Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: 8l3KsAdHWl8egT1YGgwnjZFI1NKlLldZBlCZmdGlknE=
Subject key identifier: 92:3E:48:55:E0:29:91:C7:48:4A:E3:DB:2C:C8:91:AB:DB:0B:6A:2A
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 019CAC0FA30EF64988C1CBA5FC6750A89637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: BLjjzWFJd0Sp4PK5s69p1DNNB1SgIdm6HmA1LI5HzjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a3:0e:f6:49:88:c1:cb:a5:fc:67:50:a8:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=923e4855e02991c7484ae3db2cc891abdb0b6a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:40:38:ab:76:57:72:ec:df:4c:02:73:a8:
e5:bc:ae:50:c4:78:c6:eb:b4:7a:8d:12:d8:81:97:
bd:9d:79:42:8e:ea:bc:6f:ab:cb:bb:97:e0:c6:ac:
c0:3b:b5:2d:3f:1c:68:16:e9:f7:96:9d:fb:27:a6:
8c:4a:bc:db:35:80:14:73:ed:46:63:2a:d2:6f:1a:
dd:b9:0b:0d:8e:ce:c2:f4:77:06:9a:2a:6c:04:6d:
38:c1:b4:92:e5:2c:c8:aa:9d:98:3a:08:8e:33:6b:
3b:90:41:92:dd:90:79:f7:a7:10:b1:8e:5a:de:ab:
73:f7:4b:a1:77:e4:b7:08:11:f0:c3:9f:70:1f:29:
61:32:3e:e5:a1:59:2d:16:48:42:16:3e:0e:8d:74:
b1:cd:d3:c5:8b:85:50:f6:89:10:22:d0:e8:6f:2d:
d9:f9:d0:7f:fc:f2:17:91:d9:e0:97:14:d6:9e:38:
7e:ed:e4:55:2f:64:ac:24:fc:1b:d4:30:f7:d3:c9:
02:09:4c:52:90:12:c5:23:2e:ca:80:6b:28:d2:44:
ec:ef:e4:39:c7:89:54:ea:70:ed:0c:a8:e4:2b:ba:
70:d7:d0:a7:0e:d6:3b:40:d1:96:d8:64:75:d2:2c:
9c:35:08:a9:68:0e:dd:0b:02:e1:80:db:a4:bd:e7:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:48:55:E0:29:91:C7:48:4A:E3:DB:2C:C8:91:AB:DB:0B:6A:2A
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:1f:9c:e2:78:24:7f:51:e0:4e:05:6c:00:30:3b:64:95:
a6:4a:29:16:99:0e:e9:18:13:15:83:94:11:6f:a4:b3:1d:f7:
f6:1f:d2:e1:c8:de:cc:08:92:cc:c4:27:77:b2:ff:df:64:76:
25:75:18:30:8b:6c:39:2d:77:b2:41:a1:1d:69:cc:95:28:5e:
d6:3b:7f:88:d6:e8:e1:c2:97:68:8b:ba:12:3c:24:fe:58:16:
ec:02:fe:86:a2:9a:3e:7e:2a:74:0e:82:9b:d0:7a:65:6a:84:
20:a5:47:9b:fd:44:f6:7b:71:64:d2:63:4c:79:01:9f:87:1e:
17:c3:3d:d3:11:37:b5:b9:9b:72:65:46:6d:1b:ad:fd:84:46:
09:f1:42:1e:ff:2f:83:5c:3f:d1:27:04:d1:e8:a7:a1:44:d3:
ca:cc:2f:5d:e8:29:c9:18:0a:40:af:9f:32:e2:93:ff:f8:ea:
76:98:5b:fb:c8:bc:6c:f7:35:92:51:c8:af:32:61:61:b5:74:
11:b0:3b:b3:d9:53:a5:38:7a:93:ed:6e:77:d6:ba:0a:37:33:
f4:32:23:2f:8d:40:5f:b4:df:16:db:83:25:d9:d4:c6:05:fc:
3a:c3:05:fa:2a:f7:9f:3b:0c:bb:81:95:5d:a3:ad:43:13:01:
9c:a3:7a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD6MO9kmIwcul/GdQqJY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy
OTI3NGIwHhcNMjYwMzAyMDEwMDMxWhcNMjYwMzAzMDEwMDMxWjAzMTEwLwYDVQQD
Eyg5MjNlNDg1NWUwMjk5MWM3NDg0YWUzZGIyY2M4OTFhYmRiMGI2YTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvNAOKt2V3Ls30wCc6jlvK5QxHjG
67R6jRLYgZe9nXlCjuq8b6vLu5fgxqzAO7UtPxxoFun3lp37J6aMSrzbNYAUc+1G
YyrSbxrduQsNjs7C9HcGmipsBG04wbSS5SzIqp2YOgiOM2s7kEGS3ZB596cQsY5a
3qtz90uhd+S3CBHww59wHylhMj7loVktFkhCFj4OjXSxzdPFi4VQ9okQItDoby3Z
+dB//PIXkdnglxTWnjh+7eRVL2SsJPwb1DD308kCCUxSkBLFIy7KgGso0kTs7+Q5
x4lU6nDtDKjkK7pw19CnDtY7QNGW2GR10iycNQipaA7dCwLhgNukvecJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI+SFXgKZHHSErj2yzIkavbC2oqMB8GA1UdIwQY
MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt
NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2
LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHIfnOJ4
JH9R4E4FbAAwO2SVpkopFpkO6RgTFYOUEW+ksx339h/S4cjezAiSzMQnd7L/32R2
JXUYMItsOS13skGhHWnMlShe1jt/iNbo4cKXaIu6Ejwk/lgW7AL+hqKaPn4qdA6C
m9B6ZWqEIKVHm/1E9ntxZNJjTHkBn4ceF8M90xE3tbmbcmVGbRut/YRGCfFCHv8v
g1w/0ScE0einoUTTyswvXegpyRgKQK+fMuKT//jqdphb+8i8bPc1klHIrzJhYbV0
EbA7s9lTpTh6k+1ud9a6Cjcz9DIjL41AX7TfFtuDJdnUxgX8OsMF+ir3nzsMu4GV
XaOtQxMBnKN6iA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:29 2026 by rpki-client