Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: WFv/4WY/P/sHadu4L3UAxW1CaE6XOONg1QC/jRtIZKM=
Subject key identifier: 2E:52:AC:31:B7:C4:F6:E1:3E:62:4D:B4:44:40:71:06:14:7B:4F:94
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 019D38668C3953493125DE65FCDA279B5D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: PJlVOdPlRjLCkiD/RoNwWKV3yF4uenVYnYtDNgHRctE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8c:39:53:49:31:25:de:65:fc:da:27:9b:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=2e52ac31b7c4f6e13e624db444407106147b4f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:5a:03:80:31:d0:7c:4b:84:3e:b7:7e:89:
db:a0:ef:74:0b:2e:3e:5e:97:6b:f1:96:b3:83:2c:
4d:29:9a:0c:75:56:57:77:47:7b:ee:f8:8b:fd:70:
4c:10:3c:28:08:c3:f7:57:02:74:f0:60:99:7f:d5:
79:f4:cd:17:af:5f:e7:9b:39:50:9c:2c:e5:59:64:
f3:50:af:d7:8d:ec:ba:73:2b:00:49:71:db:01:07:
da:71:c3:56:1b:2c:b5:3e:a0:62:ae:dd:0f:c2:ef:
ee:74:6d:a5:dd:8a:de:b9:7c:15:c0:d0:23:d4:10:
3d:78:32:61:39:5b:e9:d5:60:49:0d:3f:bd:ab:ab:
49:d1:80:db:41:7a:14:4c:93:32:43:ec:a6:9a:a2:
ea:66:57:d9:5f:c9:41:35:6b:49:5e:e0:a4:23:fe:
6a:e3:f2:7d:c7:a9:07:84:a1:63:b8:20:5f:68:8b:
3c:cb:a4:98:09:fd:c4:82:53:02:a1:c5:49:e6:0c:
b7:53:d1:30:dc:b5:09:8c:ed:a7:9b:c8:ac:b2:e0:
64:e0:73:be:2c:21:dc:32:77:ea:d4:27:e3:85:0c:
26:90:af:b7:18:9b:0e:e3:31:8c:a1:e2:3f:83:7c:
e2:0b:59:65:04:7d:67:61:65:3e:a8:bf:f5:88:e4:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:AC:31:B7:C4:F6:E1:3E:62:4D:B4:44:40:71:06:14:7B:4F:94
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:fb:a2:68:bf:a6:6a:75:54:40:52:79:23:66:eb:c7:38:
70:9b:04:f4:b4:6d:51:2c:bc:e2:44:b7:0f:8b:ee:44:96:df:
7f:38:2a:42:58:4b:c3:82:77:9f:a6:fa:ec:4c:13:3f:38:91:
65:f1:75:81:4c:14:57:5c:42:96:59:a6:46:d8:fa:d8:2d:05:
ae:e9:e1:f6:6b:ab:48:b9:c9:05:b3:56:65:f7:0a:17:9c:b0:
85:96:6c:61:5d:c3:02:50:4d:39:f3:a4:f5:fe:86:a3:ec:c2:
35:82:3b:c8:f1:e6:97:e4:63:c8:56:64:f9:04:57:9e:2e:a1:
c8:0f:39:b6:60:7f:6c:09:ba:6c:b5:92:eb:90:30:ce:a7:7b:
8b:c9:ae:2b:8a:0a:7c:f0:95:a9:b4:41:bc:34:50:fc:aa:3f:
92:cb:7d:ea:96:4a:97:1b:39:fd:d8:1d:5c:5c:5f:d2:1c:0b:
5e:1e:c5:e2:02:02:f3:56:95:a6:dc:cf:61:ab:c6:5c:9e:11:
18:f0:34:76:21:f5:6c:e6:4d:25:c5:f3:2c:1f:92:87:9e:a5:
03:85:e9:11:95:39:e4:7d:f4:c8:ed:19:ae:25:62:6e:d9:5b:
72:f1:8c:46:55:af:81:e4:04:20:f9:5a:dc:1e:b6:df:f3:f3:
20:3d:69:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zow5U0kxJd5l/Nonm11gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTEwYTEyOTU1OGM4MzgwYmMxM2Q5YWM0NTQwMWQyMWRh
YjlkZjAwHhcNMjYwMzI5MDcwMjE3WhcNMjYwMzMwMDcwMjE3WjAzMTEwLwYDVQQD
EygyZTUyYWMzMWI3YzRmNmUxM2U2MjRkYjQ0NDQwNzEwNjE0N2I0Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vpaA4Ax0HxLhD63fonboO90Cy4+
Xpdr8ZazgyxNKZoMdVZXd0d77viL/XBMEDwoCMP3VwJ08GCZf9V59M0Xr1/nmzlQ
nCzlWWTzUK/Xjey6cysASXHbAQfaccNWGyy1PqBirt0Pwu/udG2l3YreuXwVwNAj
1BA9eDJhOVvp1WBJDT+9q6tJ0YDbQXoUTJMyQ+ymmqLqZlfZX8lBNWtJXuCkI/5q
4/J9x6kHhKFjuCBfaIs8y6SYCf3EglMCocVJ5gy3U9Ew3LUJjO2nm8issuBk4HO+
LCHcMnfq1CfjhQwmkK+3GJsO4zGMoeI/g3ziC1llBH1nYWU+qL/1iOQ8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5SrDG3xPbhPmJNtERAcQYUe0+UMB8GA1UdIwQY
MBaAFGmhChKVWMg4C8E9msRUAdIdq53wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWIt
ODc3YzY1YjAxNDU2LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yYTZmYjAtNDhiMi00ZjkzLTg1NWItODc3YzY1YjAxNDU2
LzEvYWFFS0VwVll5RGdMd1QyYXhGUUIwaDJybmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhr7omi/
pmp1VEBSeSNm68c4cJsE9LRtUSy84kS3D4vuRJbffzgqQlhLw4J3n6b67EwTPziR
ZfF1gUwUV1xCllmmRtj62C0Frunh9murSLnJBbNWZfcKF5ywhZZsYV3DAlBNOfOk
9f6Go+zCNYI7yPHml+RjyFZk+QRXni6hyA85tmB/bAm6bLWS65Awzqd7i8muK4oK
fPCVqbRBvDRQ/Ko/kst96pZKlxs5/dgdXFxf0hwLXh7F4gIC81aVptzPYavGXJ4R
GPA0diH1bOZNJcXzLB+Sh56lA4XpEZU55H30yO0ZriVibtlbcvGMRlWvgeQEIPla
3B623/PzID1p7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:15 2026 by rpki-client