Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: vUDXEQeizOn3jaBmIK7Kitrg1WN87gLyBJqzE9kBJVQ=
Subject key identifier: 4C:8D:18:88:9F:7E:E3:FC:47:DC:D5:DB:E7:BB:BF:44:0A:95:C7:E7
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019E2FCD74F5324BD9FDB3023FE0CAB248EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 144E
Signing time: Sat 16 May 2026 08:00:54 +0000
Manifest this update: Sat 16 May 2026 08:00:54 +0000
Manifest next update: Sun 17 May 2026 08:00:54 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: 1R/b6cHu/FX/FUzS1vaAVFlSS32c0v6o6X0Qeiykv9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:74:f5:32:4b:d9:fd:b3:02:3f:e0:ca:b2:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: May 16 08:00:54 2026 GMT
Not After : May 17 08:00:54 2026 GMT
Subject: CN=4c8d18889f7ee3fc47dcd5dbe7bbbf440a95c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:55:6d:6d:03:45:9e:af:a8:2d:91:fa:c6:
ee:54:23:72:86:62:95:41:81:a2:98:7c:53:86:36:
20:b1:3f:2f:b9:c1:10:a7:c5:db:e9:92:d9:87:0f:
7a:25:7c:bf:40:cf:62:a3:13:ba:2c:bc:f9:b7:22:
e5:5e:4a:50:42:e7:dd:55:17:34:2f:29:0b:fd:64:
c9:34:86:e4:bc:ce:32:85:47:ca:11:89:0c:2e:58:
ec:1b:6c:c1:44:1e:53:c2:c5:a8:dc:f6:9b:5e:a0:
23:23:01:a9:c5:49:d1:bf:70:f6:8a:c0:22:ba:c0:
63:a6:1c:c0:fa:c5:be:d5:da:63:e3:1c:4e:2a:eb:
b3:b7:77:46:6c:3f:e9:0d:2d:18:ed:12:d3:c4:f6:
13:cc:e6:1e:38:64:ad:e3:c1:1b:07:21:74:04:5a:
1e:f1:8a:d3:3b:60:c9:e4:1c:27:15:7a:2e:80:c2:
4d:67:1b:12:ad:5b:7e:6a:3a:61:f2:9b:36:1b:09:
96:65:cd:c6:f2:89:8d:52:18:4c:fb:9a:38:c1:b6:
80:c4:a3:da:10:0b:8e:5e:e0:f6:18:70:73:10:3d:
ff:93:0e:64:93:4d:5f:f6:50:f2:b7:23:28:76:5f:
68:12:6c:75:73:a4:70:d2:aa:b9:56:ec:37:44:c6:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8D:18:88:9F:7E:E3:FC:47:DC:D5:DB:E7:BB:BF:44:0A:95:C7:E7
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:65:f3:9c:a0:b5:ac:ae:4b:24:02:89:bc:63:04:15:c4:6f:
33:77:cf:93:a5:ac:eb:2c:20:b5:2a:55:6a:d2:7e:09:87:fb:
ea:6d:4c:56:fe:ea:53:c9:e4:cd:85:1e:ba:73:4c:ce:43:4b:
2d:2c:a6:54:77:8c:ee:dd:56:61:28:ad:8a:e2:e9:25:e1:7f:
63:c0:a0:c5:ed:d3:39:86:e6:7f:47:19:a1:35:98:b0:10:83:
30:b0:f6:18:49:f6:52:a3:80:9c:b9:8f:7e:5a:13:41:ae:dc:
0f:65:c4:67:b5:d3:59:74:bb:dc:5b:47:61:c0:71:47:e8:71:
a7:8c:bb:e1:be:ac:bb:e2:8b:50:0d:e4:1d:33:76:7f:a8:33:
aa:f2:0a:fa:8f:60:1d:fe:74:7c:c5:1a:d3:c7:67:b2:c7:5e:
5a:d7:1a:de:93:05:6f:87:64:76:5a:b6:ee:ed:a0:e0:42:f7:
72:8a:59:5c:db:02:74:87:00:c8:cc:d8:5d:1b:33:2c:3c:a0:
df:a3:31:fc:12:1c:e9:81:ac:fc:b3:60:ed:df:b9:c3:d0:49:
41:2a:a9:cc:9a:dd:7d:27:65:cb:b4:9e:53:e2:c2:f3:a6:29:
54:09:fb:af:41:1b:9e:71:0a:82:d9:82:0c:aa:37:a3:79:e3:
9b:18:00:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzXT1MkvZ/bMCP+DKskjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTJjMzM3MzFhZGNhNTdkY2MzM2IyZmI4MjMzZmMwMzhi
MDk1ZTkwHhcNMjYwNTE2MDgwMDU0WhcNMjYwNTE3MDgwMDU0WjAzMTEwLwYDVQQD
Eyg0YzhkMTg4ODlmN2VlM2ZjNDdkY2Q1ZGJlN2JiYmY0NDBhOTVjN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLJVbW0DRZ6vqC2R+sbuVCNyhmKV
QYGimHxThjYgsT8vucEQp8Xb6ZLZhw96JXy/QM9ioxO6LLz5tyLlXkpQQufdVRc0
LykL/WTJNIbkvM4yhUfKEYkMLljsG2zBRB5TwsWo3PabXqAjIwGpxUnRv3D2isAi
usBjphzA+sW+1dpj4xxOKuuzt3dGbD/pDS0Y7RLTxPYTzOYeOGSt48EbByF0BFoe
8YrTO2DJ5BwnFXougMJNZxsSrVt+ajph8ps2GwmWZc3G8omNUhhM+5o4wbaAxKPa
EAuOXuD2GHBzED3/kw5kk01f9lDytyModl9oEmx1c6Rw0qq5Vuw3RMZSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyNGIiffuP8R9zV2+e7v0QKlcfnMB8GA1UdIwQY
MBaAFADiwzcxrcpX3MM7L7gjP8A4sJXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMt
YzlhZDM3Zjk0Y2Q3LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMtYzlhZDM3Zjk0Y2Q3
LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2XznKC1
rK5LJAKJvGMEFcRvM3fPk6Ws6ywgtSpVatJ+CYf76m1MVv7qU8nkzYUeunNMzkNL
LSymVHeM7t1WYSitiuLpJeF/Y8Cgxe3TOYbmf0cZoTWYsBCDMLD2GEn2UqOAnLmP
floTQa7cD2XEZ7XTWXS73FtHYcBxR+hxp4y74b6su+KLUA3kHTN2f6gzqvIK+o9g
Hf50fMUa08dnssdeWtca3pMFb4dkdlq27u2g4EL3copZXNsCdIcAyMzYXRszLDyg
36Mx/BIc6YGs/LNg7d+5w9BJQSqpzJrdfSdly7SeU+LC86YpVAn7r0EbnnEKgtmC
DKo3o3njmxgA3A==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:27 2026 by rpki-client