Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: jMSu7SQeHpGiTi/BxjHYqbE/BfRf++korTwkRCsQDYU=
Subject key identifier: 3C:52:BF:D1:D0:9B:10:4B:99:F5:C4:FB:54:03:CF:09:10:05:4D:00
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 019CAC7E2AB08AE7199971D7599BF2B845DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 1281
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (hash: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ=)
2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: dvkd8yEV5fm7GtlML3JeYeYoR+rpmY83Y86lUtvbPsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2a:b0:8a:e7:19:99:71:d7:59:9b:f2:b8:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=3c52bfd1d09b104b99f5c4fb5403cf0910054d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:29:ad:c5:10:fd:7a:6d:24:64:19:23:c6:
a6:d2:65:23:40:e4:02:ce:97:0e:14:da:43:50:ad:
8d:57:14:a6:eb:93:d3:eb:d7:f5:d9:11:c5:2f:9c:
7e:fd:bb:a1:d4:f6:1d:dc:19:1e:38:8e:7b:c7:28:
0f:f6:73:52:d9:67:ac:79:26:0a:54:62:82:2d:89:
fe:fc:d7:e7:fa:f2:77:5a:62:b0:d8:6d:df:f4:b3:
46:27:9d:83:71:24:92:91:e0:43:23:39:fb:ba:f0:
ba:61:36:6b:b3:21:b5:c1:3a:20:57:c3:fe:50:cf:
5e:6d:65:39:52:c3:80:b4:8e:e7:29:a3:55:f9:d5:
98:21:15:74:28:06:19:a8:29:28:39:c5:2f:7a:14:
8c:50:a5:1f:14:1f:66:2d:f5:c6:0b:d3:19:28:9f:
75:fc:1a:ec:0a:ed:c5:57:cd:82:14:70:51:36:7d:
69:48:eb:47:a5:7a:a5:5b:0b:e8:d5:03:64:71:d5:
bb:de:f6:5e:92:f5:70:ea:8a:ae:f1:2c:32:c7:18:
72:78:e4:a6:48:28:66:a4:3e:13:16:b6:a1:06:15:
fe:87:8d:47:aa:60:31:73:4c:68:7a:2f:b2:09:e5:
c6:5c:f6:52:4a:0a:64:27:62:f5:74:c6:86:7b:b3:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:BF:D1:D0:9B:10:4B:99:F5:C4:FB:54:03:CF:09:10:05:4D:00
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a1:d4:a9:fd:bc:88:1e:75:4c:e7:69:6b:4d:a9:f1:6b:13:
c0:25:e5:13:a0:a9:c9:81:9a:4a:c1:a4:36:f6:8a:f5:1c:dd:
7c:ef:96:2a:30:16:c9:dd:fe:73:9e:fb:23:d1:1b:0c:d9:dd:
34:0c:55:f6:14:4f:fe:7c:63:87:c2:3e:bf:fb:32:6d:fe:a0:
84:49:4e:9f:b3:ca:9d:0b:48:50:a2:dd:c6:b4:0a:a0:97:76:
e2:13:a8:2f:bb:38:24:83:79:e1:db:1c:86:0a:a0:4d:b6:f6:
8c:fe:54:41:76:38:0e:8f:4b:29:f3:c3:09:fc:e4:ae:5c:32:
71:fc:6e:b5:be:00:9e:c3:4b:1a:e4:3f:9f:9a:a0:5b:f8:11:
40:80:4a:44:2f:24:3f:8d:67:e7:e1:ef:af:1e:84:37:81:76:
68:be:1a:56:9b:f8:0b:e6:d0:b5:b1:d4:69:97:58:8b:fa:7f:
ff:6c:59:b5:53:ec:11:36:32:fc:05:38:c5:86:6c:f3:b0:42:
e5:e2:a6:ef:71:10:dc:1f:a6:90:bb:74:11:34:e6:65:60:f7:
f7:94:e8:c4:10:19:da:87:6f:65:24:02:e7:f8:df:0e:8f:72:
0d:50:6b:db:e7:81:66:80:f4:c7:d4:3a:e9:4f:8c:ac:58:88:
7c:e7:b2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfiqwiucZmXHXWZvyuEXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjYwMzAyMDMwMTE1WhcNMjYwMzAzMDMwMTE1WjAzMTEwLwYDVQQD
EygzYzUyYmZkMWQwOWIxMDRiOTlmNWM0ZmI1NDAzY2YwOTEwMDU0ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIprcUQ/XptJGQZI8am0mUjQOQC
zpcOFNpDUK2NVxSm65PT69f12RHFL5x+/buh1PYd3BkeOI57xygP9nNS2WeseSYK
VGKCLYn+/Nfn+vJ3WmKw2G3f9LNGJ52DcSSSkeBDIzn7uvC6YTZrsyG1wTogV8P+
UM9ebWU5UsOAtI7nKaNV+dWYIRV0KAYZqCkoOcUvehSMUKUfFB9mLfXGC9MZKJ91
/BrsCu3FV82CFHBRNn1pSOtHpXqlWwvo1QNkcdW73vZekvVw6oqu8SwyxxhyeOSm
SChmpD4TFrahBhX+h41HqmAxc0xoei+yCeXGXPZSSgpkJ2L1dMaGe7NYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxSv9HQmxBLmfXE+1QDzwkQBU0AMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6HUqf28
iB51TOdpa02p8WsTwCXlE6CpyYGaSsGkNvaK9RzdfO+WKjAWyd3+c577I9EbDNnd
NAxV9hRP/nxjh8I+v/sybf6ghElOn7PKnQtIUKLdxrQKoJd24hOoL7s4JIN54dsc
hgqgTbb2jP5UQXY4Do9LKfPDCfzkrlwycfxutb4AnsNLGuQ/n5qgW/gRQIBKRC8k
P41n5+Hvrx6EN4F2aL4aVpv4C+bQtbHUaZdYi/p//2xZtVPsETYy/AU4xYZs87BC
5eKm73EQ3B+mkLt0ETTmZWD395ToxBAZ2odvZSQC5/jfDo9yDVBr2+eBZoD0x9Q6
6U+MrFiIfOeyfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:28 2026 by rpki-client