Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: bMvZioMpevb8HnVgDKBiJb/7mnT19cQnDO2c2+Ay+wg=
Subject key identifier: 5B:EC:3C:82:56:D7:A6:C6:56:81:8B:7F:43:E0:C1:1D:49:2A:78:9F
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019D3940DEE3C440E0ED47CDEC2989A8F30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=)
2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: xnho7jEiDUlzOvWpUPklr5MQYXbDf7rC9wzYyEOvT8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:de:e3:c4:40:e0:ed:47:cd:ec:29:89:a8:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=5bec3c8256d7a6c656818b7f43e0c11d492a789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:af:f5:bc:c0:8c:61:2d:89:d1:f1:e4:ff:
ab:96:2f:3a:95:db:3f:c9:fc:f4:08:3e:1b:a2:14:
80:de:2f:52:03:0b:3e:fc:db:81:7f:71:71:0e:50:
67:20:67:7a:9e:fe:85:c8:6f:fc:c2:cc:2c:c9:f1:
d1:fc:eb:b2:2f:6b:0f:b0:83:1b:75:a3:61:4e:12:
b3:cc:e1:ce:f0:14:40:11:3a:c3:33:ec:25:cf:d8:
fc:46:39:89:3c:4d:86:78:e7:46:6d:5e:05:7b:e4:
fe:b1:83:bc:3e:4d:76:b2:26:8e:2e:6c:47:ff:2b:
f7:a1:bb:78:df:e0:02:30:44:5f:38:b4:c9:bb:47:
8f:73:cc:80:a7:87:be:62:c7:40:b1:de:f9:de:68:
39:33:d7:99:f8:6c:a8:eb:a2:5d:87:ad:a3:69:78:
c3:30:af:02:21:ae:47:3c:10:bf:5e:74:91:3c:c2:
97:0a:21:86:fb:0f:47:ed:42:9e:9a:3e:f4:d4:d4:
f6:43:bc:86:8a:6c:b7:90:66:ed:2c:aa:ec:f5:59:
18:9f:13:33:05:13:8b:9e:33:e3:70:5e:32:db:62:
ea:12:ac:c9:ce:c9:1d:9d:0c:2e:cd:99:4a:48:5d:
45:f4:bf:08:29:96:4d:c1:8c:21:0f:a9:07:e1:7b:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:3C:82:56:D7:A6:C6:56:81:8B:7F:43:E0:C1:1D:49:2A:78:9F
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3a:d7:72:f9:d4:c1:75:33:96:17:49:0f:8c:27:be:ed:bc:
df:a4:5e:0b:77:55:c3:89:d0:9e:9c:a4:8a:3c:12:d1:9a:09:
ea:26:5c:58:c4:2f:95:26:c3:7b:68:8b:cb:ba:fb:7c:4f:50:
1e:b4:f8:43:cd:dc:4f:0e:33:f0:05:47:15:6b:09:75:43:9b:
88:89:f7:f0:55:f5:ba:42:bc:b1:a1:3b:09:42:54:d2:55:10:
4a:7d:01:e5:55:79:49:b9:7c:d8:26:ad:0f:7b:45:96:ab:d7:
c0:e3:1e:7b:68:fa:32:5d:17:7e:4a:bc:79:25:81:12:ad:8d:
0a:d2:75:82:28:04:f3:58:95:d2:f5:72:3b:75:cb:0e:d9:93:
1c:85:27:5a:ae:9c:a1:e4:e7:d2:45:05:f0:01:d7:13:98:8c:
cc:1b:40:32:6e:78:8f:9c:b7:d8:c8:4e:a4:a4:d0:79:2d:99:
08:b5:dc:ca:e7:4a:d4:d2:3a:bf:75:6a:0a:4b:6e:27:53:7d:
2f:4c:e5:49:f5:11:fd:22:6f:6d:84:2d:93:ca:14:00:c9:c9:
ef:6d:ba:67:46:56:0f:35:7e:dc:96:69:d8:9f:f7:93:f1:ad:
cf:51:49:96:47:11:a7:4e:e8:b3:ef:e0:58:32:a9:70:88:3a:
7b:fe:71:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QN7jxEDg7UfN7CmJqPMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTcxMGExNjkzNzEwYWM4MzVmMGI2NzQ1ZjkwZDJkNjgw
YTEyMDAwHhcNMjYwMzI5MTEwMDQ1WhcNMjYwMzMwMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg1YmVjM2M4MjU2ZDdhNmM2NTY4MThiN2Y0M2UwYzExZDQ5MmE3ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTiv9bzAjGEtidHx5P+rli86lds/
yfz0CD4bohSA3i9SAws+/NuBf3FxDlBnIGd6nv6FyG/8wswsyfHR/OuyL2sPsIMb
daNhThKzzOHO8BRAETrDM+wlz9j8RjmJPE2GeOdGbV4Fe+T+sYO8Pk12siaOLmxH
/yv3obt43+ACMERfOLTJu0ePc8yAp4e+YsdAsd753mg5M9eZ+Gyo66Jdh62jaXjD
MK8CIa5HPBC/XnSRPMKXCiGG+w9H7UKemj701NT2Q7yGimy3kGbtLKrs9VkYnxMz
BROLnjPjcF4y22LqEqzJzskdnQwuzZlKSF1F9L8IKZZNwYwhD6kH4XtsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvsPIJW16bGVoGLf0PgwR1JKnifMB8GA1UdIwQY
MBaAFGmXEKFpNxCsg18LZ0X5DS1oChIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYt
MjliOThlY2RmZjEyLzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYtMjliOThlY2RmZjEy
LzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjrXcvnU
wXUzlhdJD4wnvu2836ReC3dVw4nQnpykijwS0ZoJ6iZcWMQvlSbDe2iLy7r7fE9Q
HrT4Q83cTw4z8AVHFWsJdUObiIn38FX1ukK8saE7CUJU0lUQSn0B5VV5Sbl82Cat
D3tFlqvXwOMee2j6Ml0Xfkq8eSWBEq2NCtJ1gigE81iV0vVyO3XLDtmTHIUnWq6c
oeTn0kUF8AHXE5iMzBtAMm54j5y32MhOpKTQeS2ZCLXcyudK1NI6v3VqCktuJ1N9
L0zlSfUR/SJvbYQtk8oUAMnJ7226Z0ZWDzV+3JZp2J/3k/Gtz1FJlkcRp07os+/g
WDKpcIg6e/5xOg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:04 2026 by rpki-client