Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: tyRDSyaJQF35U3Hk5QLGzxJhEzZBptfpxszZSShqSh8=
Subject key identifier: A6:1E:C8:18:48:E3:2E:C4:63:A6:70:6F:B9:FB:13:67:42:DA:1F:FD
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019D389C1AFF06FEEAAF8DF32FBEAF450CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: CpSiy1fff6oq8rUZ0dJ3tmNPnNrCulwRinAnS/k5/qo=)
2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1a:ff:06:fe:ea:af:8d:f3:2f:be:af:45:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=a61ec81848e32ec463a6706fb9fb136742da1ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:12:f8:64:a3:7e:34:3b:eb:42:13:e1:f0:
7d:98:dd:12:d9:4a:ba:53:07:1c:98:72:41:dd:11:
13:0e:b3:54:80:14:0c:54:01:16:a3:e0:fc:b8:78:
c3:b3:f5:6b:55:cb:28:fe:35:f9:6e:b0:5f:d5:d9:
71:79:40:8b:03:79:c4:a7:b2:b8:ef:31:78:34:40:
36:a2:70:0b:e3:49:8a:90:f5:68:db:80:f3:14:59:
15:6d:6b:54:bd:12:86:90:b4:9a:86:15:a1:86:b4:
f7:57:43:60:42:85:87:2a:5a:1c:16:b9:11:e6:8e:
16:55:1c:8a:52:6e:cc:ad:ff:5d:fd:9a:6d:44:a9:
32:e7:d8:fb:ce:fe:27:55:a6:5d:b4:56:b7:de:77:
95:cf:10:36:2c:31:10:aa:35:cb:b4:0b:c4:24:c9:
af:a2:91:51:ed:b9:63:78:d7:d7:e3:d3:7c:ec:68:
e7:7e:d7:24:cd:f5:52:dd:a8:97:7d:a1:d0:2b:e0:
4e:09:7f:10:a9:9b:84:fd:7d:88:24:fb:e6:b3:29:
8b:b9:02:62:ee:5e:1f:08:49:34:f9:d6:f4:15:94:
5a:46:e6:8d:da:b0:b6:6e:26:96:43:8c:39:4e:88:
93:53:98:16:48:eb:42:d3:e1:9b:0d:b1:38:db:6f:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:C8:18:48:E3:2E:C4:63:A6:70:6F:B9:FB:13:67:42:DA:1F:FD
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ce:97:4e:2c:2c:82:66:99:c2:7e:4b:8b:38:16:16:2b:1e:
ae:24:0d:42:9c:90:e4:89:46:5c:80:37:9d:cc:5a:e0:9c:ce:
d0:26:c6:45:c7:b6:82:08:9c:d9:4b:ae:cb:7c:82:2a:a5:08:
16:87:04:48:c1:e1:e1:46:7f:d9:a0:33:a2:f2:73:2a:2e:2c:
8d:a5:4a:1b:a7:e6:a9:e3:e3:07:3f:34:b3:1a:6b:bf:ef:7c:
73:c8:a3:be:11:de:75:a4:e4:b6:24:e6:00:41:e9:99:cd:9c:
8a:1b:5c:b1:1c:f0:33:72:5f:a4:f6:c5:42:4a:3c:89:ec:85:
11:6a:81:af:53:bd:14:12:48:19:7f:87:a1:33:d7:c3:9a:6a:
1c:fe:59:0a:13:27:ea:ce:e7:05:ae:33:31:1f:88:f4:f5:e6:
22:ab:4e:7a:98:c0:8a:84:c2:dc:50:52:e2:01:56:2f:e9:57:
17:cc:d5:79:5c:93:a7:9a:02:bd:e3:33:e7:09:0e:00:3b:50:
57:fd:fb:f6:bb:c5:ea:dc:a1:7c:a8:94:a4:4b:0a:37:26:39:
f2:f6:5a:48:20:86:fb:7c:40:23:e9:db:02:6b:64:14:df:5b:
5e:52:d0:e6:9c:d8:e7:40:83:7c:36:4c:86:2c:7d:b0:5c:8f:
15:d8:ee:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBr/Bv7qr43zL76vRQziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
EyhhNjFlYzgxODQ4ZTMyZWM0NjNhNjcwNmZiOWZiMTM2NzQyZGExZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KsS+GSjfjQ760IT4fB9mN0S2Uq6
UwccmHJB3RETDrNUgBQMVAEWo+D8uHjDs/VrVcso/jX5brBf1dlxeUCLA3nEp7K4
7zF4NEA2onAL40mKkPVo24DzFFkVbWtUvRKGkLSahhWhhrT3V0NgQoWHKlocFrkR
5o4WVRyKUm7Mrf9d/ZptRKky59j7zv4nVaZdtFa33neVzxA2LDEQqjXLtAvEJMmv
opFR7bljeNfX49N87GjnftckzfVS3aiXfaHQK+BOCX8QqZuE/X2IJPvmsymLuQJi
7l4fCEk0+db0FZRaRuaN2rC2biaWQ4w5ToiTU5gWSOtC0+GbDbE422/HlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYeyBhI4y7EY6Zwb7n7E2dC2h/9MB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAus6XTiws
gmaZwn5LizgWFiseriQNQpyQ5IlGXIA3ncxa4JzO0CbGRce2ggic2Uuuy3yCKqUI
FocESMHh4UZ/2aAzovJzKi4sjaVKG6fmqePjBz80sxprv+98c8ijvhHedaTktiTm
AEHpmc2cihtcsRzwM3JfpPbFQko8ieyFEWqBr1O9FBJIGX+HoTPXw5pqHP5ZChMn
6s7nBa4zMR+I9PXmIqtOepjAioTC3FBS4gFWL+lXF8zVeVyTp5oCveMz5wkOADtQ
V/379rvF6tyhfKiUpEsKNyY58vZaSCCG+3xAI+nbAmtkFN9bXlLQ5pzY50CDfDZM
hix9sFyPFdju/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:38 2026 by rpki-client