Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: Ac/Gq1RGFqAXhEc59EPCSribvvM9O0zkiNrECoLM7A8=
Subject key identifier: 12:BD:09:BF:28:2D:BF:66:BE:A6:4F:15:B2:6B:09:D5:26:55:E6:5F
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 01A11116F217B393E2D40DD7F3AF8926D49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 1359
Signing time: Tue 06 Oct 2026 12:01:18 +0000
Manifest this update: Tue 06 Oct 2026 12:01:18 +0000
Manifest next update: Wed 07 Oct 2026 12:01:18 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: Nnk/COcyZ1s9i0yfgCmpxmxpevuWzXrsY0liqnh0IH0=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:f2:17:b3:93:e2:d4:0d:d7:f3:af:89:26:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Oct 6 12:01:18 2026 GMT
Not After : Oct 7 12:01:18 2026 GMT
Subject: CN=12bd09bf282dbf66bea64f15b26b09d52655e65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:b7:da:d9:e5:70:27:cf:3c:82:0f:9a:ba:
0d:8f:0a:10:ab:13:cb:c2:5a:6b:33:97:03:7e:82:
b2:0b:e3:d7:c7:10:6b:81:03:bf:46:7e:2a:2b:f1:
3e:a8:d1:13:65:e7:dd:26:2c:44:ff:d6:a2:fe:3a:
3d:50:2d:7d:4d:8f:22:78:e4:86:4e:67:54:e0:81:
92:7d:3d:81:ed:b1:48:9b:8c:84:20:58:18:f6:b6:
29:9b:89:73:ee:bb:86:d2:7e:71:64:21:78:ee:dd:
f7:80:3e:bd:b4:56:6a:84:c6:31:b5:e2:cf:02:f9:
e9:a8:23:eb:06:45:3b:da:f6:ad:91:c7:54:e7:54:
1f:35:c4:dd:fa:e9:a9:90:87:06:90:c5:60:52:f7:
b5:9b:88:e9:22:ec:77:17:29:84:35:3b:45:b5:b6:
6a:0f:65:41:74:9a:8e:82:34:86:0a:06:02:60:b6:
5e:bc:af:29:4a:88:8a:05:81:04:84:ee:62:63:eb:
f4:74:a5:c5:0f:93:c1:63:5b:4c:c1:90:28:b6:17:
7e:98:ba:4c:f8:4e:c9:25:15:96:1c:a5:6e:26:ee:
47:96:27:dd:87:f7:46:13:7e:94:5b:38:0c:d0:56:
54:ea:c5:0a:1b:19:40:9f:64:1c:50:ad:b1:84:f2:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:09:BF:28:2D:BF:66:BE:A6:4F:15:B2:6B:09:D5:26:55:E6:5F
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:10:84:e3:eb:79:05:a6:9e:28:f7:23:19:34:42:70:61:c4:
4b:5d:06:b3:18:56:52:6f:ac:1a:ce:c5:57:e2:d3:b1:fe:21:
3b:15:ff:44:ef:4b:66:a6:df:b4:b1:12:7d:85:d9:45:1f:1e:
c5:be:2c:39:d0:e1:00:a4:43:da:05:81:4e:f7:72:36:3f:39:
b3:84:8d:4b:21:51:2b:f6:13:ff:e3:af:1d:7a:36:1c:72:12:
6a:40:48:ec:c9:df:16:32:19:0a:eb:4c:7a:3f:ed:e9:8c:ab:
61:c6:c0:8d:d4:1d:81:64:82:ae:26:9e:ea:45:40:7d:e2:99:
36:32:d8:2b:9b:74:aa:45:16:71:03:01:7f:65:67:c5:f2:0e:
9e:66:d8:9b:5e:8d:56:bd:7f:f3:f5:aa:bf:de:16:66:42:02:
6e:2b:87:07:fc:a4:c9:ef:2a:d0:ad:0e:b5:9a:5b:e8:bb:9c:
b5:83:c1:cd:cb:11:1b:f3:16:09:96:0a:a1:89:30:f4:c6:6b:
32:e6:f2:c8:87:a8:bc:ae:ad:95:70:c2:79:d9:85:ea:23:12:
56:b5:2c:ca:1b:66:e7:e6:4e:4b:95:e6:fc:95:d7:cc:14:ae:
e3:b6:10:c8:df:21:ef:30:e2:c7:7e:02:2f:62:d5:0e:b8:64:
1b:67:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:25 2026 by rpki-client