Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: QK+8zKgEM6/qeUg/9w63bcj4l5LKoZ8Z4cdCrYIeMO8=
Subject key identifier: F1:4C:AC:50:73:BE:A7:B4:53:1A:4B:5B:5B:A0:20:05:74:E7:51:C7
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019F17C2D1EE1603949B7BE2CBC34A34D296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 09:01:11 +0000
Manifest this update: Tue 30 Jun 2026 09:01:11 +0000
Manifest next update: Wed 01 Jul 2026 09:01:11 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: lBtj7aYgF0uQADazhQy+z07ZeTrR1uSNl2aoSjPnbqs=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d1:ee:16:03:94:9b:7b:e2:cb:c3:4a:34:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jun 30 09:01:11 2026 GMT
Not After : Jul 1 09:01:11 2026 GMT
Subject: CN=f14cac5073bea7b4531a4b5b5ba0200574e751c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:f6:e5:46:14:cf:66:13:39:7c:db:5d:b6:
24:b5:1a:4d:4b:88:e8:61:81:1b:63:17:eb:74:c2:
44:f6:4c:56:b3:d6:da:54:9f:56:39:eb:e1:9c:75:
26:8d:27:47:d7:6f:e2:fc:7d:a6:a1:a9:89:b0:ed:
1a:e8:53:85:69:b4:03:d6:52:3c:e9:4a:fe:dc:93:
74:76:ca:ae:a7:35:85:46:55:6a:a9:53:ec:ee:15:
4f:38:13:a7:56:73:0a:6e:7a:7c:7d:91:92:b9:75:
05:f4:93:8a:9e:df:18:cb:bc:ca:bb:2a:60:0a:92:
3c:e9:73:3e:34:bb:1a:30:2b:55:11:cc:3c:d3:36:
ad:0e:03:59:ae:31:ef:aa:44:41:86:b3:4c:65:f9:
2f:60:3b:b4:67:17:56:75:5d:fc:7e:82:5d:3c:1c:
23:6b:50:0a:46:0f:1f:31:e8:60:5b:c4:8f:1b:be:
fb:38:c7:eb:ec:81:43:0e:16:25:5c:db:5f:e9:45:
a6:61:83:6c:63:d6:d0:db:ac:93:52:4e:b7:42:07:
8d:18:3d:7f:8d:9a:73:0e:d6:22:bd:32:7f:3f:a8:
1f:d0:1e:b1:bc:f1:42:4b:25:d7:3e:77:fa:b2:0a:
24:91:45:d8:66:f2:28:9a:cf:07:66:67:5d:2d:68:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:AC:50:73:BE:A7:B4:53:1A:4B:5B:5B:A0:20:05:74:E7:51:C7
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:89:e2:88:0e:ef:14:91:5e:2d:24:07:2c:12:3d:91:9d:cf:
5f:30:0e:8b:34:65:b0:05:11:f3:17:29:97:7d:a4:90:b5:34:
9e:2f:c4:2d:45:7d:b1:e4:62:11:02:a5:b2:8c:42:8a:01:fb:
9f:4a:f3:11:88:37:c2:dd:3c:cd:b3:29:07:d0:78:e8:31:98:
38:3e:23:e5:fa:44:31:ba:27:2e:d0:5e:ab:27:b5:f7:96:00:
67:b5:52:b1:63:c6:e4:1c:06:25:81:86:64:21:2f:7f:d0:ef:
b1:7b:c0:eb:d3:de:77:3d:df:de:0e:89:67:6f:98:7a:65:3f:
53:89:63:11:31:b7:d0:93:72:40:ce:95:92:9c:12:b3:9b:e8:
bc:43:47:a8:1b:b5:60:d7:3d:3d:5e:d6:ea:dc:62:db:c7:a9:
70:a9:4a:e0:59:da:1a:f7:5d:3e:6e:30:96:d9:ad:e1:9a:e6:
ca:6b:38:2e:21:21:39:63:0a:b9:bf:13:9e:16:1b:20:7e:50:
30:3e:31:05:0e:9f:b9:4c:35:1b:83:4b:04:fd:5c:f4:fb:ff:
12:c0:3b:6c:af:04:1e:42:4b:87:db:f8:2b:9c:42:bf:37:5d:
01:32:f4:76:9a:f7:49:7b:de:d5:8c:84:a6:94:0a:36:2d:15:
18:04:b4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwtHuFgOUm3viy8NKNNKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjYwNjMwMDkwMTExWhcNMjYwNzAxMDkwMTExWjAzMTEwLwYDVQQD
EyhmMTRjYWM1MDczYmVhN2I0NTMxYTRiNWI1YmEwMjAwNTc0ZTc1MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzX25UYUz2YTOXzbXbYktRpNS4jo
YYEbYxfrdMJE9kxWs9baVJ9WOevhnHUmjSdH12/i/H2moamJsO0a6FOFabQD1lI8
6Ur+3JN0dsqupzWFRlVqqVPs7hVPOBOnVnMKbnp8fZGSuXUF9JOKnt8Yy7zKuypg
CpI86XM+NLsaMCtVEcw80zatDgNZrjHvqkRBhrNMZfkvYDu0ZxdWdV38foJdPBwj
a1AKRg8fMehgW8SPG777OMfr7IFDDhYlXNtf6UWmYYNsY9bQ26yTUk63QgeNGD1/
jZpzDtYivTJ/P6gf0B6xvPFCSyXXPnf6sgokkUXYZvIoms8HZmddLWgZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFMrFBzvqe0UxpLW1ugIAV051HHMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4niiA7v
FJFeLSQHLBI9kZ3PXzAOizRlsAUR8xcpl32kkLU0ni/ELUV9seRiEQKlsoxCigH7
n0rzEYg3wt08zbMpB9B46DGYOD4j5fpEMbonLtBeqye195YAZ7VSsWPG5BwGJYGG
ZCEvf9DvsXvA69Pedz3f3g6JZ2+YemU/U4ljETG30JNyQM6VkpwSs5vovENHqBu1
YNc9PV7W6txi28epcKlK4FnaGvddPm4wltmt4Zrmyms4LiEhOWMKub8TnhYbIH5Q
MD4xBQ6fuUw1G4NLBP1c9Pv/EsA7bK8EHkJLh9v4K5xCvzddATL0dpr3SXve1YyE
ppQKNi0VGAS0TQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:38 2026 by rpki-client