
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: oyer2m8nSGUdOq4I6kl7n04U9M8QF0y59BtQB8agzaU=
Subject key identifier: 4A:7D:1D:1D:86:3F:66:95:63:D1:32:C7:C1:02:93:D0:6D:6E:DE:8C
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019FB20A34469FFD3FF3603E97A89EFF57A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 1313
Signing time: Thu 30 Jul 2026 08:00:40 +0000
Manifest this update: Thu 30 Jul 2026 08:00:40 +0000
Manifest next update: Fri 31 Jul 2026 08:00:40 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: gNW2eEhFPNK0o/tBVmacRZRibeSPjQD30SuQEHHjhcY=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:0a:34:46:9f:fd:3f:f3:60:3e:97:a8:9e:ff:57:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jul 30 08:00:40 2026 GMT
Not After : Jul 31 08:00:40 2026 GMT
Subject: CN=4a7d1d1d863f669563d132c7c10293d06d6ede8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:93:a1:e0:a5:5e:eb:c1:af:18:57:e2:b0:
af:c5:c3:de:44:d7:ea:24:04:15:e2:c5:82:ef:6c:
c5:1a:2c:6f:d5:ba:9c:3a:1f:73:fe:7f:de:0c:07:
6e:59:4d:b8:6f:24:bd:65:3d:4f:75:17:96:c4:42:
53:72:3a:72:19:71:69:08:6c:fb:0e:0f:f3:fe:68:
61:da:7b:5a:35:1a:6d:62:75:10:8f:d4:08:ff:48:
b0:61:26:5c:ec:a0:0b:ef:09:17:39:70:94:52:58:
e8:12:3b:8b:4e:82:44:a3:b5:61:a8:e5:6d:b3:f4:
3a:0a:20:88:d5:ab:bd:07:9a:7c:bb:99:14:d4:bb:
6e:3f:43:3d:5b:ce:97:6e:e2:f4:6b:a6:1c:19:1d:
c1:48:ac:85:ca:07:0e:d2:eb:66:27:ae:48:b9:0f:
5e:eb:36:62:4d:9a:ec:d4:0a:8a:13:1a:a0:ad:57:
bb:9a:54:6a:81:b1:dc:7d:cc:fc:7a:54:c8:c2:5b:
fa:a2:4d:de:19:fe:08:16:e2:eb:fc:1e:a2:14:f0:
9f:78:a9:19:50:d8:6e:af:c0:57:2c:4a:f4:4b:b3:
b7:fe:22:6c:52:22:71:7f:55:aa:30:51:83:59:fd:
e3:5d:4f:31:e3:6c:c2:77:ab:c4:5d:e5:48:46:87:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:1D:1D:86:3F:66:95:63:D1:32:C7:C1:02:93:D0:6D:6E:DE:8C
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:72:a5:b4:3c:ec:ac:41:40:31:fc:fc:ee:0f:e6:27:0a:44:
d7:07:0b:00:b1:99:42:de:95:76:5c:cd:49:29:03:97:f4:bd:
52:8e:5d:a9:12:96:a7:a3:68:a4:f4:68:59:bd:f1:ee:d3:2b:
3c:bb:c5:99:22:44:c9:1e:b6:e4:6d:11:35:d2:3c:86:cd:5b:
c7:60:7f:37:42:04:6b:e2:5e:d9:5a:69:01:c9:9f:53:d6:0a:
2b:8a:f6:89:d4:64:16:a4:33:8f:e0:60:41:9e:c2:a6:c9:e5:
d2:cc:79:f9:ad:34:27:ec:dd:69:4a:6d:b2:4f:58:62:27:81:
90:8d:7b:b2:9b:fe:83:80:ce:16:ee:d9:96:65:ee:8d:6a:45:
32:dc:33:a3:88:68:14:fb:95:10:d1:31:d6:a2:fd:f9:59:e6:
8c:73:f4:58:46:6a:b7:c4:47:53:52:39:9b:fc:a4:31:93:45:
5f:93:09:51:10:85:b3:8a:23:8c:c1:c1:ba:04:5d:40:1c:60:
f3:b2:7b:03:23:6f:a0:9b:ab:84:33:a9:81:0d:4a:01:9c:36:
65:23:b3:3e:11:c0:24:5a:65:07:5d:ea:47:90:2e:76:8f:6e:
93:69:f6:d9:56:0e:78:59:d2:ae:ea:2f:0e:36:77:65:18:a2:
bb:e7:21:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+yCjRGn/0/82A+l6ie/1eiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjYwNzMwMDgwMDQwWhcNMjYwNzMxMDgwMDQwWjAzMTEwLwYDVQQD
Eyg0YTdkMWQxZDg2M2Y2Njk1NjNkMTMyYzdjMTAyOTNkMDZkNmVkZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr2ToeClXuvBrxhX4rCvxcPeRNfq
JAQV4sWC72zFGixv1bqcOh9z/n/eDAduWU24byS9ZT1PdReWxEJTcjpyGXFpCGz7
Dg/z/mhh2ntaNRptYnUQj9QI/0iwYSZc7KAL7wkXOXCUUljoEjuLToJEo7VhqOVt
s/Q6CiCI1au9B5p8u5kU1LtuP0M9W86XbuL0a6YcGR3BSKyFygcO0utmJ65IuQ9e
6zZiTZrs1AqKExqgrVe7mlRqgbHcfcz8elTIwlv6ok3eGf4IFuLr/B6iFPCfeKkZ
UNhur8BXLEr0S7O3/iJsUiJxf1WqMFGDWf3jXU8x42zCd6vEXeVIRocNnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp9HR2GP2aVY9Eyx8ECk9Btbt6MMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHKltDzs
rEFAMfz87g/mJwpE1wcLALGZQt6VdlzNSSkDl/S9Uo5dqRKWp6NopPRoWb3x7tMr
PLvFmSJEyR625G0RNdI8hs1bx2B/N0IEa+Je2VppAcmfU9YKK4r2idRkFqQzj+Bg
QZ7Cpsnl0sx5+a00J+zdaUptsk9YYieBkI17spv+g4DOFu7ZlmXujWpFMtwzo4ho
FPuVENEx1qL9+VnmjHP0WEZqt8RHU1I5m/ykMZNFX5MJURCFs4ojjMHBugRdQBxg
87J7AyNvoJurhDOpgQ1KAZw2ZSOzPhHAJFplB13qR5Audo9uk2n22VYOeFnSruov
DjZ3ZRiiu+chxQ==
-----END CERTIFICATE-----
Generated at Thu Jul 30 11:31:33 2026 by rpki-client