Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: A4OmfPHSiX0a8cuQoZNT+pV2xoml4z86xofwdDdCeW8=
Subject key identifier: 52:71:E2:B0:B9:87:90:8F:F1:38:0B:C2:FF:E0:46:04:A9:12:1A:7F
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019FA3A9F21E8FA57A753507968D9704E8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 13:00:51 +0000
Manifest this update: Mon 27 Jul 2026 13:00:51 +0000
Manifest next update: Tue 28 Jul 2026 13:00:51 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 9PWYPRM/LLso3RqufBV9wnaSRjM7kYC8n+ndEgntn+Q=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:f2:1e:8f:a5:7a:75:35:07:96:8d:97:04:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jul 27 13:00:51 2026 GMT
Not After : Jul 28 13:00:51 2026 GMT
Subject: CN=5271e2b0b987908ff1380bc2ffe04604a9121a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:03:52:28:83:6e:c8:5f:30:10:60:b7:41:
a5:8d:52:68:65:c4:d1:9b:30:c9:ee:f7:ba:47:ce:
79:e1:08:18:df:3f:eb:d5:de:99:e5:dd:b8:25:73:
1c:44:17:6c:af:bf:3a:a6:ac:6f:33:51:a8:5b:e6:
0c:bf:a6:ed:99:40:f8:86:95:bf:71:24:e3:54:30:
07:06:c8:e5:65:5c:9b:06:9e:46:0c:35:97:2d:4d:
71:12:07:d8:e1:15:76:ff:91:5f:9a:0b:09:ff:5c:
59:53:65:1c:34:d0:b2:e4:44:c1:cb:e7:25:f6:fb:
24:42:66:6b:60:ad:08:b2:fe:39:c6:4e:19:f2:73:
a9:43:b8:92:48:c4:4c:8f:6b:50:93:81:3e:3c:99:
73:a5:c1:c8:02:9c:72:c7:be:14:1c:00:03:d4:16:
4f:c3:15:98:8b:f1:9f:a1:2d:c0:a4:c9:d4:37:51:
8f:5e:21:a6:fc:17:13:d1:5f:c4:56:a6:6e:98:11:
8f:7d:3e:c4:2c:05:9b:ee:4e:76:f9:6b:d3:8b:85:
e3:4d:bd:9b:a9:49:90:b0:c9:ca:79:b3:b4:f8:25:
3e:98:39:6e:57:a5:85:94:67:7e:18:d2:76:cd:f8:
20:90:2d:12:80:00:8b:6d:e3:93:f4:3b:e4:99:c2:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:E2:B0:B9:87:90:8F:F1:38:0B:C2:FF:E0:46:04:A9:12:1A:7F
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:d4:14:7a:6f:fc:ee:92:81:e2:46:b6:68:f8:f5:d0:4c:
8b:16:95:7d:3f:a5:a7:0b:23:9d:ee:8f:42:ce:f9:37:db:11:
39:4e:0d:ce:bc:aa:44:f7:b3:de:b5:2e:63:56:77:27:c1:bd:
0d:89:fa:50:ef:93:e7:b0:c7:5c:c8:b1:d1:4b:69:17:35:f3:
b8:01:e5:b6:b7:8a:87:83:ce:2e:db:ba:20:7d:96:7e:13:dd:
8c:6c:a8:db:b4:7a:06:03:03:af:06:0c:ea:49:c4:3a:a9:51:
16:17:f1:d4:72:b4:54:4a:cf:65:80:6a:43:a4:4f:4b:42:9b:
8c:6b:df:b8:9b:d6:9b:f4:49:ae:96:41:0e:4f:29:b5:99:e0:
50:a1:cf:22:63:6a:f6:18:de:52:06:52:62:ef:03:b3:b5:26:
fd:96:19:08:3e:c7:30:45:d2:b0:ae:03:54:62:de:49:22:a3:
f3:53:68:bc:ca:a4:87:0c:ef:76:10:c0:60:75:ac:69:da:53:
67:db:30:c0:72:4b:39:69:82:c3:d5:a8:e5:53:9f:76:f7:61:
33:7a:68:c3:04:80:6b:ae:60:c7:3e:80:1f:b2:a1:06:3f:06:
9a:eb:e5:6f:bf:d3:11:15:b3:13:90:7d:64:1d:1a:21:2f:cd:
c5:c6:c1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqfIej6V6dTUHlo2XBOiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYwNzI3MTMwMDUxWhcNMjYwNzI4MTMwMDUxWjAzMTEwLwYDVQQD
Eyg1MjcxZTJiMGI5ODc5MDhmZjEzODBiYzJmZmUwNDYwNGE5MTIxYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJgDUiiDbshfMBBgt0GljVJoZcTR
mzDJ7ve6R8554QgY3z/r1d6Z5d24JXMcRBdsr786pqxvM1GoW+YMv6btmUD4hpW/
cSTjVDAHBsjlZVybBp5GDDWXLU1xEgfY4RV2/5FfmgsJ/1xZU2UcNNCy5ETBy+cl
9vskQmZrYK0Isv45xk4Z8nOpQ7iSSMRMj2tQk4E+PJlzpcHIApxyx74UHAAD1BZP
wxWYi/GfoS3ApMnUN1GPXiGm/BcT0V/EVqZumBGPfT7ELAWb7k52+WvTi4XjTb2b
qUmQsMnKebO0+CU+mDluV6WFlGd+GNJ2zfggkC0SgACLbeOT9DvkmcKBpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJx4rC5h5CP8TgLwv/gRgSpEhp/MB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX7UFHpv
/O6SgeJGtmj49dBMixaVfT+lpwsjne6PQs75N9sROU4NzryqRPez3rUuY1Z3J8G9
DYn6UO+T57DHXMix0UtpFzXzuAHltreKh4POLtu6IH2WfhPdjGyo27R6BgMDrwYM
6knEOqlRFhfx1HK0VErPZYBqQ6RPS0KbjGvfuJvWm/RJrpZBDk8ptZngUKHPImNq
9hjeUgZSYu8Ds7Um/ZYZCD7HMEXSsK4DVGLeSSKj81NovMqkhwzvdhDAYHWsadpT
Z9swwHJLOWmCw9Wo5VOfdvdhM3powwSAa65gxz6AH7KhBj8Gmuvlb7/TERWzE5B9
ZB0aIS/NxcbBew==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:56:47 2026 by rpki-client