Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json)
Hash identifier: Kf9380DbFnoPap/vV8uYUJLGm/Ox7tuCjzRRfN7B2Gk=
Subject key identifier: CE:4F:73:C6:C2:20:5A:B5:CC:B8:BA:E2:60:AC:3F:27:7F:2E:6F:7E
Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Certificate serial: 019E49563DF43E66974F1734657CDE6E2099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
Manifest number: 01C2
Signing time: Thu 21 May 2026 07:00:49 +0000
Manifest this update: Thu 21 May 2026 07:00:49 +0000
Manifest next update: Fri 22 May 2026 07:00:49 +0000
Files and hashes: 1: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: ppy7qCjarBZZ9gfFYPUauik0czRHzv31E8ga8V+bETk=)
2: JmPJJeeGhaj8OPF4dk-tY6Y5k1g.roa (hash: A0xD/IsAzD+DtT1/wcuH9uvjsOrsFBWVlCMGOqMrxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:56:3d:f4:3e:66:97:4f:17:34:65:7c:de:6e:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0
Validity
Not Before: May 21 07:00:49 2026 GMT
Not After : May 22 07:00:49 2026 GMT
Subject: CN=ce4f73c6c2205ab5ccb8bae260ac3f277f2e6f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:fe:e9:aa:b8:b1:06:65:8c:cd:7f:ca:0c:
94:3c:cb:62:94:bd:11:85:7f:24:fb:ab:28:ae:d4:
45:a6:52:1b:ec:89:2d:39:87:b1:f0:97:de:04:8e:
75:16:8b:1f:17:8c:2e:96:57:ec:9f:70:e4:4a:f5:
8a:c6:a4:9d:1c:82:07:68:71:67:61:49:7d:e1:3f:
ab:84:38:08:83:e1:01:cf:59:5d:de:71:8e:4b:fe:
6c:73:5f:f9:9a:6c:3d:52:f9:5d:3d:5c:2b:e2:ce:
fc:25:00:ca:20:7c:42:2b:6d:88:fd:6c:dc:48:4a:
e4:4d:df:23:c0:4c:22:9d:bb:bd:a0:a1:64:36:37:
e9:f4:47:ff:4e:0a:d0:ff:4c:69:c3:69:47:c6:4f:
6b:51:f3:a4:81:ca:d1:66:4f:fb:60:c1:f7:89:e1:
30:9c:1c:59:e5:06:de:34:0c:69:cb:5c:62:da:5f:
9a:59:59:ff:e9:bb:54:f8:2b:bd:76:88:ad:d8:fd:
de:0d:01:8d:f1:d6:2f:a4:7d:6c:a7:11:67:8a:c1:
54:96:4d:f8:b3:1e:44:fe:67:9f:bc:3e:eb:87:45:
23:fd:59:c9:ce:23:3f:91:19:17:26:53:5b:b0:21:
79:6e:9a:96:7b:29:ce:90:a2:37:03:c3:9d:ff:8a:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:73:C6:C2:20:5A:B5:CC:B8:BA:E2:60:AC:3F:27:7F:2E:6F:7E
X509v3 Authority Key Identifier:
keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:c5:8e:63:16:63:a3:6b:45:ba:dc:42:38:78:95:a7:fe:
6a:e7:7a:5a:86:6e:07:56:4e:87:dd:51:29:d6:31:9c:10:b0:
82:89:49:ff:7f:c2:74:d3:8c:1a:2c:c1:ab:b5:c6:04:e3:3e:
b0:b8:5d:5e:e5:f9:ee:d5:91:7c:8d:06:a8:e0:90:14:53:e2:
7e:cc:a0:16:ed:4b:29:0e:6d:18:96:8a:26:d9:65:f8:5d:77:
f2:cc:7c:77:ac:61:a0:24:27:d8:54:3d:4b:17:5e:8e:90:09:
92:cd:d0:b7:c9:99:c2:8c:94:ed:d9:67:68:8a:eb:a3:62:28:
e1:1c:97:c2:18:dd:2c:85:a5:1c:41:4a:a8:00:24:2a:66:b9:
15:94:f5:e8:88:d1:be:76:a9:43:ab:11:25:6c:a2:7c:86:1b:
73:5f:67:88:57:7a:12:9e:e2:bf:2a:7f:7e:da:fb:70:fa:3f:
23:c3:31:56:fa:a4:46:86:d6:32:f4:26:c7:b5:97:81:34:3a:
8f:bf:7c:fa:fc:c1:0f:22:fa:5a:a7:dc:71:ce:cf:1a:f8:06:
4d:e4:99:f0:3f:ce:d0:69:0f:aa:b0:ed:fb:c9:4b:2f:4f:5e:
5a:a7:4c:e8:3d:11:67:3e:7a:b1:fb:ed:d8:f3:3b:7d:de:2f:
c7:cd:bb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5JVj30PmaXTxc0ZXzebiCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw
NjQ5YTAwHhcNMjYwNTIxMDcwMDQ5WhcNMjYwNTIyMDcwMDQ5WjAzMTEwLwYDVQQD
EyhjZTRmNzNjNmMyMjA1YWI1Y2NiOGJhZTI2MGFjM2YyNzdmMmU2ZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs77+6aq4sQZljM1/ygyUPMtilL0R
hX8k+6sortRFplIb7IktOYex8JfeBI51FosfF4wullfsn3DkSvWKxqSdHIIHaHFn
YUl94T+rhDgIg+EBz1ld3nGOS/5sc1/5mmw9UvldPVwr4s78JQDKIHxCK22I/Wzc
SErkTd8jwEwinbu9oKFkNjfp9Ef/TgrQ/0xpw2lHxk9rUfOkgcrRZk/7YMH3ieEw
nBxZ5QbeNAxpy1xi2l+aWVn/6btU+Cu9doit2P3eDQGN8dYvpH1spxFnisFUlk34
sx5E/mefvD7rh0Uj/VnJziM/kRkXJlNbsCF5bpqWeynOkKI3A8Od/4qlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5Pc8bCIFq1zLi64mCsPyd/Lm9+MB8GA1UdIwQY
MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt
Y2E0MWM3MmNhZjk2LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2
LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq3FjmMW
Y6NrRbrcQjh4laf+aud6WoZuB1ZOh91RKdYxnBCwgolJ/3/CdNOMGizBq7XGBOM+
sLhdXuX57tWRfI0GqOCQFFPifsygFu1LKQ5tGJaKJtll+F138sx8d6xhoCQn2FQ9
SxdejpAJks3Qt8mZwoyU7dlnaIrro2Io4RyXwhjdLIWlHEFKqAAkKma5FZT16IjR
vnapQ6sRJWyifIYbc19niFd6Ep7ivyp/ftr7cPo/I8MxVvqkRobWMvQmx7WXgTQ6
j798+vzBDyL6Wqfccc7PGvgGTeSZ8D/O0GkPqrDt+8lLL09eWqdM6D0RZz56sfvt
2PM7fd4vx827bA==
-----END CERTIFICATE-----
Generated at Thu May 21 12:29:15 2026 by rpki-client