Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: nvKbwPrXwyBg+lcYjqGqhhxViV/4H6Gkr+U/4V6TiIE=
Subject key identifier: 74:F0:38:45:B5:E8:AB:7B:9F:63:E2:26:BB:06:0B:86:5B:D8:81:DB
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 01A1171903B12987415DD3F31D0ABA5AAD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0C69
Signing time: Wed 07 Oct 2026 16:01:17 +0000
Manifest this update: Wed 07 Oct 2026 16:01:17 +0000
Manifest next update: Thu 08 Oct 2026 16:01:17 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: kNma3fUAeGMZlKq8WDspIOtBKFTPmw2iUcHkexpaAw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:19:03:b1:29:87:41:5d:d3:f3:1d:0a:ba:5a:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Oct 7 16:01:17 2026 GMT
Not After : Oct 8 16:01:17 2026 GMT
Subject: CN=74f03845b5e8ab7b9f63e226bb060b865bd881db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:d8:bc:3e:ea:d0:fd:34:4f:f8:d1:e3:14:
9d:de:41:2a:6d:1c:74:dd:bc:27:fe:d3:30:9b:7f:
8d:06:7b:4d:4f:c3:64:6b:f5:b8:ff:23:f5:7e:ef:
40:fe:51:a7:24:7f:d5:3d:cb:67:a8:93:49:76:01:
9d:48:31:13:fc:d4:9d:25:5b:23:80:4e:c0:90:7b:
93:70:44:7c:e4:4b:ff:80:d4:46:24:f0:e6:a5:6b:
01:d4:46:24:c5:a9:43:cb:a5:35:19:b2:c0:dc:97:
63:d2:48:27:72:81:e9:1c:05:83:71:95:b9:63:da:
2d:42:2e:ea:ef:5e:05:cd:6e:2c:ff:72:9d:4a:77:
ad:49:56:4f:11:4d:c7:6c:c9:aa:94:f3:bf:d5:05:
47:5a:96:18:44:f2:12:ff:68:68:e2:b1:e4:92:1e:
6b:d8:29:7d:84:6e:c2:c0:30:8d:42:c4:69:48:75:
b1:03:fb:dd:75:e0:da:93:87:5a:a5:4c:d0:05:3b:
8c:10:95:e1:91:91:91:d4:13:c6:ea:b9:9a:69:75:
9c:c7:79:54:62:be:35:b0:6f:0e:d0:80:94:55:e1:
d5:85:ca:73:24:7f:27:86:3a:93:6c:6f:22:90:ac:
d8:55:30:fe:77:06:c8:ab:da:8c:e5:3f:52:71:72:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:38:45:B5:E8:AB:7B:9F:63:E2:26:BB:06:0B:86:5B:D8:81:DB
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:ae:bd:f8:44:ae:36:f8:3a:de:9e:c0:6c:c7:3c:18:65:
e9:0d:84:b3:8a:c2:ae:5b:c9:2e:9e:56:c8:45:7a:76:e2:c0:
09:5d:c0:23:b1:dd:65:0d:65:88:7d:63:07:0f:81:09:91:ad:
81:dc:cc:7c:86:74:20:4e:28:8d:d5:ea:89:cb:77:32:00:eb:
c6:82:07:84:ef:c4:d8:01:81:18:91:73:b6:92:9b:29:87:ee:
f3:dd:53:16:4d:1f:eb:80:dd:35:1d:d1:e1:15:38:c8:3e:8f:
12:e9:e7:f9:fb:8d:4b:da:a6:9e:01:53:56:d4:7d:68:bd:b5:
b8:5e:e0:d1:ff:db:d4:5b:c3:24:36:0b:a8:60:da:96:29:db:
70:56:d0:63:89:b7:ae:40:fa:01:dd:50:a1:eb:14:7d:17:58:
84:4a:27:1b:bb:9f:9d:2f:a6:75:8c:16:6c:1e:6b:60:0a:6c:
be:ba:72:f3:a0:12:a0:81:36:41:42:5d:58:00:c9:d1:b4:5b:
e6:51:5d:ce:06:7d:9f:97:e1:cd:08:8a:76:df:0f:bf:10:e0:
c4:de:fe:11:cb:65:bd:65:1b:68:74:36:b3:05:93:b2:1f:92:
8e:03:39:aa:f9:43:b6:fa:a8:9a:c8:67:40:e8:6e:8b:f7:59:
9c:85:51:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXGQOxKYdBXdPzHQq6Wq1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5
Y2VlMWQwHhcNMjYxMDA3MTYwMTE3WhcNMjYxMDA4MTYwMTE3WjAzMTEwLwYDVQQD
Eyg3NGYwMzg0NWI1ZThhYjdiOWY2M2UyMjZiYjA2MGI4NjViZDg4MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDvYvD7q0P00T/jR4xSd3kEqbRx0
3bwn/tMwm3+NBntNT8Nka/W4/yP1fu9A/lGnJH/VPctnqJNJdgGdSDET/NSdJVsj
gE7AkHuTcER85Ev/gNRGJPDmpWsB1EYkxalDy6U1GbLA3Jdj0kgncoHpHAWDcZW5
Y9otQi7q714FzW4s/3KdSnetSVZPEU3HbMmqlPO/1QVHWpYYRPIS/2ho4rHkkh5r
2Cl9hG7CwDCNQsRpSHWxA/vddeDak4dapUzQBTuMEJXhkZGR1BPG6rmaaXWcx3lU
Yr41sG8O0ICUVeHVhcpzJH8nhjqTbG8ikKzYVTD+dwbIq9qM5T9ScXIUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTwOEW16Kt7n2PiJrsGC4Zb2IHbMB8GA1UdIwQY
MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt
NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4
LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3OuvfhE
rjb4Ot6ewGzHPBhl6Q2Es4rCrlvJLp5WyEV6duLACV3AI7HdZQ1liH1jBw+BCZGt
gdzMfIZ0IE4ojdXqict3MgDrxoIHhO/E2AGBGJFztpKbKYfu891TFk0f64DdNR3R
4RU4yD6PEunn+fuNS9qmngFTVtR9aL21uF7g0f/b1FvDJDYLqGDalinbcFbQY4m3
rkD6Ad1QoesUfRdYhEonG7ufnS+mdYwWbB5rYApsvrpy86ASoIE2QUJdWADJ0bRb
5lFdzgZ9n5fhzQiKdt8PvxDgxN7+EctlvWUbaHQ2swWTsh+SjgM5qvlDtvqomshn
QOhui/dZnIVRdw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:26 2026 by rpki-client