0:84:78:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:FD:CB:99:C6:DC:56:F5:DF:F0:82:3D:41:0E:C6:9F:85:DA:07
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:71:46:a2:24:93:a3:c2:f0:51:4b:d5:1a:1b:a6:dd:25:
57:66:f5:ea:dc:e5:76:72:ac:56:de:c7:51:8a:f2:b8:fd:50:
54:67:e0:a8:bb:3a:eb:17:03:91:38:b5:3d:ed:62:b3:a3:4b:
c9:10:c1:ac:2e:4a:35:9a:27:83:b0:cc:fd:9f:55:a7:ed:13:
cf:dd:b8:38:03:76:24:4c:79:ab:05:ec:2e:b6:98:84:16:54:
52:6d:01:04:73:a7:0d:55:4d:3b:9a:38:73:df:3d:06:2b:d7:
5d:ab:54:64:69:c8:a8:95:32:d5:fd:a8:93:5b:d0:d0:cd:8f:
91:7f:f9:08:fc:26:e9:3d:22:ed:56:6d:f5:94:5a:fb:93:51:
b4:2e:0c:55:a6:b2:ff:7e:63:00:98:9f:76:af:3f:0a:19:b1:
78:7d:3e:2e:0e:c5:fe:51:85:22:c8:2c:db:e8:ae:0c:a5:5f:
37:04:63:5c:c2:ca:c6:e3:8f:6b:50:b1:68:cd:70:66:81:e9:
09:99:77:ac:1f:71:64:d6:95:09:77:19:0a:4a:56:e3:7e:4a:
12:82:26:bf:86:87:a3:11:3d:15:46:f6:e0:eb:54:44:5a:a5:
b3:05:1d:0c:b7:a3:36:17:a9:37:09:eb:95:5f:2b:ef:14:c9:
00:12:1c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNZGUPcSpAJpTkxj+CegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1
NTBlYmQwHhcNMjYwMzI5MTUwMTAxWhcNMjYwMzMwMTUwMTAxWjAzMTEwLwYDVQQD
Eyg2NGJkZmRjYjk5YzZkYzU2ZjVkZmYwODIzZDQxMGVjNjlmODVkYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkESbByWmZOzeNUWrw7XgCwIfirp6
+xagBj20bhb+xAu7WmZDOR9UULlSM3ruBc42s8Kmg4vWAhVeOYdSLEHLOsSfOCa0
PBh8IPQY7AgZb5VsQc2/PqCEj/dMksbhxDQyKpVBwOltNGr7VJUdBkeBi77zqCQ3
QU5MLHW0tINtqt8ol7e/TvrHD6GYFohMf6bfUTuT1NnozmW2TisuoID9ADWb8sAo
47pSKisXIYpUQz8Az6dytF3HB/5ldzqNYM2zal4D/izeLsWDw/0GhlCHYh015qi8
2vZQifK2k7OHjK1Pt0pc/MUjluYtoTWZVWLSUeQxLycr4/E0KxjQhHhDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS9/cuZxtxW9d/wgj1BDsafhdoHMB8GA1UdIwQY
MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt
MzE5NzExMDA5N2M5LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5
LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy9xRqIk
k6PC8FFL1Robpt0lV2b16tzldnKsVt7HUYryuP1QVGfgqLs66xcDkTi1Pe1is6NL
yRDBrC5KNZong7DM/Z9Vp+0Tz924OAN2JEx5qwXsLraYhBZUUm0BBHOnDVVNO5o4
c989BivXXatUZGnIqJUy1f2ok1vQ0M2PkX/5CPwm6T0i7VZt9ZRa+5NRtC4MVaay
/35jAJifdq8/ChmxeH0+Lg7F/lGFIsgs2+iuDKVfNwRjXMLKxuOPa1CxaM1wZoHp
CZl3rB9xZNaVCXcZCkpW435KEoImv4aHoxE9FUb24OtURFqlswUdDLejNhepNwnr
lV8r7xTJABIcmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:11 2026 by rpki-client