Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: cUSDmqE7EVke+KNs/Le8QSgOxwVTN95Dshhsf7lzGnA=
Subject key identifier: 7B:EF:F7:C8:2D:D4:94:06:C4:FC:2D:44:02:F8:2D:FA:CC:0C:48:4A
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 019CAA581F43A2AEE83231CCB442D7CDF8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0E11
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: Ecx93lPTcXfNh0reNEp5TD8TAwAzxHCNrxwoSOzF9RU=)
2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1f:43:a2:ae:e8:32:31:cc:b4:42:d7:cd:f8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=7beff7c82dd49406c4fc2d4402f82dfacc0c484a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:fd:3a:5e:c7:35:ea:f4:28:59:6b:57:47:
08:34:3a:88:2e:2a:d4:28:a5:3a:c7:6a:dc:c5:8f:
f9:42:b1:5f:6b:a1:47:4b:dc:ba:cc:23:a8:29:8a:
30:88:6b:35:bd:65:a9:45:66:9e:c9:91:30:93:d4:
9e:c1:87:43:0f:a4:14:2f:51:e6:47:09:4c:e4:ea:
84:4a:25:71:c0:9e:b3:68:bf:86:39:79:b6:0a:01:
05:f9:ed:23:ed:72:6b:2d:b1:d4:e6:5a:aa:1a:73:
81:f9:7a:d3:49:48:02:4f:0c:52:6f:90:cd:5c:dd:
65:fd:08:b1:f4:9f:44:f9:b6:f8:43:78:01:13:0d:
1e:d3:64:66:8d:41:23:ec:4d:6c:cf:d5:16:c8:50:
13:09:e7:f7:25:5e:6c:35:93:2a:41:7e:f9:87:c2:
12:39:43:10:9b:6c:4d:52:e2:72:a3:0e:d3:e4:b6:
7d:39:15:00:69:d2:3a:11:d8:94:7f:85:76:bb:13:
20:5d:cc:df:90:f7:66:ff:49:a6:30:cf:83:17:fe:
34:90:70:02:07:2c:c5:ba:6a:dd:9e:7d:76:c1:ee:
3e:22:73:3a:b2:7b:64:81:e2:85:8a:56:93:59:03:
58:0c:32:89:d7:60:1a:c6:a0:69:bc:80:a2:d8:d3:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:F7:C8:2D:D4:94:06:C4:FC:2D:44:02:F8:2D:FA:CC:0C:48:4A
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:9a:9b:ed:78:bf:65:1d:16:11:c3:0a:72:28:83:91:53:
d0:77:02:46:03:a3:5e:52:3a:af:70:aa:32:fc:fe:ee:e6:e1:
7e:be:04:00:ca:21:b9:a1:c5:bf:cd:03:35:61:e4:c0:f7:7f:
91:49:a5:51:ee:03:b3:22:eb:9b:4a:df:b2:d2:68:5a:d8:64:
87:d8:d8:f8:d2:b2:05:8e:09:a3:d0:8b:ca:5a:78:9a:db:d3:
16:8b:20:fb:95:40:f8:64:ed:0b:9c:62:1d:22:5e:96:93:b6:
04:8b:71:73:72:ab:14:3e:10:14:29:be:fa:5a:9b:07:45:df:
a0:ab:6c:e0:33:e5:05:d2:36:c6:3e:87:09:0e:56:37:6d:09:
7f:91:76:70:bd:35:16:f6:e5:37:a4:aa:b6:44:e8:10:03:7a:
1a:f7:e1:ad:09:8d:1f:41:33:a9:33:78:7b:b0:fd:8f:84:77:
7b:27:1f:01:23:c4:5e:b7:ca:f1:2c:6a:ed:22:cc:93:57:94:
c3:04:3e:6d:87:f8:d5:a3:c8:13:4a:51:f0:67:65:8f:05:df:
f2:1f:3d:31:f6:12:a7:d2:04:ac:65:7d:3f:30:99:1c:dc:e1:
5a:ba:b7:82:3f:b7:89:6b:60:18:31:ca:07:1d:cf:12:76:6c:
f7:eb:60:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWB9Doq7oMjHMtELXzfj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0
MTIzNDMwHhcNMjYwMzAxMTcwMDI3WhcNMjYwMzAyMTcwMDI3WjAzMTEwLwYDVQQD
Eyg3YmVmZjdjODJkZDQ5NDA2YzRmYzJkNDQwMmY4MmRmYWNjMGM0ODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdj9Ol7HNer0KFlrV0cINDqILirU
KKU6x2rcxY/5QrFfa6FHS9y6zCOoKYowiGs1vWWpRWaeyZEwk9SewYdDD6QUL1Hm
RwlM5OqESiVxwJ6zaL+GOXm2CgEF+e0j7XJrLbHU5lqqGnOB+XrTSUgCTwxSb5DN
XN1l/Qix9J9E+bb4Q3gBEw0e02RmjUEj7E1sz9UWyFATCef3JV5sNZMqQX75h8IS
OUMQm2xNUuJyow7T5LZ9ORUAadI6EdiUf4V2uxMgXczfkPdm/0mmMM+DF/40kHAC
ByzFumrdnn12we4+InM6sntkgeKFilaTWQNYDDKJ12AaxqBpvICi2NPWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvv98gt1JQGxPwtRAL4LfrMDEhKMB8GA1UdIwQY
MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt
Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm
LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAciam+14
v2UdFhHDCnIog5FT0HcCRgOjXlI6r3CqMvz+7ubhfr4EAMohuaHFv80DNWHkwPd/
kUmlUe4DsyLrm0rfstJoWthkh9jY+NKyBY4Jo9CLylp4mtvTFosg+5VA+GTtC5xi
HSJelpO2BItxc3KrFD4QFCm++lqbB0XfoKts4DPlBdI2xj6HCQ5WN20Jf5F2cL01
FvblN6SqtkToEAN6GvfhrQmNH0EzqTN4e7D9j4R3eycfASPEXrfK8Sxq7SLMk1eU
wwQ+bYf41aPIE0pR8GdljwXf8h89MfYSp9IErGV9PzCZHNzhWrq3gj+3iWtgGDHK
Bx3PEnZs9+tg7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:59 2026 by rpki-client