Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: +LI2S5NgOrZ9m1CNQul9JnE4TMv+rzMMNeQzCEK2z4w=
Subject key identifier: A3:CD:EE:61:BC:4A:EB:1E:96:0D:15:9C:BB:CF:03:70:E9:E4:5F:7F
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 01A08EA07D89BD1D619820ED775339AD9A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 02E4
Signing time: Fri 11 Sep 2026 04:01:17 +0000
Manifest this update: Fri 11 Sep 2026 04:01:17 +0000
Manifest next update: Sat 12 Sep 2026 04:01:17 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: cNhudxlnMfopOzPqQ7Kg6yqoj4UHjmNl0ov5pjkOAqM=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:7d:89:bd:1d:61:98:20:ed:77:53:39:ad:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Sep 11 04:01:17 2026 GMT
Not After : Sep 12 04:01:17 2026 GMT
Subject: CN=a3cdee61bc4aeb1e960d159cbbcf0370e9e45f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:13:69:8c:65:d4:97:93:f9:8f:48:3c:68:
3d:81:63:c7:08:bf:49:92:a4:58:b0:8e:ee:de:d1:
3a:74:a6:86:99:24:5f:84:92:50:59:2d:3d:86:4e:
da:de:37:e8:90:cf:ff:c8:5e:24:a0:99:6a:b8:4c:
e4:cc:fb:18:65:d9:be:37:fa:77:93:3c:db:c6:88:
2e:5b:0e:84:d9:3d:c3:97:29:cb:ce:20:0d:d9:13:
c3:66:1e:81:72:9e:6e:19:b5:8b:df:a5:4f:d7:2b:
04:99:34:2e:e9:2d:c4:56:f2:a1:d5:74:70:8f:a3:
c5:c1:d2:0c:76:19:ee:1f:20:90:c4:2b:ea:a2:18:
67:da:3f:97:53:93:9a:c2:3b:ba:5b:63:3f:64:e5:
b1:54:0b:dc:69:3e:2c:67:61:ef:5a:dd:08:fd:fe:
d5:46:41:54:23:71:c8:87:9c:f8:da:21:bd:a3:80:
8b:b9:0a:aa:3b:cf:fc:a1:05:e2:b9:02:24:ab:d6:
15:7b:41:f3:1b:99:42:fe:8d:35:c7:90:d1:e7:32:
03:9a:e8:f2:0c:84:0d:9c:78:cc:c0:e0:52:88:d8:
57:13:19:22:59:22:59:4c:e0:e5:f6:e2:f9:c1:7f:
8e:46:d4:4d:b5:68:fa:74:cc:d5:ff:c2:e5:8a:a2:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:EE:61:BC:4A:EB:1E:96:0D:15:9C:BB:CF:03:70:E9:E4:5F:7F
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:60:d8:34:f6:e2:30:d0:c2:77:72:57:cf:6b:18:bd:9c:
97:13:69:67:16:24:ba:93:ef:62:34:27:a4:9e:e3:ad:af:56:
e8:f0:c1:e0:3e:20:e0:e3:e3:c1:f4:ba:56:be:30:e5:28:c5:
2a:1a:ff:28:a3:b9:fd:5f:72:c7:68:f0:12:bd:2c:71:8b:cb:
36:60:dd:94:32:2e:23:61:7c:5e:77:8a:77:ed:ee:a5:bb:25:
4a:7d:40:e4:3e:26:ef:c4:4c:4e:f5:44:d1:51:f1:8c:f2:b2:
fd:7e:2f:99:19:d0:89:45:6a:e5:18:6f:e0:73:32:ab:1c:ef:
7f:90:d8:09:be:bc:44:9d:20:36:60:26:c9:f9:4d:9f:7f:3b:
26:ad:d7:20:7e:1a:a5:20:dd:ea:a9:65:fc:c8:a0:c9:8f:bf:
76:5b:6f:fc:77:ca:66:c8:03:ef:f4:aa:ee:45:7c:26:91:bd:
88:51:6f:c0:90:27:08:29:7a:3f:2f:4f:65:b3:0b:21:7e:25:
56:07:b9:1c:b6:df:3f:74:14:4e:42:ba:4e:80:5b:4e:16:cc:
ad:f7:04:e9:92:f0:69:87:f1:06:61:a1:59:f2:fb:ae:e8:23:
cd:b1:09:af:6c:bc:e6:aa:61:7a:19:7b:ab:9b:7e:d2:a6:01:
42:b3:4c:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOoH2JvR1hmCDtd1M5rZqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0
MmFhYjAwHhcNMjYwOTExMDQwMTE3WhcNMjYwOTEyMDQwMTE3WjAzMTEwLwYDVQQD
EyhhM2NkZWU2MWJjNGFlYjFlOTYwZDE1OWNiYmNmMDM3MGU5ZTQ1ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+gTaYxl1JeT+Y9IPGg9gWPHCL9J
kqRYsI7u3tE6dKaGmSRfhJJQWS09hk7a3jfokM//yF4koJlquEzkzPsYZdm+N/p3
kzzbxoguWw6E2T3DlynLziAN2RPDZh6Bcp5uGbWL36VP1ysEmTQu6S3EVvKh1XRw
j6PFwdIMdhnuHyCQxCvqohhn2j+XU5Oawju6W2M/ZOWxVAvcaT4sZ2HvWt0I/f7V
RkFUI3HIh5z42iG9o4CLuQqqO8/8oQXiuQIkq9YVe0HzG5lC/o01x5DR5zIDmujy
DIQNnHjMwOBSiNhXExkiWSJZTODl9uL5wX+ORtRNtWj6dMzV/8LliqKuHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPN7mG8Suselg0VnLvPA3Dp5F9/MB8GA1UdIwQY
MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt
ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz
LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPztg2DT2
4jDQwndyV89rGL2clxNpZxYkupPvYjQnpJ7jra9W6PDB4D4g4OPjwfS6Vr4w5SjF
Khr/KKO5/V9yx2jwEr0scYvLNmDdlDIuI2F8XneKd+3upbslSn1A5D4m78RMTvVE
0VHxjPKy/X4vmRnQiUVq5Rhv4HMyqxzvf5DYCb68RJ0gNmAmyflNn387Jq3XIH4a
pSDd6qll/MigyY+/dltv/HfKZsgD7/Sq7kV8JpG9iFFvwJAnCCl6Py9PZbMLIX4l
Vge5HLbfP3QUTkK6ToBbThbMrfcE6ZLwaYfxBmGhWfL7rugjzbEJr2y85qphehl7
q5t+0qYBQrNMSg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:28:33 2026 by rpki-client