Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: 8hiBlgETc5xbIY33fCgmCKzwvKPo5VRBcWOW9p0KsVk=
Subject key identifier: 9A:51:27:9A:4B:84:C7:E4:8D:2E:16:CC:AA:AC:1F:70:8D:2B:28:1F
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 01A0C4E965DE8094B2507802E9F8AE5FCA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 169A
Signing time: Mon 21 Sep 2026 17:00:25 +0000
Manifest this update: Mon 21 Sep 2026 17:00:25 +0000
Manifest next update: Tue 22 Sep 2026 17:00:25 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: YLChmmWCzkRSqb2ufZvav7PBpNHwnSWDG0pN7w9yWDE=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:65:de:80:94:b2:50:78:02:e9:f8:ae:5f:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Sep 21 17:00:25 2026 GMT
Not After : Sep 22 17:00:25 2026 GMT
Subject: CN=9a51279a4b84c7e48d2e16ccaaac1f708d2b281f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:74:d4:5b:bd:53:64:10:84:97:69:8d:0c:
29:5a:e9:cb:ea:9a:3c:7b:3d:fb:d7:6e:db:6d:47:
4c:6f:14:44:c1:56:ca:8c:60:8d:8e:a0:07:aa:5c:
f1:43:25:b0:08:fb:37:8f:47:7c:7a:12:c4:72:6d:
ac:d2:21:2f:75:05:b2:cd:78:ce:64:12:91:a5:ff:
4a:0d:9e:64:6d:d2:9f:df:99:3f:70:19:5e:60:cf:
46:0e:c4:36:90:bb:58:bf:a5:86:67:05:99:2e:67:
8d:23:8f:1b:bb:73:d8:0f:56:66:3e:9c:d5:7b:dd:
b6:f0:93:94:9c:30:7d:62:f3:a0:23:b8:a7:45:6d:
51:01:a6:7e:7c:32:2c:ff:69:f3:2f:b4:30:1c:f9:
17:5f:f5:89:3a:c9:2e:1b:f2:28:fc:40:c6:94:14:
4f:ed:bb:ea:03:c1:7f:15:c2:b2:df:b1:19:f3:7e:
17:e6:4d:42:66:1e:fb:26:3c:82:a0:ee:c3:a9:45:
2b:80:f2:83:9a:17:fd:16:a1:2d:a2:1f:2b:63:86:
c4:ee:6f:3b:20:fe:33:84:47:ed:07:84:4d:11:12:
da:ad:15:56:5e:2f:10:63:75:2a:69:db:7b:9e:c5:
c5:54:30:0a:0b:11:58:47:4b:ea:3e:54:c4:8d:e2:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:27:9A:4B:84:C7:E4:8D:2E:16:CC:AA:AC:1F:70:8D:2B:28:1F
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:4c:f7:8a:77:17:56:dd:43:1c:de:e8:8b:dc:99:f5:fb:
53:da:2b:59:91:dc:c6:57:6e:95:da:03:ba:2f:93:a6:5b:02:
16:3a:4d:01:b4:89:3e:79:48:6c:4a:5f:38:be:51:ad:06:0d:
7c:62:21:14:0f:9c:ad:69:74:56:a5:88:8c:7e:ef:d0:77:52:
44:ce:51:e5:26:0d:87:33:de:1e:84:88:44:85:2b:a6:d2:d8:
7a:6b:3e:3b:69:a1:dc:02:35:f9:61:99:00:db:55:61:0b:4f:
c5:cf:53:29:1e:9c:3e:1b:d1:43:77:7a:3b:a3:b8:42:59:19:
c2:9a:24:43:a3:ec:52:59:8e:d3:58:5d:6b:b7:ed:0a:a6:8d:
9f:c7:67:ed:4b:74:31:1b:00:ad:5f:95:4e:d2:00:b3:0c:22:
97:34:f2:33:5a:49:4b:cd:35:3d:ee:16:41:d1:bc:fa:a3:37:
f4:aa:4d:41:f3:29:e0:4e:ba:5b:19:d1:d0:ac:10:0e:d4:ab:
ba:2e:a5:c8:2a:c1:dc:1b:87:7b:95:62:59:4b:0e:22:2b:39:
e3:77:61:bb:da:d0:26:d0:5a:78:ef:86:0d:c5:8b:af:87:85:
5e:fa:dc:28:c2:f6:75:fe:17:a8:9f:8e:1c:6a:bd:8d:23:3e:
f3:19:9e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6WXegJSyUHgC6fiuX8qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx
ZjMzMTkwHhcNMjYwOTIxMTcwMDI1WhcNMjYwOTIyMTcwMDI1WjAzMTEwLwYDVQQD
Eyg5YTUxMjc5YTRiODRjN2U0OGQyZTE2Y2NhYWFjMWY3MDhkMmIyODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXx01Fu9U2QQhJdpjQwpWunL6po8
ez37127bbUdMbxREwVbKjGCNjqAHqlzxQyWwCPs3j0d8ehLEcm2s0iEvdQWyzXjO
ZBKRpf9KDZ5kbdKf35k/cBleYM9GDsQ2kLtYv6WGZwWZLmeNI48bu3PYD1ZmPpzV
e9228JOUnDB9YvOgI7inRW1RAaZ+fDIs/2nzL7QwHPkXX/WJOskuG/Io/EDGlBRP
7bvqA8F/FcKy37EZ834X5k1CZh77JjyCoO7DqUUrgPKDmhf9FqEtoh8rY4bE7m87
IP4zhEftB4RNERLarRVWXi8QY3Uqadt7nsXFVDAKCxFYR0vqPlTEjeJVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpRJ5pLhMfkjS4WzKqsH3CNKygfMB8GA1UdIwQY
MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt
YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl
LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONRM94p3
F1bdQxze6IvcmfX7U9orWZHcxlduldoDui+TplsCFjpNAbSJPnlIbEpfOL5RrQYN
fGIhFA+crWl0VqWIjH7v0HdSRM5R5SYNhzPeHoSIRIUrptLYems+O2mh3AI1+WGZ
ANtVYQtPxc9TKR6cPhvRQ3d6O6O4QlkZwpokQ6PsUlmO01hda7ftCqaNn8dn7Ut0
MRsArV+VTtIAswwilzTyM1pJS801Pe4WQdG8+qM39KpNQfMp4E66WxnR0KwQDtSr
ui6lyCrB3BuHe5ViWUsOIis543dhu9rQJtBaeO+GDcWLr4eFXvrcKML2df4XqJ+O
HGq9jSM+8xmewA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:12:35 2026 by rpki-client