Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: oCX642qJojvUsRgdz/0xSYWSWA/iOCflLo1ErS7XjPc=
Subject key identifier: 1E:DA:DF:18:59:F6:06:1A:E8:F5:10:D9:5E:6F:02:AB:FD:67:70:06
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 019DA4F881EAA511F5F3497FF02E1EC7DFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: E0
Signing time: Sun 19 Apr 2026 09:00:42 +0000
Manifest this update: Sun 19 Apr 2026 09:00:42 +0000
Manifest next update: Mon 20 Apr 2026 09:00:42 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: tw1vzrnO2v5WZ4HWxTJZI8CA8zXRq4XHS+s2QDzE4uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:81:ea:a5:11:f5:f3:49:7f:f0:2e:1e:c7:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Apr 19 09:00:42 2026 GMT
Not After : Apr 20 09:00:42 2026 GMT
Subject: CN=1edadf1859f6061ae8f510d95e6f02abfd677006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:38:a7:65:46:c3:42:4d:b8:83:7d:9a:96:
bb:c1:78:dd:a8:38:6e:a9:81:be:c2:93:70:88:f4:
64:6a:ac:dd:f1:16:16:1e:4f:53:cb:2a:a4:ee:ee:
f5:3b:01:20:b5:9a:26:d0:1d:a1:14:e7:13:6a:99:
2a:b0:d1:7e:ec:79:92:12:88:ac:3a:b1:2f:28:6b:
30:83:76:2a:b1:55:4b:23:8e:56:7b:86:d3:4a:13:
fb:22:6a:6a:1b:96:16:c1:eb:56:22:4c:14:5c:b7:
5e:b0:97:bd:a6:43:37:53:76:59:82:fa:8c:2f:48:
fd:3b:9a:ac:f2:ff:90:87:c8:46:0a:b7:15:eb:76:
10:cd:8b:42:6b:c8:70:9d:54:43:7f:07:19:c8:5b:
53:fb:3f:eb:77:24:66:52:12:a7:37:aa:bc:c8:3e:
4d:75:a0:75:71:1b:a5:fc:4f:83:84:f7:31:97:48:
16:d5:11:96:1b:08:c2:44:c6:d6:0c:69:ca:43:11:
ab:55:b9:15:fa:ef:98:73:be:8b:8f:ac:ce:34:91:
e9:d4:ed:64:c3:e2:38:80:26:10:61:68:8d:a5:42:
34:e9:84:8f:34:b4:fd:53:7a:c2:ca:03:7c:ac:f2:
4a:a6:b8:ee:30:03:4e:8f:02:59:ab:be:2e:45:b7:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:DF:18:59:F6:06:1A:E8:F5:10:D9:5E:6F:02:AB:FD:67:70:06
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:45:95:4b:31:8b:1c:99:d7:e9:f0:c5:84:72:b6:d4:5e:
b7:c7:19:eb:26:e6:1c:56:cd:1e:b0:23:e9:55:e6:87:28:c3:
f7:c2:88:3e:fa:e6:aa:26:5d:4f:ca:46:c6:52:79:73:6c:f1:
12:22:05:2e:65:5b:47:d7:ed:41:0e:f6:fd:9f:b5:8b:28:da:
82:22:bb:62:70:44:84:c8:06:03:f9:58:ae:69:b8:2d:ee:17:
b9:aa:03:dc:25:0e:53:72:aa:52:d3:e5:d5:4a:85:e4:49:22:
ac:30:3e:4d:33:8a:56:d9:3b:40:02:fc:f6:b9:17:2d:14:fe:
39:e7:4b:94:6e:a7:4b:97:83:b6:c2:75:e0:28:5d:dc:e0:43:
5d:53:b7:eb:d4:2d:05:1f:69:57:12:90:9b:d7:aa:98:7f:b5:
aa:0c:e9:43:f6:19:1f:e9:db:ff:c4:00:33:bb:17:11:69:f6:
c0:7e:88:85:8d:ec:71:d9:67:c8:22:3e:44:73:d1:f6:9c:2c:
aa:c2:4b:7e:c3:5d:4e:6c:6c:21:e0:c2:34:45:d9:bd:74:ac:
4f:3b:3d:7d:12:d3:3d:eb:82:cf:6c:3c:e9:8f:36:d9:8c:77:
65:98:f7:b3:a6:2c:4d:4e:8a:72:b0:a9:ed:6b:66:2b:f6:4e:
32:da:a2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+IHqpRH180l/8C4ex9/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWM5MGM2ZDYzMzNkNDc2MjczZDJmZDZjODgzYWEyYWRh
OGQxMTUwHhcNMjYwNDE5MDkwMDQyWhcNMjYwNDIwMDkwMDQyWjAzMTEwLwYDVQQD
EygxZWRhZGYxODU5ZjYwNjFhZThmNTEwZDk1ZTZmMDJhYmZkNjc3MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe04p2VGw0JNuIN9mpa7wXjdqDhu
qYG+wpNwiPRkaqzd8RYWHk9Tyyqk7u71OwEgtZom0B2hFOcTapkqsNF+7HmSEois
OrEvKGswg3YqsVVLI45We4bTShP7ImpqG5YWwetWIkwUXLdesJe9pkM3U3ZZgvqM
L0j9O5qs8v+Qh8hGCrcV63YQzYtCa8hwnVRDfwcZyFtT+z/rdyRmUhKnN6q8yD5N
daB1cRul/E+DhPcxl0gW1RGWGwjCRMbWDGnKQxGrVbkV+u+Yc76Lj6zONJHp1O1k
w+I4gCYQYWiNpUI06YSPNLT9U3rCygN8rPJKprjuMANOjwJZq74uRbexawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7a3xhZ9gYa6PUQ2V5vAqv9Z3AGMB8GA1UdIwQY
MBaAFGlckMbWMz1HYnPS/WyIOqKtqNEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjkt
Nzc1ZTdiNGZiNWM1LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjktNzc1ZTdiNGZiNWM1
LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3JFlUsx
ixyZ1+nwxYRyttRet8cZ6ybmHFbNHrAj6VXmhyjD98KIPvrmqiZdT8pGxlJ5c2zx
EiIFLmVbR9ftQQ72/Z+1iyjagiK7YnBEhMgGA/lYrmm4Le4XuaoD3CUOU3KqUtPl
1UqF5EkirDA+TTOKVtk7QAL89rkXLRT+OedLlG6nS5eDtsJ14Chd3OBDXVO369Qt
BR9pVxKQm9eqmH+1qgzpQ/YZH+nb/8QAM7sXEWn2wH6IhY3scdlnyCI+RHPR9pws
qsJLfsNdTmxsIeDCNEXZvXSsTzs9fRLTPeuCz2w86Y822Yx3ZZj3s6YsTU6KcrCp
7WtmK/ZOMtqi+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:16 2026 by rpki-client