Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: 7sXHFE02zy66eSWstbOAe0Ix5xMyIPNykT6dej9Hj6U=
Subject key identifier: 4D:22:98:E5:01:98:6C:2F:89:F0:F3:B3:28:AD:E6:B4:6F:02:30:B1
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019CE4B589AE227A66CB224C402194B1F093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 01:00:28 +0000
Manifest this update: Fri 13 Mar 2026 01:00:28 +0000
Manifest next update: Sat 14 Mar 2026 01:00:28 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: vmNL1dnbOksMG65vBCtjan4Nb92ka5MqnIkM8sknERc=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:89:ae:22:7a:66:cb:22:4c:40:21:94:b1:f0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Mar 13 01:00:28 2026 GMT
Not After : Mar 14 01:00:28 2026 GMT
Subject: CN=4d2298e501986c2f89f0f3b328ade6b46f0230b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:39:8b:0a:21:74:a0:68:d2:d2:dd:c5:32:
8c:80:a5:b4:05:59:89:d8:4f:ef:38:76:55:c0:a2:
58:8e:86:9a:5b:4e:ca:ef:08:31:ad:bb:39:5c:26:
d8:04:cf:ac:eb:0f:0a:bf:c9:6a:46:31:61:de:1f:
6b:c6:f5:6e:98:95:79:f0:5c:ad:71:d6:fe:4c:71:
c3:37:bf:3e:ed:fe:c0:3d:87:ef:81:7e:d2:a9:41:
02:57:86:27:a5:25:c2:ba:c3:f7:33:0d:0f:b0:ca:
a5:dc:fe:9c:e6:f2:9e:93:ac:22:65:d9:e7:c4:51:
d8:b7:47:98:85:94:54:8f:29:ff:a8:8c:78:fe:4b:
f4:2d:71:d3:05:e5:7c:09:44:b4:94:c3:a6:ae:a2:
84:ca:bc:17:7b:1e:3e:a2:dd:dc:17:06:ac:d7:46:
67:97:61:4f:da:04:4a:48:3a:b9:4f:93:69:ef:71:
7d:1d:80:ce:be:4c:f1:80:8d:7e:85:77:fb:59:d4:
a3:9b:d0:a5:c6:12:89:27:5c:4e:ee:b1:b5:e8:21:
48:b4:56:06:29:ad:77:db:2f:23:ce:97:75:c1:75:
d4:cd:32:5b:66:b7:97:fb:40:02:ec:b9:76:eb:a0:
06:53:51:80:ca:93:f8:b6:d6:90:fe:d1:f2:62:5e:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:98:E5:01:98:6C:2F:89:F0:F3:B3:28:AD:E6:B4:6F:02:30:B1
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:35:ed:ef:89:8d:50:4e:1e:23:af:97:7f:6b:22:0b:dd:fd:
b1:70:5d:70:c7:35:de:95:77:a3:fc:cb:a6:d7:a3:3d:0c:5c:
45:8b:94:41:85:61:2b:89:95:c9:97:b3:94:14:8d:77:a2:2e:
64:f9:72:f3:19:68:a5:bf:9e:24:fa:fe:03:06:73:98:0d:51:
2d:10:f2:15:ca:8c:1e:22:22:0d:70:01:66:77:ca:9e:84:e6:
e5:11:87:60:d1:e5:f9:d9:36:49:29:b8:b1:00:62:c2:c8:6f:
be:57:0a:7b:b1:ce:29:78:4c:aa:36:aa:d6:b6:6e:86:f2:12:
d7:13:5c:ed:28:aa:b8:67:29:4a:6b:87:c7:e9:6a:9d:28:e7:
1b:d2:37:f9:a3:76:a5:17:b2:60:e3:47:d1:bb:e5:23:18:36:
a8:71:22:f3:d6:b3:ac:b2:de:d3:38:f1:00:51:38:8f:b5:d8:
d7:5f:67:20:79:f6:a8:2a:a3:1e:a5:8e:28:d6:c1:c2:52:f8:
7b:8f:6c:5f:5f:ff:05:44:9f:c0:2f:89:57:59:e9:3b:ad:dc:
b2:3f:88:e8:e6:9a:71:4d:50:61:25:8e:67:04:eb:5a:a3:0e:
30:63:36:ab:0e:03:dc:0a:98:df:b9:db:59:63:b6:40:57:0a:
e0:82:ed:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktYmuInpmyyJMQCGUsfCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYwMzEzMDEwMDI4WhcNMjYwMzE0MDEwMDI4WjAzMTEwLwYDVQQD
Eyg0ZDIyOThlNTAxOTg2YzJmODlmMGYzYjMyOGFkZTZiNDZmMDIzMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvY5iwohdKBo0tLdxTKMgKW0BVmJ
2E/vOHZVwKJYjoaaW07K7wgxrbs5XCbYBM+s6w8Kv8lqRjFh3h9rxvVumJV58Fyt
cdb+THHDN78+7f7APYfvgX7SqUECV4YnpSXCusP3Mw0PsMql3P6c5vKek6wiZdnn
xFHYt0eYhZRUjyn/qIx4/kv0LXHTBeV8CUS0lMOmrqKEyrwXex4+ot3cFwas10Zn
l2FP2gRKSDq5T5Np73F9HYDOvkzxgI1+hXf7WdSjm9ClxhKJJ1xO7rG16CFItFYG
Ka132y8jzpd1wXXUzTJbZreX+0AC7Ll266AGU1GAypP4ttaQ/tHyYl6ynQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0imOUBmGwvifDzsyit5rRvAjCxMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjXt74mN
UE4eI6+Xf2siC939sXBdcMc13pV3o/zLptejPQxcRYuUQYVhK4mVyZezlBSNd6Iu
ZPly8xlopb+eJPr+AwZzmA1RLRDyFcqMHiIiDXABZnfKnoTm5RGHYNHl+dk2SSm4
sQBiwshvvlcKe7HOKXhMqjaq1rZuhvIS1xNc7SiquGcpSmuHx+lqnSjnG9I3+aN2
pReyYONH0bvlIxg2qHEi89azrLLe0zjxAFE4j7XY119nIHn2qCqjHqWOKNbBwlL4
e49sX1//BUSfwC+JV1npO63csj+I6OaacU1QYSWOZwTrWqMOMGM2qw4D3AqY37nb
WWO2QFcK4ILtHQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:08:43 2026 by rpki-client