Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: mMwaaBAehyZwS4QqJouEnXBJnoEUDv/MRyj0mtB2opU=
Subject key identifier: 2D:A9:53:D4:3D:60:8B:00:84:C2:2C:EB:FD:DE:60:EB:94:38:B9:C8
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019D9850B59AFA94C05058519F29433AA94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0E2D
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: LpavDOr+5Hfj5Ah2CmZvXCjUrju924CiEaxGqniDeVI=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b5:9a:fa:94:c0:50:58:51:9f:29:43:3a:a9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=2da953d43d608b0084c22cebfdde60eb9438b9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:44:a3:7c:15:f7:30:7f:30:7a:9b:2a:3f:
37:45:3c:21:a8:a6:22:5c:dc:9c:63:96:7b:a7:dc:
28:ed:4c:13:26:92:13:33:9f:76:0f:8b:a9:71:e4:
a8:4d:53:98:ce:c4:51:cd:d5:68:cd:0c:12:22:91:
01:2a:98:bb:bc:c8:42:4b:6f:95:9f:e6:0f:be:27:
78:35:e5:22:b5:ad:a2:86:8f:cb:b9:7d:c3:28:32:
e3:6b:83:2d:f1:73:93:aa:53:ef:9b:f4:62:79:04:
e7:bb:e3:97:c3:ab:fe:e8:2f:2d:79:68:5a:d7:2d:
9d:68:59:ab:b4:82:38:2d:b6:af:0b:82:2d:e0:ff:
0c:74:af:fa:db:57:f7:92:a7:6a:9a:a2:9a:fb:c5:
ec:e1:ed:e9:88:03:69:8e:67:66:48:36:7f:85:1f:
1c:ec:83:99:a8:51:5e:99:e9:8f:a1:2e:bd:78:ab:
86:2b:e4:2f:7a:e3:1c:d6:93:17:6c:cc:65:41:4e:
d4:97:dd:12:a6:57:b2:ed:e0:52:fb:db:ba:1f:ad:
44:18:d5:9a:b0:c7:12:71:ec:97:d5:93:e9:79:67:
9a:3a:9d:b7:35:89:6b:f3:54:6d:2c:7f:e8:e8:63:
ce:2a:60:4f:67:47:30:26:e2:89:6f:e3:7f:8b:1b:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:53:D4:3D:60:8B:00:84:C2:2C:EB:FD:DE:60:EB:94:38:B9:C8
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dc:4a:b0:85:42:62:8a:00:28:c5:40:cc:e1:31:04:cd:36:
e2:1b:7b:e0:4f:ba:83:ff:d6:24:48:76:d7:36:58:55:e8:2e:
1c:6e:7b:3b:36:fe:f5:75:b5:8a:6d:ae:b6:f2:91:c5:6a:5a:
d9:94:53:6d:9b:75:0f:4e:3d:af:6a:e3:ae:e0:67:aa:c7:85:
6f:15:cc:84:ec:88:5c:09:de:7f:47:83:8b:51:11:f6:4d:69:
db:dd:d8:0d:f8:fa:c8:0a:76:e8:65:b7:f7:7d:6b:a5:8b:47:
d3:fb:27:d7:0e:1f:cf:9d:19:1b:e1:4a:ba:d8:b8:47:97:77:
be:3c:c1:8f:32:78:f5:8e:a9:6c:f6:49:73:c5:c4:ea:d0:f0:
d2:b5:f7:7f:e6:16:1f:94:68:51:d5:0c:89:77:5b:3d:7d:dd:
f2:02:5b:db:5d:a7:09:50:6d:50:2c:3b:ed:19:e8:23:7c:43:
ba:93:0c:dd:84:bf:ce:95:fd:93:57:65:bd:c0:b2:ad:3e:53:
24:b3:c3:38:21:bd:db:b8:52:69:e6:dc:6b:91:ab:51:30:5c:
68:86:29:ae:89:67:1e:db:51:ee:10:ea:de:b7:1b:a4:ea:ae:
10:c6:d1:1a:64:fd:80:3f:f4:03:91:6a:df:e8:1e:bf:df:d7:
a0:a0:8a:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YULWa+pTAUFhRnylDOqlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw
Mjc2YjUwHhcNMjYwNDE2MjIwMTU5WhcNMjYwNDE3MjIwMTU5WjAzMTEwLwYDVQQD
EygyZGE5NTNkNDNkNjA4YjAwODRjMjJjZWJmZGRlNjBlYjk0MzhiOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/tEo3wV9zB/MHqbKj83RTwhqKYi
XNycY5Z7p9wo7UwTJpITM592D4upceSoTVOYzsRRzdVozQwSIpEBKpi7vMhCS2+V
n+YPvid4NeUita2iho/LuX3DKDLja4Mt8XOTqlPvm/RieQTnu+OXw6v+6C8teWha
1y2daFmrtII4LbavC4It4P8MdK/621f3kqdqmqKa+8Xs4e3piANpjmdmSDZ/hR8c
7IOZqFFememPoS69eKuGK+QveuMc1pMXbMxlQU7Ul90Spley7eBS+9u6H61EGNWa
sMcSceyX1ZPpeWeaOp23NYlr81RtLH/o6GPOKmBPZ0cwJuKJb+N/ixsxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2pU9Q9YIsAhMIs6/3eYOuUOLnIMB8GA1UdIwQY
MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt
MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3
LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdxKsIVC
YooAKMVAzOExBM024ht74E+6g//WJEh21zZYVeguHG57Ozb+9XW1im2utvKRxWpa
2ZRTbZt1D049r2rjruBnqseFbxXMhOyIXAnef0eDi1ER9k1p293YDfj6yAp26GW3
931rpYtH0/sn1w4fz50ZG+FKuti4R5d3vjzBjzJ49Y6pbPZJc8XE6tDw0rX3f+YW
H5RoUdUMiXdbPX3d8gJb212nCVBtUCw77RnoI3xDupMM3YS/zpX9k1dlvcCyrT5T
JLPDOCG927hSaebca5GrUTBcaIYprolnHttR7hDq3rcbpOquEMbRGmT9gD/0A5Fq
3+gev9/XoKCKLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:24 2026 by rpki-client