Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: gnoHC/PPltzsAGNXXj0GLOeN5zGX6hqaTgstOTxTN5Q=
Subject key identifier: E4:D6:B2:25:75:28:F4:94:9B:48:F4:37:19:01:6A:9A:94:3E:76:F5
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 019D3865C62695543392484AE4443A62EA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: f27gnuE+mD5VNEbB7YmQcQcBqRqLdQLoZLRkgIddqj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c6:26:95:54:33:92:48:4a:e4:44:3a:62:ea:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=e4d6b2257528f4949b48f43719016a9a943e76f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:66:a7:3d:7b:39:d6:80:c2:a2:e3:fe:1c:
f3:77:7f:d0:bf:88:ae:3c:12:ee:cc:87:01:cf:ad:
a1:0b:73:a3:3e:d8:c5:0c:d9:bb:49:be:78:23:1b:
d1:f1:a1:16:7e:fc:9d:aa:48:6d:bb:e6:a0:aa:f7:
f5:2f:52:eb:e3:0f:ad:25:d2:96:4d:e4:d6:a5:43:
25:4a:2c:4b:c0:d0:5c:b9:5d:d8:18:30:74:84:72:
a9:e2:11:f5:4d:d9:d8:40:33:62:19:5f:85:97:a1:
93:e0:26:24:ce:66:4e:44:10:15:3e:ec:6a:b3:e6:
e0:39:8a:6e:bd:c2:47:33:29:75:4f:11:db:36:a6:
e3:fd:76:18:e8:f2:f4:6d:d4:74:fc:d1:81:02:00:
77:bc:74:74:7e:cb:28:8f:78:37:4a:a8:0a:fa:ec:
7c:34:99:cf:88:82:b1:de:29:80:5d:00:19:1f:99:
8c:a8:07:f9:3e:7b:04:06:f1:c1:30:e0:d3:01:b3:
ab:fd:7a:12:1a:54:ca:f1:70:65:c0:a6:73:54:c2:
7b:da:3d:cb:40:c7:d3:ce:ca:dc:e6:a4:d1:d0:8e:
47:c9:03:48:be:30:b2:e4:96:70:ff:3c:dc:a7:c4:
4d:42:fa:09:86:39:74:f0:93:b3:ea:60:f7:ef:a6:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D6:B2:25:75:28:F4:94:9B:48:F4:37:19:01:6A:9A:94:3E:76:F5
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5c:29:1a:54:e0:e0:08:29:cf:c6:91:6f:4a:d7:0a:92:31:
b1:8c:fc:6d:b4:4a:87:ab:3d:26:c4:f9:50:77:26:13:02:9b:
b3:28:77:bd:f8:5c:9f:5b:a2:69:69:16:eb:f2:6e:47:e7:9a:
51:1b:df:8f:f9:54:26:20:75:b4:d8:d5:36:5f:2a:d9:ab:02:
8e:fd:06:50:6b:36:ab:85:b2:4b:5b:a3:46:5b:5c:8e:8e:3a:
e0:4d:5e:a3:59:11:c7:34:72:de:6f:f9:e6:52:1d:27:45:ae:
3b:82:79:1e:59:a1:55:c0:4b:39:8d:2b:6a:9c:e6:5a:57:1d:
c1:31:a8:e4:cd:9b:00:1b:95:c0:3e:46:ad:0b:e7:07:20:38:
e5:26:d0:5b:58:d3:c4:3c:5f:52:85:16:a9:06:ce:14:35:81:
4b:90:00:a5:28:8b:cf:02:1d:32:3b:86:e2:90:e4:7f:b7:33:
f9:22:f4:55:5a:af:6b:3c:0b:53:47:f6:ee:da:04:2f:12:dd:
65:af:b0:e0:6e:ad:96:dc:6e:6d:77:01:42:8b:8a:e2:6d:da:
4b:7d:a7:8c:66:80:2a:9a:51:79:ae:3e:eb:ef:29:b7:6b:63:
cb:e7:28:f9:9d:e8:e2:4a:29:fd:be:ec:44:c9:14:17:3d:e0:
08:9c:23:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcYmlVQzkkhK5EQ6YuqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDMxMWRmYjY1YjY1OTU2MjE4ZWZmNDcxOTdhOWViOTZh
NDA3ZGIwHhcNMjYwMzI5MDcwMTI2WhcNMjYwMzMwMDcwMTI2WjAzMTEwLwYDVQQD
EyhlNGQ2YjIyNTc1MjhmNDk0OWI0OGY0MzcxOTAxNmE5YTk0M2U3NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38pmpz17OdaAwqLj/hzzd3/Qv4iu
PBLuzIcBz62hC3OjPtjFDNm7Sb54IxvR8aEWfvydqkhtu+agqvf1L1Lr4w+tJdKW
TeTWpUMlSixLwNBcuV3YGDB0hHKp4hH1TdnYQDNiGV+Fl6GT4CYkzmZORBAVPuxq
s+bgOYpuvcJHMyl1TxHbNqbj/XYY6PL0bdR0/NGBAgB3vHR0fssoj3g3SqgK+ux8
NJnPiIKx3imAXQAZH5mMqAf5PnsEBvHBMODTAbOr/XoSGlTK8XBlwKZzVMJ72j3L
QMfTzsrc5qTR0I5HyQNIvjCy5JZw/zzcp8RNQvoJhjl08JOz6mD376bVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTWsiV1KPSUm0j0NxkBapqUPnb1MB8GA1UdIwQY
MBaAFGkDEd+2W2WVYhjv9HGXqeuWpAfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQt
YTQ1NmUzNjRjYjBlLzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQtYTQ1NmUzNjRjYjBl
LzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVwpGlTg
4Agpz8aRb0rXCpIxsYz8bbRKh6s9JsT5UHcmEwKbsyh3vfhcn1uiaWkW6/JuR+ea
URvfj/lUJiB1tNjVNl8q2asCjv0GUGs2q4WyS1ujRltcjo464E1eo1kRxzRy3m/5
5lIdJ0WuO4J5HlmhVcBLOY0rapzmWlcdwTGo5M2bABuVwD5GrQvnByA45SbQW1jT
xDxfUoUWqQbOFDWBS5AApSiLzwIdMjuG4pDkf7cz+SL0VVqvazwLU0f27toELxLd
Za+w4G6tltxubXcBQouK4m3aS32njGaAKppRea4+6+8pt2tjy+co+Z3o4kop/b7s
RMkUFz3gCJwjOQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client