Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: RazyMO2vHh7jGoCPRbeWLqKOIymDXaAt1WRi781c1gU=
Subject key identifier: C8:E6:AB:E7:A0:B8:BB:7A:0F:AF:37:A9:7E:B9:FB:5B:3D:BB:DF:F8
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 01A002EF99B29EBB1AD0FA341933EDD52D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0BDA
Signing time: Sat 15 Aug 2026 01:00:51 +0000
Manifest this update: Sat 15 Aug 2026 01:00:51 +0000
Manifest next update: Sun 16 Aug 2026 01:00:51 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: mSXe03wK5z5c935QuaaTSQB1GaFMh6ileC6v+LiQkvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:99:b2:9e:bb:1a:d0:fa:34:19:33:ed:d5:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Aug 15 01:00:51 2026 GMT
Not After : Aug 16 01:00:51 2026 GMT
Subject: CN=c8e6abe7a0b8bb7a0faf37a97eb9fb5b3dbbdff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e4:90:e4:25:41:cb:c0:d2:4d:b4:8e:90:04:
4c:bd:b4:d4:6e:fa:9c:53:86:48:7e:cb:17:6f:f8:
22:19:4a:e2:e1:2e:32:6f:87:5e:f7:2f:01:f1:34:
39:40:80:d1:2d:03:a6:3b:2e:99:f8:56:fe:46:77:
08:3d:9a:99:26:8f:1c:ac:c7:1f:67:e3:ef:e6:2c:
27:59:42:a6:80:cc:fe:18:db:8f:ef:be:b9:d5:70:
7f:00:be:05:8e:37:33:0c:c0:a1:a7:d0:10:20:01:
5c:05:d9:25:80:16:c0:72:ca:43:b3:b7:83:72:1d:
92:20:7e:26:48:14:0c:de:47:9a:13:3e:c7:f4:27:
40:10:b4:70:9a:8d:99:cb:a6:f4:a5:f3:30:81:c4:
8a:0b:7d:b4:32:db:5b:b7:7d:39:b4:84:7c:90:e8:
e6:b4:96:dd:47:75:91:ad:2d:ed:b5:53:43:0c:59:
7c:d8:20:b2:06:1f:16:be:ac:f2:8d:be:5c:29:81:
cc:db:fa:65:e4:65:6c:e2:63:3e:71:87:4e:3e:7c:
6b:97:3f:42:56:0c:c1:bb:44:78:78:2d:6d:71:58:
d0:c7:58:87:46:3f:78:a5:2e:9b:dc:f1:a1:22:17:
22:96:88:96:fd:ec:c7:9e:ef:35:cf:84:99:b2:52:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:AB:E7:A0:B8:BB:7A:0F:AF:37:A9:7E:B9:FB:5B:3D:BB:DF:F8
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:2c:47:01:de:a8:4d:0e:ad:d1:47:64:fc:92:14:a7:87:
8d:68:89:65:95:d6:87:cd:68:48:0c:ef:90:64:39:63:a8:13:
de:56:b3:cb:86:16:a3:a0:7d:ec:cc:1b:76:1a:c2:0f:cf:35:
58:d0:cd:8c:2f:65:e9:b5:cf:f5:f0:46:c3:16:4e:f9:bb:02:
f2:cc:0b:ad:30:f7:d5:2a:ec:ee:6f:1b:7c:e2:c7:57:f4:36:
23:99:c3:ba:a4:08:8a:21:89:48:44:00:0b:a3:73:74:2e:b1:
b7:c1:a8:96:fa:6d:6f:76:e9:9a:6e:b9:cf:37:6c:0f:e5:6b:
a8:82:0b:67:4d:65:e1:45:cb:67:11:5a:50:59:8d:69:d3:f8:
e1:87:d5:7e:bb:c2:4d:28:bb:5b:a3:e8:41:75:49:07:31:29:
f3:00:49:71:74:d9:02:95:22:64:e9:91:bd:cc:5a:6c:44:f1:
e3:ab:97:a5:9e:aa:b2:19:30:5e:2a:23:82:4e:a8:f3:d3:1f:
56:db:2d:17:7b:c4:5d:e5:ad:fd:35:5a:f8:a0:4d:67:bf:4c:
be:83:c8:13:7e:09:a6:2e:59:12:92:45:a4:f4:a3:4c:03:f6:
ab:c5:9a:15:d9:3c:45:eb:5f:96:58:a0:18:e0:cd:8d:4e:76:
5d:7d:97:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC75mynrsa0Po0GTPt1S0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5
Y2VlMWQwHhcNMjYwODE1MDEwMDUxWhcNMjYwODE2MDEwMDUxWjAzMTEwLwYDVQQD
EyhjOGU2YWJlN2EwYjhiYjdhMGZhZjM3YTk3ZWI5ZmI1YjNkYmJkZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uSQ5CVBy8DSTbSOkARMvbTUbvqc
U4ZIfssXb/giGUri4S4yb4de9y8B8TQ5QIDRLQOmOy6Z+Fb+RncIPZqZJo8crMcf
Z+Pv5iwnWUKmgMz+GNuP77651XB/AL4FjjczDMChp9AQIAFcBdklgBbAcspDs7eD
ch2SIH4mSBQM3keaEz7H9CdAELRwmo2Zy6b0pfMwgcSKC320Mttbt305tIR8kOjm
tJbdR3WRrS3ttVNDDFl82CCyBh8Wvqzyjb5cKYHM2/pl5GVs4mM+cYdOPnxrlz9C
VgzBu0R4eC1tcVjQx1iHRj94pS6b3PGhIhciloiW/ezHnu81z4SZslL0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjmq+eguLt6D683qX65+1s9u9/4MB8GA1UdIwQY
MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt
NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4
LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/QsRwHe
qE0OrdFHZPySFKeHjWiJZZXWh81oSAzvkGQ5Y6gT3lazy4YWo6B97MwbdhrCD881
WNDNjC9l6bXP9fBGwxZO+bsC8swLrTD31Srs7m8bfOLHV/Q2I5nDuqQIiiGJSEQA
C6NzdC6xt8Golvptb3bpmm65zzdsD+VrqIILZ01l4UXLZxFaUFmNadP44YfVfrvC
TSi7W6PoQXVJBzEp8wBJcXTZApUiZOmRvcxabETx46uXpZ6qshkwXiojgk6o89Mf
VtstF3vEXeWt/TVa+KBNZ79MvoPIE34Jpi5ZEpJFpPSjTAP2q8WaFdk8Retfllig
GODNjU52XX2XvA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:08 2026 by rpki-client