Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: gv5D8yAMwJqZ/wySNREFdLicrub0ti6ZIopxq0WDpe4=
Subject key identifier: 96:EF:21:BF:E8:A7:E7:A0:C2:83:42:37:56:51:18:FD:4E:F8:4B:86
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019CAAFD58F01DECEAC50269A5B9F373DB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 14D8
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: hxyVMvIP_SVcBThDF1ToAOfYVKI.roa (hash: 2tvRfORdoA5iduQPZSwIAmQn4zHIFUUAid+3PnQEwek=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: ZSJnjw1O7KlWC1FlROOSuUzPv7TECXkROUkfmie62Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:58:f0:1d:ec:ea:c5:02:69:a5:b9:f3:73:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=96ef21bfe8a7e7a0c2834237565118fd4ef84b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:79:ed:62:0f:91:94:fc:72:3b:c6:f8:fc:
59:9d:da:ee:23:79:6b:48:c9:e9:c8:ad:0d:f1:ba:
ea:26:d4:e6:14:7b:db:94:3b:a4:fa:0c:c8:46:83:
d8:39:4e:91:d7:48:0b:bd:5a:f9:8d:db:5f:ee:73:
60:5a:df:51:31:e3:58:db:e1:68:e5:92:f4:fa:8f:
b6:7b:56:cb:b3:c2:9a:d7:cf:9b:c0:e2:a2:90:0f:
d8:1d:17:8c:07:db:dc:3b:52:3d:5c:49:00:0b:e8:
ff:62:e9:a9:a8:f3:78:11:a8:83:3c:47:9c:68:ce:
7b:f6:7e:be:9a:47:2a:39:49:04:83:67:9b:66:44:
67:ab:f8:ed:5a:36:34:d9:7d:d3:1a:3f:5a:2a:8a:
11:d9:bc:2b:2c:ad:13:6d:7e:d1:af:8f:f0:31:83:
61:cf:f1:ba:7b:55:ce:ad:f8:2e:cf:7a:30:84:1d:
38:20:93:55:21:04:93:a1:c1:2b:81:1f:a8:f9:5c:
30:a6:89:63:38:45:b4:d8:93:ce:c0:fa:c3:2b:8d:
30:30:c2:59:54:72:f7:a7:e4:e4:c1:6b:3e:60:f1:
a8:5a:c1:80:9d:3c:ff:03:56:e5:0e:88:45:e0:30:
ff:78:7a:0f:98:6e:96:3e:00:59:71:53:5c:94:a8:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:21:BF:E8:A7:E7:A0:C2:83:42:37:56:51:18:FD:4E:F8:4B:86
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f5:f3:26:65:33:59:17:10:53:f9:54:c7:a9:a3:79:ca:4b:
04:9a:5c:8b:4e:6e:3f:84:25:27:10:9c:a6:2b:dc:8a:1c:2f:
1a:e6:10:ae:15:9c:11:54:c8:c7:81:88:b5:39:7c:4a:42:83:
19:2e:60:9a:ad:5c:cc:63:62:6a:1c:9b:b8:47:ab:84:79:ef:
0f:69:8d:37:61:b4:1c:39:39:61:fe:89:11:c5:73:3d:17:78:
6c:3a:55:f5:8c:59:53:b6:dc:a6:53:1d:54:19:b2:1e:15:9b:
c0:7d:3a:09:6e:56:2e:e0:ee:75:e5:67:ca:92:c6:60:0a:02:
3e:25:5f:52:74:00:26:cb:f2:52:4a:40:f9:cd:bf:65:bd:58:
5a:40:7d:c2:36:dc:fe:1f:dd:d0:4f:ef:9b:74:19:ba:35:c8:
1c:e6:59:e7:d6:54:be:29:19:8d:28:0f:28:f9:8f:a4:c8:26:
00:cf:4d:41:c5:2f:cb:91:7c:fa:c7:4b:b4:f1:45:fd:5d:71:
12:c0:74:f9:9f:39:26:52:bf:52:e5:aa:55:82:2e:a9:6f:34:
76:7a:9a:08:e1:3a:3a:a9:2e:1a:7e:88:28:d7:de:31:55:cc:
dc:ce:c0:a6:8a:29:cc:02:24:1b:83:d7:76:94:fc:a4:58:7b:
ea:90:31:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/VjwHezqxQJppbnzc9sGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjAxZTkwODZkNDBkNTA4ZjU4NDJlOTgyZjI1MzY4OWY3
ZmU0YzkwHhcNMjYwMzAxMjAwMDU1WhcNMjYwMzAyMjAwMDU1WjAzMTEwLwYDVQQD
Eyg5NmVmMjFiZmU4YTdlN2EwYzI4MzQyMzc1NjUxMThmZDRlZjg0Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY557WIPkZT8cjvG+PxZndruI3lr
SMnpyK0N8brqJtTmFHvblDuk+gzIRoPYOU6R10gLvVr5jdtf7nNgWt9RMeNY2+Fo
5ZL0+o+2e1bLs8Ka18+bwOKikA/YHReMB9vcO1I9XEkAC+j/YumpqPN4EaiDPEec
aM579n6+mkcqOUkEg2ebZkRnq/jtWjY02X3TGj9aKooR2bwrLK0TbX7Rr4/wMYNh
z/G6e1XOrfguz3owhB04IJNVIQSTocErgR+o+VwwpoljOEW02JPOwPrDK40wMMJZ
VHL3p+TkwWs+YPGoWsGAnTz/A1blDohF4DD/eHoPmG6WPgBZcVNclKgwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbvIb/op+egwoNCN1ZRGP1O+EuGMB8GA1UdIwQY
MBaAFJPwHpCG1A1Qj1hC6YLyU2iff+TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgt
ZTljOTJiNzFmNTBjLzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgtZTljOTJiNzFmNTBj
LzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/XzJmUz
WRcQU/lUx6mjecpLBJpci05uP4QlJxCcpivcihwvGuYQrhWcEVTIx4GItTl8SkKD
GS5gmq1czGNiahybuEerhHnvD2mNN2G0HDk5Yf6JEcVzPRd4bDpV9YxZU7bcplMd
VBmyHhWbwH06CW5WLuDudeVnypLGYAoCPiVfUnQAJsvyUkpA+c2/Zb1YWkB9wjbc
/h/d0E/vm3QZujXIHOZZ59ZUvikZjSgPKPmPpMgmAM9NQcUvy5F8+sdLtPFF/V1x
EsB0+Z85JlK/UuWqVYIuqW80dnqaCOE6OqkuGn6IKNfeMVXM3M7ApoopzAIkG4PX
dpT8pFh76pAx0w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:38 2026 by rpki-client