Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File: aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier: INzFPn+8Mc6Q13FhjKB0JIHSyMviHBf057UU2Yvr9dw=
Subject key identifier: 35:77:C9:04:FB:C1:4D:DF:F9:0F:B3:65:E6:85:4C:00:49:F9:2B:CA
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 019D9886399C002A3ABF055F90B7A211E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number: 08FA
Signing time: Thu 16 Apr 2026 23:00:26 +0000
Manifest this update: Thu 16 Apr 2026 23:00:26 +0000
Manifest next update: Fri 17 Apr 2026 23:00:26 +0000
Files and hashes: 1: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: Mttsr0NmoyogsDEqWPa8Vb5fmgZdtvaX1zAT6vt+R/I=)
2: mkJVv52KXzS0LGki_sJR1Wvh3lE.roa (hash: wCY7SDIJn73GbW1ubNf3mR9Y3+r8QLN2wbBS3yUgUpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:39:9c:00:2a:3a:bf:05:5f:90:b7:a2:11:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Apr 16 23:00:26 2026 GMT
Not After : Apr 17 23:00:26 2026 GMT
Subject: CN=3577c904fbc14ddff90fb365e6854c0049f92bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:c0:49:1c:47:98:d2:f0:84:52:51:58:8c:
f1:ef:44:39:07:82:7e:6f:12:bd:c5:18:79:1a:8c:
24:71:73:75:c6:21:27:ce:a0:dd:39:96:3a:b1:cc:
02:82:a2:d1:2f:ea:89:8f:c0:ab:e7:01:61:4c:fc:
fe:b9:d6:35:f6:ac:20:07:7f:a7:cf:90:d6:c1:fe:
7b:04:85:f4:6c:c0:9b:83:f4:db:95:4a:74:f4:4b:
85:c9:5b:ae:12:43:19:a3:53:dc:86:66:a3:7f:8e:
ad:c8:eb:1d:3f:80:19:ca:dd:6a:96:df:aa:99:e9:
1b:f9:0b:6f:e5:36:56:1f:60:48:ab:05:78:34:b7:
d5:a5:c9:0a:ab:b1:7c:94:7f:fb:58:5a:2b:86:2b:
24:f1:39:b5:20:88:4f:cc:98:38:b5:3e:31:2b:01:
d0:27:8c:8d:f7:a4:69:86:14:3b:7a:25:dd:e0:d4:
75:ce:68:c1:f2:9a:79:b0:e8:8c:5b:4b:5c:a3:13:
52:2b:a0:3f:13:7b:49:30:61:c0:94:2c:88:bb:5e:
51:e8:f7:c7:37:ad:70:58:56:cd:a6:21:00:ca:c2:
d9:e8:50:8e:68:d6:e3:8b:87:22:88:f3:03:dc:b1:
5c:7b:cd:36:e5:86:46:c6:11:a0:0b:f8:39:ab:87:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:C9:04:FB:C1:4D:DF:F9:0F:B3:65:E6:85:4C:00:49:F9:2B:CA
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:13:24:c9:4c:05:fd:eb:a6:44:0f:31:99:1b:8b:f1:8a:
f5:55:d6:85:32:a6:12:66:cb:da:2a:63:e2:ff:85:f1:45:63:
ff:bb:40:7f:57:2a:6b:98:c5:56:f8:41:e7:fd:2d:13:e1:35:
b6:43:41:18:46:ea:14:3d:ac:df:b4:63:f7:71:9a:cf:1d:3e:
1c:ec:f3:ec:ac:75:3e:21:b1:6b:05:c2:3f:4f:5b:96:61:56:
8d:ef:15:f3:36:13:ff:4e:fa:d6:c3:56:94:d3:9c:91:f2:cc:
a3:0a:4a:43:39:fb:0f:8e:06:54:b8:02:cb:56:a5:6b:29:96:
00:52:a2:e9:e0:bf:14:69:47:b7:1f:84:28:10:01:38:30:26:
0d:bf:cc:43:12:a7:bd:f8:14:66:51:a1:73:49:83:da:91:c0:
be:06:0e:44:a0:5d:2d:b9:e2:32:fd:1f:ec:37:a7:4c:20:1b:
f6:01:e9:00:7d:6e:bd:b1:b3:0a:dc:48:97:c1:7d:fa:c8:82:
8e:56:a3:77:23:de:58:0b:27:ad:2a:af:01:97:ee:bb:45:8b:
a4:e8:91:c2:da:08:6e:d7:0e:dd:f4:49:03:d7:fb:31:3f:0e:
7b:60:c1:22:bc:27:fa:86:2a:1d:11:d9:b2:00:01:4a:c2:ae:
15:91:68:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhjmcACo6vwVfkLeiEeSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODI5YjQ0OGFkOGY5NjNhMGVjZmY4YjIyMTZjYTljZTlj
ZTZmNDEwHhcNMjYwNDE2MjMwMDI2WhcNMjYwNDE3MjMwMDI2WjAzMTEwLwYDVQQD
EygzNTc3YzkwNGZiYzE0ZGRmZjkwZmIzNjVlNjg1NGMwMDQ5ZjkyYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVPASRxHmNLwhFJRWIzx70Q5B4J+
bxK9xRh5GowkcXN1xiEnzqDdOZY6scwCgqLRL+qJj8Cr5wFhTPz+udY19qwgB3+n
z5DWwf57BIX0bMCbg/TblUp09EuFyVuuEkMZo1Pchmajf46tyOsdP4AZyt1qlt+q
mekb+Qtv5TZWH2BIqwV4NLfVpckKq7F8lH/7WForhisk8Tm1IIhPzJg4tT4xKwHQ
J4yN96RphhQ7eiXd4NR1zmjB8pp5sOiMW0tcoxNSK6A/E3tJMGHAlCyIu15R6PfH
N61wWFbNpiEAysLZ6FCOaNbji4ciiPMD3LFce8025YZGxhGgC/g5q4dM/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV3yQT7wU3f+Q+zZeaFTABJ+SvKMB8GA1UdIwQY
MBaAFGmCm0SK2PljoOz/iyIWypzpzm9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlLYlJJclktV09nN1AtTEloYktuT25PYjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTBlMmYtZGVjYy00ODg3LThlMDMt
ZTc2YjU0NDY2NjU0LzEvYVlLYlJJclktV09nN1AtTEloYktuT25PYjBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTBlMmYtZGVjYy00ODg3LThlMDMtZTc2YjU0NDY2NjU0
LzEvYVlLYlJJclktV09nN1AtTEloYktuT25PYjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWkTJMlM
Bf3rpkQPMZkbi/GK9VXWhTKmEmbL2ipj4v+F8UVj/7tAf1cqa5jFVvhB5/0tE+E1
tkNBGEbqFD2s37Rj93Gazx0+HOzz7Kx1PiGxawXCP09blmFWje8V8zYT/0761sNW
lNOckfLMowpKQzn7D44GVLgCy1alaymWAFKi6eC/FGlHtx+EKBABODAmDb/MQxKn
vfgUZlGhc0mD2pHAvgYORKBdLbniMv0f7DenTCAb9gHpAH1uvbGzCtxIl8F9+siC
jlajdyPeWAsnrSqvAZfuu0WLpOiRwtoIbtcO3fRJA9f7MT8Oe2DBIrwn+oYqHRHZ
sgABSsKuFZFoww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:34 2026 by rpki-client