Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: BBu6POFnL1wbHlMaFXzkCl/EAVGBVk/kEMVfuGnrvms=
Subject key identifier: E3:E1:22:94:39:F5:CD:0E:62:4A:A7:13:8D:A8:77:2F:A9:72:81:5B
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019D37896059FB0882E92ED87944F9ABF44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 12C9
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (hash: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ=)
2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: EVUwLDMp+pnhP9v+1c/vQbqlLI9kWT69dxQBZseJOOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:60:59:fb:08:82:e9:2e:d8:79:44:f9:ab:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=e3e1229439f5cd0e624aa7138da8772fa972815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:c8:ef:bd:4f:22:1b:fb:f4:83:fa:c9:a6:
fd:96:15:a2:96:d0:92:48:9a:6f:d6:79:de:34:22:
33:c5:e5:91:b4:0a:17:e6:da:a6:29:41:49:29:88:
ce:7c:bc:db:1f:e5:2c:9f:4c:cb:ac:02:54:51:71:
54:31:64:91:eb:be:b4:0c:79:01:33:dc:98:fb:7c:
a7:49:2c:dd:ee:ba:4e:a9:94:7f:32:22:e2:4d:eb:
a3:2e:59:92:e1:a1:f7:77:56:e6:cf:92:cc:2e:14:
7c:33:ce:71:85:f0:4e:4e:5c:c2:e8:ea:20:a5:44:
2c:f6:ff:98:cb:2e:cd:d3:4f:87:c4:7a:88:03:e5:
bf:5a:e2:9f:fd:91:c3:fd:57:96:0a:e8:10:00:00:
3e:8c:60:d3:37:cc:e0:d2:6e:92:4b:2e:ab:25:62:
51:db:28:70:60:97:95:49:44:c8:a5:fa:1b:7f:1b:
28:cd:be:6c:23:ea:83:ef:a3:b1:0f:f6:0b:dd:9e:
1c:43:b8:d9:1e:a0:5e:28:53:9b:40:83:ef:cd:07:
ad:0f:30:6c:ff:fc:29:4d:cc:03:10:8f:d8:de:6a:
6e:1e:65:e9:2c:79:c2:a6:35:64:0b:3d:c2:b9:3f:
95:75:b3:77:19:03:ab:7e:9f:19:53:8e:48:ca:34:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:22:94:39:F5:CD:0E:62:4A:A7:13:8D:A8:77:2F:A9:72:81:5B
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:66:f3:8f:f0:3e:71:e0:9b:0e:2d:64:d8:de:7c:fb:e0:
3a:ee:bc:57:1b:56:eb:ac:ec:e2:d7:74:86:8c:da:34:67:8f:
94:27:8b:e6:e1:48:cc:f5:80:10:c6:21:36:aa:cb:dc:c1:4f:
87:90:c6:e0:be:02:74:d4:65:23:d4:f0:dc:4b:8b:11:76:95:
0a:c6:45:16:34:cf:e7:9f:8d:f0:bb:9a:2b:ef:b9:49:6a:30:
af:93:63:96:d2:ad:05:e7:c3:41:54:2c:c0:28:60:b2:d1:ca:
07:c7:5a:cd:91:6b:8e:ea:9b:1d:73:10:40:46:e9:9c:b4:f4:
82:7f:96:28:67:7b:35:c5:2c:76:58:87:ad:8e:e0:b2:31:ab:
a8:16:69:b2:e2:16:3a:fe:91:26:66:98:50:a1:d2:d2:ec:c4:
8b:98:a0:e2:64:48:c9:31:c2:2c:55:2a:ed:1d:f4:af:f9:59:
41:42:7e:95:06:34:cb:6c:6f:36:9a:9e:1b:9f:26:41:95:fc:
7c:d8:cd:e0:c9:65:1c:1e:3b:2d:74:4e:78:3c:f2:9d:4c:bd:
34:8e:66:c6:f3:19:de:9c:d8:4f:62:a6:0a:8d:fb:ff:70:83:
02:31:58:f7:69:f0:72:4c:21:83:d2:d9:78:c8:9f:19:c0:d7:
6d:0f:e4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWBZ+wiC6S7YeUT5q/RPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjYwMzI5MDMwMDQzWhcNMjYwMzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhlM2UxMjI5NDM5ZjVjZDBlNjI0YWE3MTM4ZGE4NzcyZmE5NzI4MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rDI771PIhv79IP6yab9lhWiltCS
SJpv1nneNCIzxeWRtAoX5tqmKUFJKYjOfLzbH+Usn0zLrAJUUXFUMWSR6760DHkB
M9yY+3ynSSzd7rpOqZR/MiLiTeujLlmS4aH3d1bmz5LMLhR8M85xhfBOTlzC6Oog
pUQs9v+Yyy7N00+HxHqIA+W/WuKf/ZHD/VeWCugQAAA+jGDTN8zg0m6SSy6rJWJR
2yhwYJeVSUTIpfobfxsozb5sI+qD76OxD/YL3Z4cQ7jZHqBeKFObQIPvzQetDzBs
//wpTcwDEI/Y3mpuHmXpLHnCpjVkCz3CuT+VdbN3GQOrfp8ZU45IyjTJyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPhIpQ59c0OYkqnE42ody+pcoFbMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHatm84/w
PnHgmw4tZNjefPvgOu68VxtW66zs4td0hozaNGePlCeL5uFIzPWAEMYhNqrL3MFP
h5DG4L4CdNRlI9Tw3EuLEXaVCsZFFjTP55+N8LuaK++5SWowr5NjltKtBefDQVQs
wChgstHKB8dazZFrjuqbHXMQQEbpnLT0gn+WKGd7NcUsdliHrY7gsjGrqBZpsuIW
Ov6RJmaYUKHS0uzEi5ig4mRIyTHCLFUq7R30r/lZQUJ+lQY0y2xvNpqeG58mQZX8
fNjN4MllHB47LXROeDzynUy9NI5mxvMZ3pzYT2KmCo37/3CDAjFY92nwckwhg9LZ
eMifGcDXbQ/kyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:37 2026 by rpki-client