Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: 1iwrdxoc6jDpixWum7T6zkncrPeVwngrE2zEK2Q2D+E=
Subject key identifier: 4A:F9:1F:EF:3E:22:30:CE:C5:4E:28:D7:60:16:13:5C:2B:68:43:1F
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 019FA4F3994D5E88263A0AD0D57633934B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 026B
Signing time: Mon 27 Jul 2026 19:00:55 +0000
Manifest this update: Mon 27 Jul 2026 19:00:55 +0000
Manifest next update: Tue 28 Jul 2026 19:00:55 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: lApvy4yu98NnrwjQmpVs329E+KcBJHL4JvkJpbmPC9Q=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:f3:99:4d:5e:88:26:3a:0a:d0:d5:76:33:93:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Jul 27 19:00:55 2026 GMT
Not After : Jul 28 19:00:55 2026 GMT
Subject: CN=4af91fef3e2230cec54e28d76016135c2b68431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:db:de:bc:2d:47:58:9d:4b:3d:a3:f6:96:
99:19:e7:49:09:4e:3e:4f:7a:c8:d6:c5:7d:6a:fc:
43:23:e3:22:80:e8:a6:90:05:c3:d4:a6:80:21:79:
fb:2e:67:d3:59:e7:96:4f:98:f3:cd:19:49:51:b3:
9d:70:31:da:49:7d:38:aa:19:bd:b2:96:80:e6:87:
65:e1:84:71:04:3e:9d:c4:75:93:29:a2:60:ed:87:
64:df:34:c8:73:62:9b:84:ce:31:d3:b8:36:65:59:
9a:64:c6:27:5f:0f:05:a5:f4:61:fe:67:83:01:4a:
3a:c2:0e:a5:dd:ca:f8:5d:2d:96:d4:b5:aa:a7:ad:
e9:13:4f:7a:d7:a2:34:86:38:26:c9:4a:b6:1f:e9:
12:9c:de:97:f9:ff:b3:78:b8:52:05:a5:78:d6:15:
81:ae:f9:67:1d:f4:17:06:02:fc:5e:46:1f:74:d4:
9a:76:26:f2:b5:72:a0:c8:9b:3e:13:53:55:66:a8:
ee:0c:84:24:9c:80:78:68:87:5c:30:4e:94:3c:8c:
0d:0f:01:80:76:3a:ea:25:d1:32:d8:a5:5d:8a:4d:
2d:37:9d:46:91:93:cf:4c:ff:dd:7d:75:f8:45:93:
d4:df:73:f6:49:c9:6b:59:3a:62:1f:73:9f:9a:b7:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:1F:EF:3E:22:30:CE:C5:4E:28:D7:60:16:13:5C:2B:68:43:1F
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:c0:a8:f5:c8:3e:cf:39:7a:5a:d1:f9:50:c6:8a:97:cf:
d2:13:b9:7f:30:bb:fa:c6:48:10:a3:ff:e3:d9:78:b4:1d:03:
e4:da:ce:19:f0:6a:c6:34:6d:42:10:de:05:f9:1c:3b:da:4c:
af:6b:31:54:d1:a9:c3:dc:12:9e:ea:ec:45:0a:13:63:e8:c6:
23:7f:0f:c0:80:50:09:a9:fb:a8:7e:b5:70:e8:57:9f:f8:fc:
fc:e5:a2:9c:b9:e8:88:1d:1f:de:b6:e2:2d:79:38:65:11:8d:
58:d6:c9:a7:04:61:4a:24:a8:8c:cc:5e:80:fd:0f:34:e5:26:
a1:0b:ae:ca:c1:c4:fe:77:41:a7:d4:21:89:c1:78:0b:56:0b:
e9:3d:dc:e2:1b:aa:7b:ef:10:41:ba:13:d8:45:8d:92:7a:a0:
b3:ec:e5:e3:a4:93:fe:af:83:b4:9e:53:c9:ae:e7:f0:dc:59:
f0:b0:c7:dc:b4:ec:66:b2:d5:58:a3:87:03:ed:d8:5f:8c:1a:
38:4e:46:5b:0d:9a:d9:28:df:7e:8a:f1:e3:d0:bf:51:0c:db:
82:98:9e:29:61:c8:57:d3:52:47:b9:f6:18:17:9e:c4:10:c5:
5a:12:77:9f:83:b9:42:58:f5:c3:a3:2d:94:b3:6a:12:00:6f:
0c:5a:05:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+k85lNXogmOgrQ1XYzk0tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0
MmFhYjAwHhcNMjYwNzI3MTkwMDU1WhcNMjYwNzI4MTkwMDU1WjAzMTEwLwYDVQQD
Eyg0YWY5MWZlZjNlMjIzMGNlYzU0ZTI4ZDc2MDE2MTM1YzJiNjg0MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFTb3rwtR1idSz2j9paZGedJCU4+
T3rI1sV9avxDI+MigOimkAXD1KaAIXn7LmfTWeeWT5jzzRlJUbOdcDHaSX04qhm9
spaA5odl4YRxBD6dxHWTKaJg7Ydk3zTIc2KbhM4x07g2ZVmaZMYnXw8FpfRh/meD
AUo6wg6l3cr4XS2W1LWqp63pE09616I0hjgmyUq2H+kSnN6X+f+zeLhSBaV41hWB
rvlnHfQXBgL8XkYfdNSadibytXKgyJs+E1NVZqjuDIQknIB4aIdcME6UPIwNDwGA
djrqJdEy2KVdik0tN51GkZPPTP/dfXX4RZPU33P2SclrWTpiH3OfmreRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr5H+8+IjDOxU4o12AWE1wraEMfMB8GA1UdIwQY
MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt
ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz
LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxbAqPXI
Ps85elrR+VDGipfP0hO5fzC7+sZIEKP/49l4tB0D5NrOGfBqxjRtQhDeBfkcO9pM
r2sxVNGpw9wSnursRQoTY+jGI38PwIBQCan7qH61cOhXn/j8/OWinLnoiB0f3rbi
LXk4ZRGNWNbJpwRhSiSojMxegP0PNOUmoQuuysHE/ndBp9QhicF4C1YL6T3c4huq
e+8QQboT2EWNknqgs+zl46ST/q+DtJ5Tya7n8NxZ8LDH3LTsZrLVWKOHA+3YX4wa
OE5GWw2a2Sjfforx49C/UQzbgpieKWHIV9NSR7n2GBeexBDFWhJ3n4O5Qlj1w6Mt
lLNqEgBvDFoF3A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:04:28 2026 by rpki-client