Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: zIfXHVmfdxVbbLCJ3FpWd0ozXmt79/3Je9ewl0euf50=
Subject key identifier: 81:10:36:00:8A:4C:F3:57:E0:1C:0D:E1:5A:6B:64:BB:00:94:A0:61
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 019CE5FF0D7985C74773B121644CA7269C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: FF
Signing time: Fri 13 Mar 2026 07:00:23 +0000
Manifest this update: Fri 13 Mar 2026 07:00:23 +0000
Manifest next update: Sat 14 Mar 2026 07:00:23 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: S8AxQFBk84LpBw2XKzAdfaTdsQLBA7zR1DjQIcso06o=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:0d:79:85:c7:47:73:b1:21:64:4c:a7:26:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Mar 13 07:00:23 2026 GMT
Not After : Mar 14 07:00:23 2026 GMT
Subject: CN=811036008a4cf357e01c0de15a6b64bb0094a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:7d:23:a0:18:a8:54:b2:66:f9:54:8d:d9:
c8:7f:d3:1f:ba:15:7a:5a:10:87:90:ec:2c:4e:0c:
4c:c1:a7:9e:ac:e4:af:6a:62:18:0e:ce:91:5b:57:
53:33:62:30:0f:9c:fe:cf:d2:d2:fd:fc:b8:6e:ac:
07:c3:32:97:db:88:6f:23:b5:85:f4:e3:b0:c7:d9:
32:29:82:54:2a:e4:1f:dd:1e:f8:57:9e:1c:cf:ef:
68:61:2a:ea:6b:54:c9:68:48:78:51:08:a4:e8:3c:
7a:6e:7f:bc:be:47:68:b4:96:73:23:85:9e:b1:04:
8d:be:4c:ec:6b:a0:88:74:d9:b5:f3:b1:59:e5:ce:
29:f2:0c:47:6d:7b:51:4f:a6:f2:c9:86:64:a0:07:
ad:a1:66:68:01:10:1e:0e:ba:65:0d:ad:d1:8d:75:
2c:01:c9:99:e1:3a:1e:3e:89:de:74:b3:33:64:b8:
09:da:7f:5a:c4:c7:11:2e:0a:7c:92:b9:48:8f:fa:
e1:66:49:af:ec:39:23:70:25:4a:fa:77:9a:dd:dc:
88:df:bf:fa:d9:2a:88:6a:1f:97:04:37:d6:bc:44:
d3:c8:b9:34:3b:13:ca:7f:7f:c3:6f:36:c1:58:8c:
5b:d8:11:e2:77:a0:f4:fa:94:76:9c:07:aa:6e:0a:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:36:00:8A:4C:F3:57:E0:1C:0D:E1:5A:6B:64:BB:00:94:A0:61
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6b:88:3c:64:90:a1:a0:cb:cd:52:51:ff:f8:dd:f6:22:e4:
dc:65:b3:9e:32:1b:1d:d6:ad:16:8d:19:5b:3d:f3:03:bc:c4:
43:f8:76:6e:57:92:de:16:85:ee:6f:4e:e5:d8:c0:0b:98:62:
95:0b:6b:cc:22:da:8d:47:55:a1:9b:92:5d:1f:5a:c8:b8:c3:
2d:47:df:22:04:f1:49:92:b3:4c:38:c4:fe:7d:2d:b2:cb:37:
8d:89:dd:36:b9:b1:4c:7f:7b:73:1e:18:c3:7a:ba:05:40:cb:
b5:1d:e8:17:69:56:3a:d7:10:32:38:99:f0:bd:22:3b:e0:18:
fc:72:03:3b:4a:c0:b2:0d:72:79:8f:a1:76:55:e6:df:da:42:
fc:3d:a9:5d:ca:38:60:ed:80:89:57:e5:69:d9:5f:d9:00:3a:
ce:a1:7f:c0:d6:ad:5a:73:5c:f8:27:21:db:33:f8:b6:34:ff:
0e:d8:5c:95:53:d1:f8:13:33:5e:9e:8f:df:bc:40:b3:a4:24:
9e:14:a7:f2:62:4b:bb:9a:24:0a:4a:23:13:c9:ff:2e:e3:ac:
a4:d1:9e:b2:07:b8:77:df:53:c9:4d:1a:17:1a:9c:fe:6c:2f:
8c:bc:f8:62:36:66:88:4b:de:cb:fe:3c:1d:82:52:f9:c8:6f:
79:65:56:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzl/w15hcdHc7EhZEynJpx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0
MmFhYjAwHhcNMjYwMzEzMDcwMDIzWhcNMjYwMzE0MDcwMDIzWjAzMTEwLwYDVQQD
Eyg4MTEwMzYwMDhhNGNmMzU3ZTAxYzBkZTE1YTZiNjRiYjAwOTRhMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDR9I6AYqFSyZvlUjdnIf9MfuhV6
WhCHkOwsTgxMwaeerOSvamIYDs6RW1dTM2IwD5z+z9LS/fy4bqwHwzKX24hvI7WF
9OOwx9kyKYJUKuQf3R74V54cz+9oYSrqa1TJaEh4UQik6Dx6bn+8vkdotJZzI4We
sQSNvkzsa6CIdNm187FZ5c4p8gxHbXtRT6byyYZkoAetoWZoARAeDrplDa3RjXUs
AcmZ4ToePonedLMzZLgJ2n9axMcRLgp8krlIj/rhZkmv7DkjcCVK+nea3dyI37/6
2SqIah+XBDfWvETTyLk0OxPKf3/DbzbBWIxb2BHid6D0+pR2nAeqbgpo0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEQNgCKTPNX4BwN4VprZLsAlKBhMB8GA1UdIwQY
MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt
ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz
LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWuIPGSQ
oaDLzVJR//jd9iLk3GWznjIbHdatFo0ZWz3zA7zEQ/h2bleS3haF7m9O5djAC5hi
lQtrzCLajUdVoZuSXR9ayLjDLUffIgTxSZKzTDjE/n0tsss3jYndNrmxTH97cx4Y
w3q6BUDLtR3oF2lWOtcQMjiZ8L0iO+AY/HIDO0rAsg1yeY+hdlXm39pC/D2pXco4
YO2AiVfladlf2QA6zqF/wNatWnNc+Cch2zP4tjT/DthclVPR+BMzXp6P37xAs6Qk
nhSn8mJLu5okCkojE8n/LuOspNGesge4d99TyU0aFxqc/mwvjLz4YjZmiEvey/48
HYJS+chveWVWkQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:35:36 2026 by rpki-client