Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: coq8JUuv3sP4hAMmogEMdr6mf4Wh5CYoKoIt4sXxrdY=
Subject key identifier: B0:21:DC:33:40:36:4B:71:C4:F0:DA:DE:C7:D0:DE:62:6C:F0:3C:6D
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 01A0C745CCFE24D5650D75B514F6D5E6DAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0FD3
Signing time: Tue 22 Sep 2026 04:00:35 +0000
Manifest this update: Tue 22 Sep 2026 04:00:35 +0000
Manifest next update: Wed 23 Sep 2026 04:00:35 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: NzgNuTn6qIJC4bJtbMPjlbjpJSsBEwGqFOe/R10KwD8=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:cc:fe:24:d5:65:0d:75:b5:14:f6:d5:e6:da:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Sep 22 04:00:35 2026 GMT
Not After : Sep 23 04:00:35 2026 GMT
Subject: CN=b021dc3340364b71c4f0dadec7d0de626cf03c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:49:9e:da:b1:d1:ac:00:fe:b5:2d:f4:37:
50:13:a7:9a:0a:eb:7c:d0:88:34:7e:fa:d3:15:75:
e6:8f:22:96:a5:c8:49:18:2f:70:23:ef:b9:7f:5b:
eb:07:41:6d:22:7f:05:72:e7:84:42:6b:6d:17:e5:
a9:f8:d7:e0:e3:4b:95:5b:f9:b1:a0:ee:b8:1e:b1:
45:93:3d:43:51:16:4e:c5:c4:a5:50:0f:6b:98:66:
f1:db:69:e1:b5:6c:4a:f6:b9:48:9c:78:8b:8a:78:
e5:af:d5:ac:48:38:41:13:52:ad:8a:44:85:b3:b6:
d9:93:52:ee:db:40:99:d5:0b:46:c9:db:48:78:6a:
2c:6b:c2:29:00:ec:61:19:ab:43:63:db:6b:c4:63:
55:eb:f8:ed:d0:02:a2:0a:91:ae:10:5c:69:d6:43:
9e:eb:5d:0e:88:60:6a:3f:1a:89:90:84:71:21:7d:
d4:e2:a7:d0:71:f9:33:4a:5c:43:9a:a2:b7:07:9b:
7e:6b:96:b1:88:9a:78:ca:12:9a:00:57:dc:eb:05:
f4:36:2d:1d:3c:89:33:20:3d:89:28:6f:6a:dd:27:
bc:54:25:cb:20:01:83:06:f8:ea:7d:35:26:3f:e6:
75:fe:8e:b5:02:4e:7d:e2:a4:db:15:7c:1b:14:e1:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:DC:33:40:36:4B:71:C4:F0:DA:DE:C7:D0:DE:62:6C:F0:3C:6D
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ca:20:62:73:ca:b9:13:f3:e3:48:89:da:04:52:af:24:56:
e1:28:a4:9d:0b:af:a9:31:10:1d:17:4b:c1:a6:d0:42:4e:8e:
32:1a:e9:85:15:76:a9:a8:c9:11:40:34:98:e4:92:7a:a6:4c:
5d:31:d7:f2:44:e5:64:97:97:97:26:e1:54:10:5d:6d:9c:aa:
78:cb:57:aa:38:57:2a:fb:7a:9b:13:1b:09:bb:e6:d2:35:f8:
70:43:06:a2:4f:d6:07:10:8f:a5:4f:45:c6:29:e6:25:a2:62:
db:46:48:dd:80:41:6d:20:bd:0a:6c:d8:43:9f:08:0e:d3:0e:
0d:8b:08:14:34:50:e6:0f:c3:46:83:7d:b2:6e:97:3a:04:c7:
df:c6:bb:36:c4:59:12:6a:1a:d4:c9:72:8c:ea:42:da:04:c7:
a5:98:46:d7:87:7b:9b:ff:f5:d4:88:21:1f:f2:fc:e4:07:48:
25:19:0b:e1:4c:40:85:9a:e1:94:1a:cd:02:76:b8:05:ac:b2:
d4:ce:4b:22:6a:8b:fd:56:da:74:90:ee:2d:fd:87:fd:63:3a:
5b:df:e6:a3:c4:07:cb:f9:a2:92:ce:a6:d4:3d:fd:d4:a1:17:
cc:cb:08:22:89:93:ce:24:d2:97:bd:f3:46:35:1e:11:14:8f:
5d:35:0c:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRcz+JNVlDXW1FPbV5tqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw
Mjc2YjUwHhcNMjYwOTIyMDQwMDM1WhcNMjYwOTIzMDQwMDM1WjAzMTEwLwYDVQQD
EyhiMDIxZGMzMzQwMzY0YjcxYzRmMGRhZGVjN2QwZGU2MjZjZjAzYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WxJntqx0awA/rUt9DdQE6eaCut8
0Ig0fvrTFXXmjyKWpchJGC9wI++5f1vrB0FtIn8FcueEQmttF+Wp+Nfg40uVW/mx
oO64HrFFkz1DURZOxcSlUA9rmGbx22nhtWxK9rlInHiLinjlr9WsSDhBE1KtikSF
s7bZk1Lu20CZ1QtGydtIeGosa8IpAOxhGatDY9trxGNV6/jt0AKiCpGuEFxp1kOe
610OiGBqPxqJkIRxIX3U4qfQcfkzSlxDmqK3B5t+a5axiJp4yhKaAFfc6wX0Ni0d
PIkzID2JKG9q3Se8VCXLIAGDBvjqfTUmP+Z1/o61Ak594qTbFXwbFOFzzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAh3DNANktxxPDa3sfQ3mJs8DxtMB8GA1UdIwQY
MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt
MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3
LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcogYnPK
uRPz40iJ2gRSryRW4SiknQuvqTEQHRdLwabQQk6OMhrphRV2qajJEUA0mOSSeqZM
XTHX8kTlZJeXlybhVBBdbZyqeMtXqjhXKvt6mxMbCbvm0jX4cEMGok/WBxCPpU9F
xinmJaJi20ZI3YBBbSC9CmzYQ58IDtMODYsIFDRQ5g/DRoN9sm6XOgTH38a7NsRZ
Emoa1MlyjOpC2gTHpZhG14d7m//11IghH/L85AdIJRkL4UxAhZrhlBrNAna4Bayy
1M5LImqL/VbadJDuLf2H/WM6W9/mo8QHy/miks6m1D391KEXzMsIIomTziTSl73z
RjUeERSPXTUMqw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:09:05 2026 by rpki-client