Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: sD8+HsvD4dHWv68MPhtAvd2XA2Gf69zeXSZxiqWNwu0=
Subject key identifier: D7:2C:50:D0:32:B5:A0:F0:D1:BD:23:FE:D4:EE:FD:31:49:E2:6B:36
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019EBD6BEBDF77692A9CCA2760E0B64209D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 158D
Signing time: Fri 12 Jun 2026 20:00:26 +0000
Manifest this update: Fri 12 Jun 2026 20:00:26 +0000
Manifest next update: Sat 13 Jun 2026 20:00:26 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: CH6WzwzEIs+ieYiM8aeha/K8lkXWG/0oA7anvMxhCGM=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6b:eb:df:77:69:2a:9c:ca:27:60:e0:b6:42:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jun 12 20:00:26 2026 GMT
Not After : Jun 13 20:00:26 2026 GMT
Subject: CN=d72c50d032b5a0f0d1bd23fed4eefd3149e26b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:96:1e:ce:ba:a7:40:cf:1c:f3:b8:7d:7e:
be:2b:d0:ae:61:36:38:17:01:a7:cf:77:74:46:74:
cd:da:af:1e:a8:0c:bd:91:fa:51:3d:17:c2:a1:02:
24:cc:37:58:e3:e9:49:9a:f3:a5:92:9d:eb:4b:32:
1e:b2:8d:0c:1d:7e:41:7e:03:4e:9e:3b:5a:8d:66:
ce:a4:59:1c:81:34:33:78:5d:9b:01:c3:5c:78:aa:
16:0e:20:ef:a9:fc:e9:d9:69:45:f6:4b:ad:91:7b:
bb:a6:98:18:df:fa:e1:98:ed:36:dd:20:48:c5:8c:
b5:cc:d8:a7:6d:c9:f3:42:9c:46:8c:0b:07:35:81:
ef:7e:6c:d3:e6:3a:45:c3:62:03:38:f8:4c:ce:0b:
39:46:5e:b3:56:54:7f:b3:86:4b:6e:ca:7c:ef:33:
cb:b5:23:da:65:b5:64:f1:c1:58:8b:c0:a3:53:43:
e6:9c:fc:b1:f8:8d:ff:6b:5d:9d:f8:9b:53:a9:85:
c7:51:4a:4f:82:72:c5:78:53:0a:c1:26:f1:ac:3a:
29:0e:a0:1e:2c:0b:d2:e4:95:6c:eb:75:93:d5:7e:
d5:96:63:1d:51:32:f5:34:51:9d:26:70:f8:62:aa:
b4:36:c3:a4:c4:5e:23:cf:8b:a8:fd:7e:87:3f:c7:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:50:D0:32:B5:A0:F0:D1:BD:23:FE:D4:EE:FD:31:49:E2:6B:36
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6a:b0:61:61:7e:e0:a0:05:b6:3a:42:c7:31:6c:f6:b7:92:
e0:e3:09:df:71:f3:e6:fd:b9:08:57:52:29:86:47:15:bf:b4:
00:f3:ef:a2:e9:fd:90:fe:89:88:4d:53:11:55:58:a9:f6:49:
76:ff:7f:03:47:e5:80:78:8e:c2:92:c6:79:8f:04:bb:78:d0:
0e:95:81:79:c4:58:d1:e5:51:79:cd:19:51:08:03:a6:63:29:
3d:94:93:15:47:e5:cd:e2:f3:41:7b:ae:20:2e:4e:f0:7b:9e:
93:42:30:d6:2f:c5:ac:23:f4:79:ed:95:6e:93:e5:fd:bc:d2:
5a:79:02:8f:47:9c:a0:f9:b9:ec:3d:af:63:a3:9d:a7:c8:ab:
93:3f:77:4d:a8:d6:e7:ec:4b:60:13:7f:d3:d0:8b:80:e9:e5:
4b:47:53:51:4c:0d:1c:92:c2:a8:dc:f6:e8:3f:8a:65:c3:94:
fb:df:bc:49:ee:fa:c7:be:ff:9f:eb:df:69:d8:8a:2b:94:5d:
59:ef:a2:e2:6b:e2:d1:7e:35:2e:e4:d1:e4:2c:e1:cb:af:81:
6d:0c:84:b5:7c:15:ef:10:00:6a:a3:ab:65:60:82:bc:80:97:
13:c2:1e:4d:38:10:5d:07:fe:ba:68:f3:61:28:a2:5e:c9:cd:
58:13:69:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69a+vfd2kqnMonYOC2QgnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZTdjMzA0NTkzNTZhOTAwZGM2MzM2OTc2NGE3NTRjNWMx
ZjMzMTkwHhcNMjYwNjEyMjAwMDI2WhcNMjYwNjEzMjAwMDI2WjAzMTEwLwYDVQQD
EyhkNzJjNTBkMDMyYjVhMGYwZDFiZDIzZmVkNGVlZmQzMTQ5ZTI2YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq2WHs66p0DPHPO4fX6+K9CuYTY4
FwGnz3d0RnTN2q8eqAy9kfpRPRfCoQIkzDdY4+lJmvOlkp3rSzIeso0MHX5BfgNO
njtajWbOpFkcgTQzeF2bAcNceKoWDiDvqfzp2WlF9kutkXu7ppgY3/rhmO023SBI
xYy1zNinbcnzQpxGjAsHNYHvfmzT5jpFw2IDOPhMzgs5Rl6zVlR/s4ZLbsp87zPL
tSPaZbVk8cFYi8CjU0PmnPyx+I3/a12d+JtTqYXHUUpPgnLFeFMKwSbxrDopDqAe
LAvS5JVs63WT1X7VlmMdUTL1NFGdJnD4Yqq0NsOkxF4jz4uo/X6HP8fHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcsUNAytaDw0b0j/tTu/TFJ4ms2MB8GA1UdIwQY
MBaAFAHnwwRZNWqQDcYzaXZKdUxcHzMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUt
YmYyOWM0MTg4ZDdlLzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOWMxNjQtZWFlNy00NmJkLWExZGUtYmYyOWM0MTg4ZDdl
LzEvQWVmREJGazFhcEFOeGpOcGRrcDFURndmTXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWqwYWF+
4KAFtjpCxzFs9reS4OMJ33Hz5v25CFdSKYZHFb+0APPvoun9kP6JiE1TEVVYqfZJ
dv9/A0flgHiOwpLGeY8Eu3jQDpWBecRY0eVRec0ZUQgDpmMpPZSTFUflzeLzQXuu
IC5O8Huek0Iw1i/FrCP0ee2VbpPl/bzSWnkCj0ecoPm57D2vY6Odp8irkz93TajW
5+xLYBN/09CLgOnlS0dTUUwNHJLCqNz26D+KZcOU+9+8Se76x77/n+vfadiKK5Rd
We+i4mvi0X41LuTR5Czhy6+BbQyEtXwV7xAAaqOrZWCCvICXE8IeTTgQXQf+umjz
YSiiXsnNWBNpAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:09 2026 by rpki-client