Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: qWnJJ5yd/EBuQgHwM9rZn1B/yHP0GLKhYDc81y1+9B8=
Subject key identifier: 2F:EF:6E:8C:77:92:CB:6C:A0:F4:97:F8:A9:6B:46:CA:A4:2C:22:E8
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019DD019D01EEE942857AE4A7B3558482635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 18:00:45 +0000
Manifest this update: Mon 27 Apr 2026 18:00:45 +0000
Manifest next update: Tue 28 Apr 2026 18:00:45 +0000
Files and hashes: 1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: CFyfYw/EsiWeaq2G0ES0BFWwvHtdLe89JMfdsOerwlg=)
2: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (hash: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY=)
3: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (hash: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE=)
4: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (hash: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:d0:1e:ee:94:28:57:ae:4a:7b:35:58:48:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Apr 27 18:00:45 2026 GMT
Not After : Apr 28 18:00:45 2026 GMT
Subject: CN=2fef6e8c7792cb6ca0f497f8a96b46caa42c22e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:88:60:15:29:3f:2c:95:1e:f5:02:25:cd:
cb:9f:eb:40:d9:eb:f2:60:b1:70:55:b4:51:5a:77:
10:f4:e2:36:11:5b:0a:b2:6a:84:fc:9d:22:18:df:
2e:ba:1a:55:74:dd:3c:f4:2d:05:51:83:6e:e9:98:
44:3d:4e:57:21:5e:14:e0:25:05:1a:ba:69:19:b0:
6b:3a:d5:25:96:b0:2d:e7:a5:d3:95:07:c9:f6:ed:
7b:7d:81:04:bb:59:33:d8:84:5a:9b:ee:1f:bd:ca:
4e:3a:66:81:c0:43:4c:f5:79:4e:7e:5f:a0:29:7f:
5e:e4:2b:02:61:87:61:80:f8:cc:3c:13:ff:cb:8e:
69:56:63:fa:a6:e1:94:26:59:09:40:ed:eb:0b:fd:
04:ac:af:cd:58:8b:46:90:7f:7d:ae:33:4e:48:6f:
9d:6c:4d:c4:b6:40:bb:0b:e1:5d:c0:d1:b9:ab:1c:
6a:03:d0:5e:07:1d:3f:82:bf:cb:13:58:8f:cd:dd:
75:e8:00:40:54:6b:46:49:54:0b:bd:e6:a4:a0:70:
05:d5:1f:5c:4a:ab:73:12:dd:c1:4c:5b:69:06:e6:
2d:d8:53:71:d3:3f:fd:6d:46:b1:f6:19:68:9e:a7:
e5:06:d1:c2:70:d5:d0:8a:d2:37:db:ac:15:57:6f:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:6E:8C:77:92:CB:6C:A0:F4:97:F8:A9:6B:46:CA:A4:2C:22:E8
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0c:96:28:82:72:44:4e:32:3d:c7:ae:3d:b8:b4:14:7f:42:
e2:58:d2:32:fc:53:6f:c8:dd:c2:e3:d1:dc:d3:a8:49:31:9c:
fa:a4:89:28:71:0b:d5:29:45:4f:2b:1b:6a:91:7e:9d:7a:9c:
f7:a2:5d:62:fd:14:9f:af:3d:9c:4d:fb:0b:93:b3:d0:e1:41:
f0:18:9e:1c:5a:36:cb:54:07:72:f4:c8:33:01:cf:bb:d7:59:
a1:bf:21:75:54:41:2b:7a:25:bd:38:fe:b9:14:e3:ce:57:4c:
10:fc:10:a7:8e:f7:a2:ba:e2:e1:9b:e6:56:10:56:3a:8c:2d:
9e:a0:3b:6b:51:9e:2d:ee:73:fa:2d:d3:31:ac:f7:4f:17:a9:
a5:44:3d:da:66:cf:58:89:98:5b:0f:3c:df:39:9b:1d:99:e1:
1b:c1:82:28:18:ed:41:37:71:6d:f6:50:cd:cf:7d:08:43:06:
d1:0e:8e:5a:4c:65:2f:60:dc:1b:7e:4e:c0:93:56:91:e6:0b:
c1:80:ed:de:c7:e6:f1:e6:37:cf:e6:c2:df:5b:4e:73:03:29:
d6:52:c3:5a:f3:fd:67:25:e3:a0:29:97:93:9d:bc:a0:62:95:
9d:51:94:e7:e1:6b:ba:5e:8f:49:8d:40:5a:5b:3d:24:a4:97:
d2:e4:57:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGdAe7pQoV65KezVYSCY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj
MmFmZTIwHhcNMjYwNDI3MTgwMDQ1WhcNMjYwNDI4MTgwMDQ1WjAzMTEwLwYDVQQD
EygyZmVmNmU4Yzc3OTJjYjZjYTBmNDk3ZjhhOTZiNDZjYWE0MmMyMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5WIYBUpPyyVHvUCJc3Ln+tA2evy
YLFwVbRRWncQ9OI2EVsKsmqE/J0iGN8uuhpVdN089C0FUYNu6ZhEPU5XIV4U4CUF
GrppGbBrOtUllrAt56XTlQfJ9u17fYEEu1kz2IRam+4fvcpOOmaBwENM9XlOfl+g
KX9e5CsCYYdhgPjMPBP/y45pVmP6puGUJlkJQO3rC/0ErK/NWItGkH99rjNOSG+d
bE3EtkC7C+FdwNG5qxxqA9BeBx0/gr/LE1iPzd116ABAVGtGSVQLveakoHAF1R9c
SqtzEt3BTFtpBuYt2FNx0z/9bUax9hlonqflBtHCcNXQitI326wVV2/GpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/vbox3kstsoPSX+KlrRsqkLCLoMB8GA1UdIwQY
MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It
ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5
LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAyWKIJy
RE4yPceuPbi0FH9C4ljSMvxTb8jdwuPR3NOoSTGc+qSJKHEL1SlFTysbapF+nXqc
96JdYv0Un689nE37C5Oz0OFB8BieHFo2y1QHcvTIMwHPu9dZob8hdVRBK3olvTj+
uRTjzldMEPwQp473orri4ZvmVhBWOowtnqA7a1GeLe5z+i3TMaz3TxeppUQ92mbP
WImYWw883zmbHZnhG8GCKBjtQTdxbfZQzc99CEMG0Q6OWkxlL2DcG35OwJNWkeYL
wYDt3sfm8eY3z+bC31tOcwMp1lLDWvP9ZyXjoCmXk528oGKVnVGU5+Frul6PSY1A
Wls9JKSX0uRXig==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:12 2026 by rpki-client