Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: vNeZ9ulhyoACdMzLswk96HFnjolU+u09gXdMExmabP0=
Subject key identifier: 0D:AC:6F:42:12:43:04:D5:A8:95:B0:98:51:11:0A:EC:FC:E8:6D:AF
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 019D37C0BE5E50150835472438552FE800B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: sGy+MvGZiMTp563kQpe4BseX/Xh69JiKlhfAG3Cth28=)
2: tzNhQBxVbG84fhnHI6FFgXnV1Ig.roa (hash: UFTyL6yRgFc0Xt2kdYNbyJU576nNW6IhohuerTzQsDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:be:5e:50:15:08:35:47:24:38:55:2f:e8:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=0dac6f42124304d5a895b09851110aecfce86daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:bf:c9:4b:f1:7f:b8:66:c3:d9:89:a2:05:
27:36:20:ed:b2:68:5b:59:2a:43:f1:49:45:9b:bc:
cf:6f:64:05:70:c2:9e:9b:15:f2:15:32:13:75:f5:
09:e4:bf:cc:4f:a5:f6:2a:1f:e9:fb:43:3d:09:f4:
7e:f0:b1:e1:13:ea:a0:45:07:98:60:80:af:a8:1d:
98:02:48:e4:8d:09:3f:88:ee:3c:a1:ae:f3:6b:ae:
86:03:44:d3:a6:10:03:b2:34:ab:23:87:bc:db:04:
ef:c7:e1:b6:14:22:ef:39:dd:99:41:fb:ca:73:5c:
50:c0:55:7a:51:b2:13:e7:8d:95:3e:c4:41:4b:ff:
d9:55:b4:46:a5:35:c6:2a:75:fe:bf:ec:f0:a9:f3:
31:f7:ad:93:db:e6:d3:f7:4f:36:22:80:6b:5d:ce:
99:c5:04:7c:53:a8:d7:be:9d:22:a5:5b:94:b3:a2:
19:e8:fa:89:17:e6:b4:f4:5c:f9:a6:3b:01:7a:b6:
10:96:9a:e1:55:6d:50:bb:38:9f:63:ea:2d:3b:bb:
c1:cd:5c:82:53:79:f9:67:99:00:e9:5c:da:ea:71:
c6:d9:b4:dd:2c:f1:c2:eb:bb:11:42:d4:2c:3c:c6:
3b:0f:ca:67:da:87:5d:19:65:20:d7:e9:6a:54:7f:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:6F:42:12:43:04:D5:A8:95:B0:98:51:11:0A:EC:FC:E8:6D:AF
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:5f:e0:1d:47:03:5c:6a:c2:0b:a9:76:34:3f:32:71:64:
b6:34:a2:8f:64:b9:f1:2d:8c:28:d3:c6:4a:22:d3:73:39:95:
c9:d1:8a:ee:6f:31:4c:10:95:bc:c0:17:14:95:41:49:4b:04:
4b:dc:3b:57:9d:49:f6:3c:fe:4c:8f:44:bd:14:a1:b0:f7:b3:
c7:a7:0d:1c:02:2a:60:b5:2b:ae:31:db:80:72:ff:4f:b4:65:
43:a5:e1:09:ca:45:e4:32:74:e4:bd:19:7b:a5:a9:09:af:1d:
aa:1e:bb:c9:a1:5c:72:c7:c2:35:14:f5:84:ab:26:38:45:e5:
8e:21:69:34:86:e4:6f:b3:f2:4b:c0:29:0c:ec:c6:e2:bb:f0:
1d:7d:0c:f4:60:43:6f:5e:09:af:9e:73:c1:63:52:dc:0c:16:
7e:0d:35:55:20:77:2d:7c:12:f7:b1:ae:0c:55:81:83:e6:e2:
4b:70:8c:e3:ed:37:de:30:30:64:b0:9d:e5:fd:8f:2a:36:7d:
59:bc:dc:2a:56:58:39:26:ad:b5:4e:9a:5e:fa:56:b0:6e:4b:
02:ab:71:26:86:a0:e5:71:f7:1f:7e:89:33:09:91:4b:03:c2:
5f:44:c3:c8:29:f9:59:24:87:5c:60:95:8c:45:3f:66:86:a7:
29:fb:29:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wL5eUBUINUckOFUv6AC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjYwMzI5MDQwMTExWhcNMjYwMzMwMDQwMTExWjAzMTEwLwYDVQQD
EygwZGFjNmY0MjEyNDMwNGQ1YTg5NWIwOTg1MTExMGFlY2ZjZTg2ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25m/yUvxf7hmw9mJogUnNiDtsmhb
WSpD8UlFm7zPb2QFcMKemxXyFTITdfUJ5L/MT6X2Kh/p+0M9CfR+8LHhE+qgRQeY
YICvqB2YAkjkjQk/iO48oa7za66GA0TTphADsjSrI4e82wTvx+G2FCLvOd2ZQfvK
c1xQwFV6UbIT542VPsRBS//ZVbRGpTXGKnX+v+zwqfMx962T2+bT9082IoBrXc6Z
xQR8U6jXvp0ipVuUs6IZ6PqJF+a09Fz5pjsBerYQlprhVW1QuzifY+otO7vBzVyC
U3n5Z5kA6Vza6nHG2bTdLPHC67sRQtQsPMY7D8pn2oddGWUg1+lqVH/MlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2sb0ISQwTVqJWwmFERCuz86G2vMB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxJf4B1H
A1xqwgupdjQ/MnFktjSij2S58S2MKNPGSiLTczmVydGK7m8xTBCVvMAXFJVBSUsE
S9w7V51J9jz+TI9EvRShsPezx6cNHAIqYLUrrjHbgHL/T7RlQ6XhCcpF5DJ05L0Z
e6WpCa8dqh67yaFccsfCNRT1hKsmOEXljiFpNIbkb7PyS8ApDOzG4rvwHX0M9GBD
b14Jr55zwWNS3AwWfg01VSB3LXwS97GuDFWBg+biS3CM4+033jAwZLCd5f2PKjZ9
WbzcKlZYOSattU6aXvpWsG5LAqtxJoag5XH3H36JMwmRSwPCX0TDyCn5WSSHXGCV
jEU/ZoanKfspDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:06 2026 by rpki-client