Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: sX8MgLpinzkKwHuAv6D/v/FZ847nk7EJD9Tfi+lKd/w=
Subject key identifier: F9:92:0F:F5:C0:10:77:60:F5:43:2B:6B:93:44:06:5C:4F:5B:C2:5E
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 01A14428082AEE93B693CDCAF2BAC8D67CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 1AA8
Signing time: Fri 16 Oct 2026 10:00:36 +0000
Manifest this update: Fri 16 Oct 2026 10:00:36 +0000
Manifest next update: Sat 17 Oct 2026 10:00:36 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: dpCamNWEWgRdBCjROFDbafqGNgtA3PHnZYx6VaDVOgY=)
2: eJ3f1i44Rqh5dEICPulbHl4WkkI.roa (hash: kZed20xL2+OJp4rVcGTuqnAX+7hPge7JicJ6LEk/ItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:28:08:2a:ee:93:b6:93:cd:ca:f2:ba:c8:d6:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Oct 16 10:00:36 2026 GMT
Not After : Oct 17 10:00:36 2026 GMT
Subject: CN=f9920ff5c0107760f5432b6b9344065c4f5bc25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:13:b0:93:30:8c:9c:3c:d9:21:8b:ac:0d:
d8:e7:80:42:90:03:3a:7f:aa:88:d4:22:c8:95:b2:
ad:c2:6a:b6:43:8b:3e:41:32:1e:d2:c2:64:bf:21:
a9:3d:e0:2c:ea:e1:85:b4:9a:f7:9a:12:d6:6a:0a:
7e:5a:49:9a:e8:ac:10:61:c3:c8:b0:ed:dc:a3:55:
d9:e7:9f:93:d8:42:6c:12:70:7d:57:f0:f1:9e:d1:
1b:53:b3:9f:7d:6c:68:52:71:c4:1e:39:fb:ff:dd:
bd:d7:d0:7c:e0:07:29:4d:d9:0d:ef:9a:b9:b6:29:
7f:64:1f:ca:99:3d:be:cd:4b:c0:3f:ba:62:32:b5:
25:73:a8:22:82:4e:21:a8:7a:2e:51:36:8f:4b:f2:
bd:9d:41:cb:02:ca:5c:82:3e:75:84:35:63:fb:9c:
a6:97:3f:ed:dd:23:c3:79:0f:21:6d:24:d3:d7:11:
9a:08:05:37:96:8d:2c:73:19:8b:df:cc:6b:a7:8b:
41:ef:f8:cd:73:c5:0f:ee:65:4d:97:e5:12:19:04:
78:cc:cf:d9:4b:84:95:c5:a9:0d:36:5e:9a:32:f6:
d9:b8:c1:41:71:fb:ed:71:14:75:be:91:48:8f:a7:
92:de:67:a7:73:16:8b:3c:f0:ad:f3:5f:1c:70:8b:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:0F:F5:C0:10:77:60:F5:43:2B:6B:93:44:06:5C:4F:5B:C2:5E
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:38:1d:46:7c:8b:9d:e2:72:26:97:53:fe:72:fe:0a:45:e2:
fe:c8:d1:42:14:c2:be:66:de:48:11:4c:fa:9d:18:b0:d0:97:
13:e9:5b:53:74:70:ad:b1:be:77:ed:16:b8:6e:d0:47:d2:45:
82:96:8e:52:d8:6a:89:7a:b8:8b:c5:09:90:a9:b0:91:a4:03:
99:d6:af:b6:be:85:4b:a1:c5:e0:26:6f:a8:8a:ac:fc:b5:84:
6b:06:39:71:4a:f5:09:6e:6f:61:2d:4a:42:26:aa:86:1a:f2:
0b:ff:44:75:d0:cb:9b:97:7d:0b:7c:f8:cb:2a:bb:7c:0b:e0:
d4:d6:d8:0a:ee:fd:46:6a:b7:ea:27:20:20:32:67:97:ed:d0:
15:cc:84:45:37:c1:ea:06:8a:9f:dd:8a:ab:f0:8a:2c:ad:04:
18:a4:6c:00:93:f5:a8:06:7a:ea:f0:af:ce:e8:b2:8a:5c:3f:
60:22:69:84:13:5d:b5:64:54:c2:d2:c3:2e:13:38:5f:f8:eb:
76:f6:f3:1c:07:94:8f:4d:e3:0f:f1:a9:cc:a9:c6:01:39:19:
f9:92:cf:c1:0c:6f:67:4e:1b:0b:3c:38:e4:06:e8:56:1c:42:
99:66:5f:5e:fc:67:3d:2c:d5:de:39:c2:15:d8:7d:08:1e:39:
67:0e:f5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFEKAgq7pO2k83K8rrI1nzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjYwNjgzYjM3NzI1NzQyN2RiYmY2ZWNlMzVlMmM1ODVh
M2IwMWQwHhcNMjYxMDE2MTAwMDM2WhcNMjYxMDE3MTAwMDM2WjAzMTEwLwYDVQQD
EyhmOTkyMGZmNWMwMTA3NzYwZjU0MzJiNmI5MzQ0MDY1YzRmNWJjMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb8TsJMwjJw82SGLrA3Y54BCkAM6
f6qI1CLIlbKtwmq2Q4s+QTIe0sJkvyGpPeAs6uGFtJr3mhLWagp+Wkma6KwQYcPI
sO3co1XZ55+T2EJsEnB9V/DxntEbU7OffWxoUnHEHjn7/92919B84AcpTdkN75q5
til/ZB/KmT2+zUvAP7piMrUlc6gigk4hqHouUTaPS/K9nUHLAspcgj51hDVj+5ym
lz/t3SPDeQ8hbSTT1xGaCAU3lo0scxmL38xrp4tB7/jNc8UP7mVNl+USGQR4zM/Z
S4SVxakNNl6aMvbZuMFBcfvtcRR1vpFIj6eS3mencxaLPPCt818ccIv3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmSD/XAEHdg9UMra5NEBlxPW8JeMB8GA1UdIwQY
MBaAFGj2BoOzdyV0J9u/bs414sWFo7AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBZR2c3TjNKWFFuMjc5dXpqWGl4WVdqc0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZWI5NjktODYzYS00NjJkLTlmOWQt
MzU0NzQwMzZhOWQ3LzEvYVBZR2c3TjNKWFFuMjc5dXpqWGl4WVdqc0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yZWI5NjktODYzYS00NjJkLTlmOWQtMzU0NzQwMzZhOWQ3
LzEvYVBZR2c3TjNKWFFuMjc5dXpqWGl4WVdqc0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjgdRnyL
neJyJpdT/nL+CkXi/sjRQhTCvmbeSBFM+p0YsNCXE+lbU3RwrbG+d+0WuG7QR9JF
gpaOUthqiXq4i8UJkKmwkaQDmdavtr6FS6HF4CZvqIqs/LWEawY5cUr1CW5vYS1K
QiaqhhryC/9EddDLm5d9C3z4yyq7fAvg1NbYCu79Rmq36icgIDJnl+3QFcyERTfB
6gaKn92Kq/CKLK0EGKRsAJP1qAZ66vCvzuiyilw/YCJphBNdtWRUwtLDLhM4X/jr
dvbzHAeUj03jD/GpzKnGATkZ+ZLPwQxvZ04bCzw45AboVhxCmWZfXvxnPSzV3jnC
Fdh9CB45Zw71vw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 18:21:55 2026 by rpki-client