Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: 0qxc02GE0gDv83vG41NEdax0D0k6NpgCLLBclUYDn0A=
Subject key identifier: 20:9B:4D:8F:ED:45:2F:69:7E:6E:D0:FE:62:D8:24:7F:82:50:97:D7
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 019DD19A4120F0CBDBA406B87200C8EDD12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 0179
Signing time: Tue 28 Apr 2026 01:00:40 +0000
Manifest this update: Tue 28 Apr 2026 01:00:40 +0000
Manifest next update: Wed 29 Apr 2026 01:00:40 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: pYT5j5htEQeFd6Q5zyjVy28SryhMdkX6meQZJdEZwjQ=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:41:20:f0:cb:db:a4:06:b8:72:00:c8:ed:d1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Apr 28 01:00:40 2026 GMT
Not After : Apr 29 01:00:40 2026 GMT
Subject: CN=209b4d8fed452f697e6ed0fe62d8247f825097d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:e6:f1:e2:ae:fc:f9:cc:27:3e:bb:ce:3d:
a6:05:ee:87:d8:33:55:bd:af:f6:01:d6:2b:c7:76:
8f:43:b9:6b:b6:50:ac:6d:ff:4b:68:66:ae:b7:81:
23:84:8d:9a:b0:f6:7a:af:c3:4b:57:66:4b:11:6a:
db:0a:5e:9b:bd:78:17:f5:54:d2:ce:20:16:1f:8b:
86:f3:0d:68:8a:0a:5f:05:2b:7b:1a:bf:bd:75:d2:
32:90:64:d1:40:d0:53:8b:80:c6:22:19:dd:a1:27:
4e:ce:58:e4:ac:7c:e2:99:a2:57:b4:50:f1:43:6a:
8d:d6:84:fe:e6:f3:09:6f:ea:a4:23:12:2c:56:2f:
50:67:94:19:c2:87:03:9c:75:13:e1:d9:ca:87:2a:
37:f9:e0:3f:1c:bc:e0:4a:b7:80:2c:35:9c:c3:99:
1b:35:b8:57:0e:d3:52:09:50:14:76:c6:02:33:dd:
eb:e0:7f:c2:32:9c:c0:04:75:ae:e7:f8:24:c4:03:
4c:5b:b8:e8:d1:9b:28:1c:83:74:d6:2b:f0:21:4c:
8c:2c:62:ca:c9:a5:2b:9f:63:c8:67:f8:5e:76:b7:
fb:51:60:73:a5:59:b7:67:96:d0:24:1d:70:a8:30:
3e:41:04:fd:cf:85:45:39:39:6d:fc:45:c1:1f:5c:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:4D:8F:ED:45:2F:69:7E:6E:D0:FE:62:D8:24:7F:82:50:97:D7
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d9:38:1b:e2:f2:6f:26:03:b3:be:ff:ba:7b:63:48:d1:94:
03:b6:e8:69:63:20:32:78:39:ab:f6:e1:15:0b:08:f2:23:f9:
fb:1a:91:41:fc:27:f6:b4:8b:3a:f7:0c:58:4e:cd:61:72:ff:
8a:d3:08:ca:35:a0:5d:3e:d9:1a:fb:3e:71:b0:69:e9:f7:2e:
f2:fc:c4:63:46:c4:de:79:94:c0:e3:0c:68:68:f5:de:35:30:
0d:ea:5c:29:c7:21:18:0a:a7:2a:62:fd:c5:98:e4:a7:09:b6:
80:05:31:31:39:29:d8:c8:c3:20:c2:1e:37:ac:14:37:2f:02:
5a:31:82:fb:6b:d0:b0:f7:10:38:8e:cc:1e:5f:39:76:f1:ea:
ac:17:37:46:3a:54:4a:1e:e2:34:8a:fd:9a:67:9d:5f:f2:91:
27:5a:40:2d:46:39:8e:c3:27:59:6f:eb:05:00:77:79:df:48:
ad:6a:09:9a:a3:1b:8e:bc:f3:07:32:a3:8f:b6:1a:2e:f8:1d:
39:d3:21:06:1d:05:02:98:01:61:9a:87:b2:17:1d:30:7d:be:
b7:14:fb:3e:77:d8:2d:91:a8:89:20:6b:93:ee:9f:bc:2e:8c:
d5:c0:9f:e6:eb:a7:eb:2b:21:38:2f:d5:bd:88:dd:8e:b7:c5:
1a:aa:8f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RmkEg8MvbpAa4cgDI7dEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0
MmFhYjAwHhcNMjYwNDI4MDEwMDQwWhcNMjYwNDI5MDEwMDQwWjAzMTEwLwYDVQQD
EygyMDliNGQ4ZmVkNDUyZjY5N2U2ZWQwZmU2MmQ4MjQ3ZjgyNTA5N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/zm8eKu/PnMJz67zj2mBe6H2DNV
va/2AdYrx3aPQ7lrtlCsbf9LaGaut4EjhI2asPZ6r8NLV2ZLEWrbCl6bvXgX9VTS
ziAWH4uG8w1oigpfBSt7Gr+9ddIykGTRQNBTi4DGIhndoSdOzljkrHzimaJXtFDx
Q2qN1oT+5vMJb+qkIxIsVi9QZ5QZwocDnHUT4dnKhyo3+eA/HLzgSreALDWcw5kb
NbhXDtNSCVAUdsYCM93r4H/CMpzABHWu5/gkxANMW7jo0ZsoHIN01ivwIUyMLGLK
yaUrn2PIZ/hedrf7UWBzpVm3Z5bQJB1wqDA+QQT9z4VFOTlt/EXBH1zlGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCbTY/tRS9pfm7Q/mLYJH+CUJfXMB8GA1UdIwQY
MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt
ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz
LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdk4G+Ly
byYDs77/untjSNGUA7boaWMgMng5q/bhFQsI8iP5+xqRQfwn9rSLOvcMWE7NYXL/
itMIyjWgXT7ZGvs+cbBp6fcu8vzEY0bE3nmUwOMMaGj13jUwDepcKcchGAqnKmL9
xZjkpwm2gAUxMTkp2MjDIMIeN6wUNy8CWjGC+2vQsPcQOI7MHl85dvHqrBc3RjpU
Sh7iNIr9mmedX/KRJ1pALUY5jsMnWW/rBQB3ed9IrWoJmqMbjrzzBzKjj7YaLvgd
OdMhBh0FApgBYZqHshcdMH2+txT7PnfYLZGoiSBrk+6fvC6M1cCf5uun6yshOC/V
vYjdjrfFGqqPUw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:53 2026 by rpki-client