Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: NpZVgIobc41D6BUx4y7W8BBaH0BLDqOuZnEyGQmBIEg=
Subject key identifier: 20:BC:6A:C5:10:A8:BD:6F:2D:AE:4E:2D:85:4C:95:62:B2:03:8A:85
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 01A18D8A93C3064528BAEB9EBE66F6C1505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 0368
Signing time: Fri 30 Oct 2026 16:00:31 +0000
Manifest this update: Fri 30 Oct 2026 16:00:31 +0000
Manifest next update: Sat 31 Oct 2026 16:00:31 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: Oj57VAM+oKwSXNmEv0YSog8yXCXolnhF6QJj65ShlXs=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8a:93:c3:06:45:28:ba:eb:9e:be:66:f6:c1:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Oct 30 16:00:31 2026 GMT
Not After : Oct 31 16:00:31 2026 GMT
Subject: CN=20bc6ac510a8bd6f2dae4e2d854c9562b2038a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:10:58:88:b3:fa:0d:54:86:b6:72:2e:25:
7a:3b:12:3e:5a:7c:73:f4:ec:87:68:40:c5:26:bc:
a3:e6:08:ab:0d:2b:f4:6a:a5:43:d7:cb:17:6a:39:
d6:00:09:48:7b:79:a0:ba:f3:d7:a5:5e:33:27:50:
cd:33:be:46:0c:29:20:2f:70:9b:61:d3:35:6e:cd:
fd:23:1e:d1:0e:e6:84:f0:92:bf:ad:06:ae:06:1a:
6d:97:c6:35:a7:1a:c4:9d:f4:e1:02:e4:ea:79:d9:
00:c5:24:9f:36:dd:d2:80:54:e9:8f:a8:1f:fe:3c:
12:1a:4b:23:a9:f6:77:10:fe:95:93:71:12:bf:aa:
c9:d3:da:af:40:74:26:38:f1:b1:f3:53:4d:8b:0e:
5a:41:e8:69:2d:81:6f:95:d7:8a:fc:80:e2:f5:1f:
e9:7a:e7:ed:0b:88:43:7e:84:75:9d:6d:5c:1a:05:
0c:ab:9c:d2:02:aa:10:a0:73:68:92:6b:d3:c3:f1:
f0:34:a8:1d:c5:35:5c:39:d7:76:4f:49:8c:d0:24:
58:58:a0:a9:1a:1d:16:20:7e:22:c7:c8:3a:88:37:
95:d5:e2:2c:0d:97:de:fc:9a:ff:08:a8:67:ec:45:
d2:b7:c2:be:23:03:ec:c6:bc:7b:e0:7b:80:96:ec:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:6A:C5:10:A8:BD:6F:2D:AE:4E:2D:85:4C:95:62:B2:03:8A:85
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3a:de:65:93:c0:b5:a3:18:fb:c2:3b:30:6e:b7:a2:16:bb:
68:68:52:09:f7:f9:bf:44:eb:49:55:c2:94:72:c3:1a:99:84:
0e:32:f6:7f:a8:1a:87:c0:98:d3:03:c4:fa:dd:92:fd:bb:6c:
39:ba:7e:8f:70:e9:f5:2c:4e:2d:e0:86:7c:ec:8e:66:f6:8b:
0f:b7:dd:3d:8c:82:61:e5:19:ed:8e:2e:67:3e:f5:7d:23:d5:
31:ca:cf:4d:82:8f:56:f1:ae:d2:df:a9:8c:f8:35:2f:26:3d:
7b:c3:98:9d:15:71:3e:08:2c:8a:d5:dd:42:30:d1:a0:e0:02:
b1:60:28:2f:d6:a7:25:25:26:66:a5:d3:9c:52:70:02:e9:ae:
fb:c7:c7:ef:33:f6:9c:6a:3b:06:9b:fe:0a:07:6c:5a:5d:1b:
f0:99:ce:bf:dd:93:9a:cf:9b:b0:8b:b8:cf:21:a9:65:ca:c1:
b8:db:cf:e0:14:75:4e:d7:da:3c:c8:57:2b:b2:e8:0d:05:79:
60:8b:05:c5:51:7f:98:c0:c7:57:33:69:b1:fa:fe:66:be:a6:
f9:f4:61:26:7b:b6:5f:94:81:9c:ee:0c:19:7a:24:5c:61:76:
28:b1:cc:c1:60:c1:9c:a9:12:de:5c:a3:1b:f8:5e:21:fc:f4:
49:3d:80:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNipPDBkUouuuevmb2wVBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0
MmFhYjAwHhcNMjYxMDMwMTYwMDMxWhcNMjYxMDMxMTYwMDMxWjAzMTEwLwYDVQQD
EygyMGJjNmFjNTEwYThiZDZmMmRhZTRlMmQ4NTRjOTU2MmIyMDM4YTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYAQWIiz+g1UhrZyLiV6OxI+Wnxz
9OyHaEDFJryj5girDSv0aqVD18sXajnWAAlIe3mguvPXpV4zJ1DNM75GDCkgL3Cb
YdM1bs39Ix7RDuaE8JK/rQauBhptl8Y1pxrEnfThAuTqedkAxSSfNt3SgFTpj6gf
/jwSGksjqfZ3EP6Vk3ESv6rJ09qvQHQmOPGx81NNiw5aQehpLYFvldeK/IDi9R/p
euftC4hDfoR1nW1cGgUMq5zSAqoQoHNokmvTw/HwNKgdxTVcOdd2T0mM0CRYWKCp
Gh0WIH4ix8g6iDeV1eIsDZfe/Jr/CKhn7EXSt8K+IwPsxrx74HuAluyf4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC8asUQqL1vLa5OLYVMlWKyA4qFMB8GA1UdIwQY
MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt
ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz
LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzreZZPA
taMY+8I7MG63oha7aGhSCff5v0TrSVXClHLDGpmEDjL2f6gah8CY0wPE+t2S/bts
Obp+j3Dp9SxOLeCGfOyOZvaLD7fdPYyCYeUZ7Y4uZz71fSPVMcrPTYKPVvGu0t+p
jPg1LyY9e8OYnRVxPggsitXdQjDRoOACsWAoL9anJSUmZqXTnFJwAumu+8fH7zP2
nGo7Bpv+CgdsWl0b8JnOv92Tms+bsIu4zyGpZcrBuNvP4BR1TtfaPMhXK7LoDQV5
YIsFxVF/mMDHVzNpsfr+Zr6m+fRhJnu2X5SBnO4MGXokXGF2KLHMwWDBnKkS3lyj
G/heIfz0ST2ArQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:28:26 2026 by rpki-client