Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier: N428eO9U3qwvo8wnZzyVINjgYT3mbCN0Z4VidvSCmFU=
Subject key identifier: 42:4F:AD:91:C4:95:EC:0D:18:DE:22:CB:17:5D:41:F7:E1:E9:73:AA
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial: 019D98F4645B2A3120C0EBE81874CED09BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number: 0D48
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: ta14y2tBLeTIRC9jgyS23LN+EOiw+EQj7+tLuOE+0Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:64:5b:2a:31:20:c0:eb:e8:18:74:ce:d0:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=424fad91c495ec0d18de22cb175d41f7e1e973aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:68:ea:4d:de:1a:7c:10:d1:24:bc:eb:70:
6d:25:86:a7:f9:cb:3f:f8:a8:d6:e0:40:0c:69:20:
cc:1d:f6:d0:14:40:b9:ef:68:32:29:90:22:68:e4:
f9:b0:7d:db:74:e7:23:73:02:2e:de:9a:ea:f2:05:
73:5f:75:0a:62:dd:ce:e0:0a:49:e9:84:9b:93:83:
25:1a:a1:6a:46:2c:df:63:c9:89:8c:a6:d1:0b:b8:
0b:90:d8:9b:95:50:64:ab:1f:d4:14:0f:00:5d:12:
a0:df:b1:88:b0:83:f1:53:00:98:5e:ec:cc:a3:21:
16:98:a4:30:6a:80:04:a7:99:57:55:a4:6f:f6:44:
63:11:76:b4:ca:5f:52:b0:2d:e8:fe:4c:94:81:0e:
76:72:a3:ba:d9:c8:33:4e:55:62:bd:f2:cf:fd:ab:
47:02:6e:42:fe:38:93:4a:84:bf:05:e2:6f:44:e4:
23:b6:53:cf:73:1e:62:9b:9d:03:09:c4:6f:ad:5b:
2f:16:be:d5:b4:bc:a8:3a:d5:22:e0:ca:9e:36:0b:
06:49:f2:33:0a:43:a4:2d:31:46:4d:b2:02:c5:e0:
34:28:cb:9c:ef:4c:79:f3:84:2a:ea:39:c3:ec:88:
e2:af:b4:ea:13:a6:04:87:32:4c:15:79:f0:21:3d:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:AD:91:C4:95:EC:0D:18:DE:22:CB:17:5D:41:F7:E1:E9:73:AA
X509v3 Authority Key Identifier:
keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:fc:09:a0:cf:fe:51:c6:0f:be:05:8b:bd:0c:f8:e7:7f:
94:17:b2:41:70:76:fd:47:70:f0:53:ea:f5:fe:1a:21:c8:2f:
00:61:49:8b:cf:0a:b8:6a:36:df:2a:62:95:96:4a:fe:67:59:
09:e5:fe:a8:0f:df:f8:39:88:78:51:1b:e9:4a:1f:79:9f:bb:
e6:da:cb:bd:b1:c1:4b:65:73:0f:79:cc:bc:6b:c8:f3:1f:18:
36:19:9a:de:2b:1a:1f:c9:04:06:70:b6:fd:ef:fb:c8:94:b4:
25:1a:43:17:06:bb:3a:21:14:58:78:a8:07:4f:9d:56:98:83:
68:66:99:ae:e8:71:37:96:c2:2d:87:e8:a2:47:b0:08:d0:d2:
6f:bf:ca:eb:27:0e:da:71:f6:45:cd:a2:58:2f:cd:e9:1d:e8:
0f:5d:1d:15:34:9e:b3:07:d5:45:cc:99:2f:a9:0e:7c:0b:6e:
5e:29:93:f1:a6:f6:78:fc:49:d8:38:35:a3:22:13:9e:81:27:
c6:93:75:88:10:b8:16:61:a2:09:57:d8:47:dc:1a:06:33:59:
a6:b4:91:32:ac:e2:a2:a3:af:71:2d:c5:e5:52:14:21:56:60:
84:5a:cf:ad:d8:e5:10:44:1f:1b:c8:75:78:de:d2:f7:41:df:
5d:4a:03:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9GRbKjEgwOvoGHTO0JvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZTNhZDhiMDIyNDUyMWNkMGFlNzQ5MmM2OTRiYzJkNGVl
MWZkYjIwHhcNMjYwNDE3MDEwMDQ2WhcNMjYwNDE4MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg0MjRmYWQ5MWM0OTVlYzBkMThkZTIyY2IxNzVkNDFmN2UxZTk3M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprxo6k3eGnwQ0SS863BtJYan+cs/
+KjW4EAMaSDMHfbQFEC572gyKZAiaOT5sH3bdOcjcwIu3prq8gVzX3UKYt3O4ApJ
6YSbk4MlGqFqRizfY8mJjKbRC7gLkNiblVBkqx/UFA8AXRKg37GIsIPxUwCYXuzM
oyEWmKQwaoAEp5lXVaRv9kRjEXa0yl9SsC3o/kyUgQ52cqO62cgzTlVivfLP/atH
Am5C/jiTSoS/BeJvROQjtlPPcx5im50DCcRvrVsvFr7VtLyoOtUi4MqeNgsGSfIz
CkOkLTFGTbICxeA0KMuc70x584Qq6jnD7Ijir7TqE6YEhzJMFXnwIT2f3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJPrZHElewNGN4iyxddQffh6XOqMB8GA1UdIwQY
MBaAFGnjrYsCJFIc0K50ksaUvC1O4f2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2Qt
ZTk3ZDIyNmZiZWVhLzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iZDhlYzEtMTdhNC00NGRmLTg4M2QtZTk3ZDIyNmZiZWVh
LzEvYWVPdGl3SWtVaHpRcm5TU3hwUzhMVTdoX2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkn8CaDP
/lHGD74Fi70M+Od/lBeyQXB2/Udw8FPq9f4aIcgvAGFJi88KuGo23ypilZZK/mdZ
CeX+qA/f+DmIeFEb6UofeZ+75trLvbHBS2VzD3nMvGvI8x8YNhma3isaH8kEBnC2
/e/7yJS0JRpDFwa7OiEUWHioB0+dVpiDaGaZruhxN5bCLYfookewCNDSb7/K6ycO
2nH2Rc2iWC/N6R3oD10dFTSeswfVRcyZL6kOfAtuXimT8ab2ePxJ2Dg1oyITnoEn
xpN1iBC4FmGiCVfYR9waBjNZprSRMqzioqOvcS3F5VIUIVZghFrPrdjlEEQfG8h1
eN7S90HfXUoDZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:51 2026 by rpki-client