Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: P+uH5Zr3e1XHhYat5XScFINt9cf1oKiiW6szqWSRuYE=
Subject key identifier: 2A:A0:22:02:F5:65:B3:14:8B:BE:49:4E:F2:CF:EC:BD:B8:6A:5C:4F
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019E2AA6E779298C8B7213FD99AAE8B163A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1912
Signing time: Fri 15 May 2026 08:00:41 +0000
Manifest this update: Fri 15 May 2026 08:00:41 +0000
Manifest next update: Sat 16 May 2026 08:00:41 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: Fvvpt6Y19IpG/Vb3a9EA1PzX51eAP/rdW1fvREI4roI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a6:e7:79:29:8c:8b:72:13:fd:99:aa:e8:b1:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: May 15 08:00:41 2026 GMT
Not After : May 16 08:00:41 2026 GMT
Subject: CN=2aa02202f565b3148bbe494ef2cfecbdb86a5c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:07:47:c6:97:bf:e6:e5:b9:92:c1:93:1f:
16:98:d2:e0:3f:ef:75:c9:91:fa:fa:a1:5d:f5:c6:
22:5d:b9:68:31:0b:88:90:a3:75:2a:54:74:6f:c2:
8f:d9:16:55:fb:66:2f:8b:d8:4d:4c:3a:e9:25:84:
52:dc:00:5a:6f:ab:d1:31:cf:9c:d0:19:78:9b:d8:
43:88:12:3b:00:be:46:26:76:fa:c8:86:88:23:ce:
fe:e4:c8:69:69:79:22:d4:af:31:fc:6c:51:36:2e:
66:49:bf:55:de:45:a0:fd:cb:c4:79:b1:1e:f4:ac:
d9:1d:1e:07:e9:ad:d9:68:f7:46:47:0e:98:1b:56:
d5:56:2d:ef:ff:b7:84:24:fc:ff:4c:05:b1:dc:11:
68:b7:38:9f:5c:a5:fc:0d:a4:24:dd:06:e3:62:54:
e0:2d:08:18:5f:64:f6:fa:ae:57:16:70:12:35:e7:
5f:76:53:5d:30:82:47:9d:33:e9:33:d5:6e:84:ef:
01:a0:8b:00:fc:6a:50:0f:59:0b:91:f2:3e:b8:ba:
53:53:cb:db:06:34:47:7b:a6:91:61:9c:d0:20:9d:
34:c8:c7:d1:06:3a:36:b1:b0:ae:32:ac:23:68:ee:
01:0c:94:b1:5a:01:5f:e3:ca:eb:4b:16:4c:1f:e5:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:22:02:F5:65:B3:14:8B:BE:49:4E:F2:CF:EC:BD:B8:6A:5C:4F
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:7e:63:62:89:ee:90:2c:ad:79:74:63:18:68:cf:6b:37:
82:5b:0d:1b:4e:e0:88:c1:7c:a4:4d:ed:e3:e5:5a:42:c5:99:
9e:93:8f:c8:3a:d0:d3:08:11:08:ae:a3:9e:13:14:3b:d1:80:
bd:ae:4f:92:af:e4:b9:87:39:11:96:fe:1b:78:7a:4a:60:53:
e1:32:62:5b:57:74:6d:41:d9:db:35:76:37:3b:4d:fa:2d:3b:
5b:e7:7a:c2:18:d5:27:32:46:2b:8c:a1:76:c1:c9:5e:0d:10:
f8:3e:b6:74:f3:e7:fa:6a:6e:6b:27:3e:f2:47:f8:55:c7:ec:
e3:22:e3:30:a9:bb:60:07:ef:f6:35:65:68:b2:c1:61:b1:da:
61:52:90:d7:33:21:ca:ff:e6:be:8b:90:75:8e:70:05:a3:1a:
61:4b:63:95:c6:66:4f:24:b3:12:ad:fe:66:d0:1a:3b:72:d9:
e9:a8:23:77:1f:60:58:b3:4d:6d:76:65:28:0a:aa:5f:91:8d:
b7:c1:02:6f:65:fa:18:c7:c5:49:62:c0:7f:bd:ed:06:31:bf:
3d:98:1b:57:e9:9e:6f:d2:6e:01:31:28:f3:6b:c9:11:e3:d6:
80:55:ca:fa:1b:26:b9:31:d5:d2:8d:38:48:72:3c:1b:df:15:
e8:fa:5a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qpud5KYyLchP9marosWOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5
ZDhmOTUwHhcNMjYwNTE1MDgwMDQxWhcNMjYwNTE2MDgwMDQxWjAzMTEwLwYDVQQD
EygyYWEwMjIwMmY1NjViMzE0OGJiZTQ5NGVmMmNmZWNiZGI4NmE1YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6oHR8aXv+bluZLBkx8WmNLgP+91
yZH6+qFd9cYiXbloMQuIkKN1KlR0b8KP2RZV+2Yvi9hNTDrpJYRS3ABab6vRMc+c
0Bl4m9hDiBI7AL5GJnb6yIaII87+5MhpaXki1K8x/GxRNi5mSb9V3kWg/cvEebEe
9KzZHR4H6a3ZaPdGRw6YG1bVVi3v/7eEJPz/TAWx3BFotzifXKX8DaQk3QbjYlTg
LQgYX2T2+q5XFnASNedfdlNdMIJHnTPpM9VuhO8BoIsA/GpQD1kLkfI+uLpTU8vb
BjRHe6aRYZzQIJ00yMfRBjo2sbCuMqwjaO4BDJSxWgFf48rrSxZMH+VbbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqgIgL1ZbMUi75JTvLP7L24alxPMB8GA1UdIwQY
MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt
MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5
LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjV+Y2KJ
7pAsrXl0Yxhoz2s3glsNG07giMF8pE3t4+VaQsWZnpOPyDrQ0wgRCK6jnhMUO9GA
va5Pkq/kuYc5EZb+G3h6SmBT4TJiW1d0bUHZ2zV2NztN+i07W+d6whjVJzJGK4yh
dsHJXg0Q+D62dPPn+mpuayc+8kf4Vcfs4yLjMKm7YAfv9jVlaLLBYbHaYVKQ1zMh
yv/mvouQdY5wBaMaYUtjlcZmTySzEq3+ZtAaO3LZ6agjdx9gWLNNbXZlKAqqX5GN
t8ECb2X6GMfFSWLAf73tBjG/PZgbV+meb9JuATEo82vJEePWgFXK+hsmuTHV0o04
SHI8G98V6Ppaow==
-----END CERTIFICATE-----
Generated at Fri May 15 16:59:58 2026 by rpki-client