Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: GWN3ydk9MNpd+u2zuQEjMDiQT+VN+x+Wt2RiJ67ViEc=
Subject key identifier: E9:DC:C0:84:FA:86:DD:57:96:5F:34:D4:BE:FA:52:6B:51:57:F8:27
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01A0039440413DD6A6934BC36B119D381173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 171C
Signing time: Sat 15 Aug 2026 04:00:42 +0000
Manifest this update: Sat 15 Aug 2026 04:00:42 +0000
Manifest next update: Sun 16 Aug 2026 04:00:42 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: dPWRWwb4anwAw166D96XvwMrY1pEeWatKDq6hP3UXS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:40:41:3d:d6:a6:93:4b:c3:6b:11:9d:38:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Aug 15 04:00:42 2026 GMT
Not After : Aug 16 04:00:42 2026 GMT
Subject: CN=e9dcc084fa86dd57965f34d4befa526b5157f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:5b:e7:88:6b:5e:51:a5:10:bc:e3:91:97:
c5:68:c2:d7:11:06:3c:5e:10:19:5a:b3:2a:f8:03:
7b:b3:b1:0c:aa:ad:ce:49:51:5b:75:7b:7f:07:18:
e8:07:a2:26:8a:58:bb:c7:fe:5d:94:b8:00:68:9f:
a6:00:9c:66:03:23:f9:9c:a0:ce:26:3e:cb:f9:47:
05:b4:a7:62:ec:9a:43:d8:bc:09:82:e3:d7:89:d1:
aa:14:b4:81:5b:f9:c0:26:09:7a:52:f6:bd:24:a9:
c3:da:d6:9b:70:6c:5b:94:6c:de:f9:d3:2f:60:b4:
fd:9e:36:e1:bd:fe:15:6b:46:cd:c1:e1:b5:97:13:
65:ff:5a:50:2e:cb:72:47:fc:a0:d7:3d:76:66:00:
0f:f6:78:23:94:9b:fe:5d:07:fe:27:a7:0f:52:4f:
f9:59:bd:f4:c7:6d:d4:d8:2a:c0:3b:9c:f4:34:c5:
6c:10:e1:6b:32:48:4d:ae:1e:44:13:7b:69:d9:1d:
c7:de:08:e9:3f:88:5f:a2:ae:8c:48:c5:e2:c2:f0:
da:e8:62:78:43:33:40:44:4f:5d:f9:ee:79:b0:97:
d7:72:84:e9:1d:e2:cd:e2:da:96:fc:64:a5:a8:a8:
dc:61:de:74:f6:a9:61:07:fb:0a:1a:d7:8f:ef:19:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:C0:84:FA:86:DD:57:96:5F:34:D4:BE:FA:52:6B:51:57:F8:27
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f2:41:a0:8b:5e:df:bd:d9:78:5e:f4:54:0e:43:51:5c:be:
79:ff:db:6a:ac:fb:cb:39:6b:4c:7f:b7:b1:01:df:08:e0:77:
42:4a:58:ca:16:78:15:93:42:d1:e6:8f:a5:fe:d8:5e:fb:87:
ed:14:7a:77:57:5a:dd:26:3e:21:36:b2:02:e3:50:9d:2d:a5:
59:b7:bf:ab:bf:a2:41:b3:37:99:b6:ee:3d:b1:b6:26:c5:fa:
83:58:e1:0c:5f:2c:d3:b0:1f:3f:ca:b7:47:3f:a7:f7:0c:dc:
71:14:83:94:73:b4:b1:69:b9:ee:5e:69:c4:ea:b6:63:76:9d:
55:4d:f0:b6:60:62:28:0b:bb:3d:43:b1:02:5f:25:f6:93:61:
8b:60:4c:cc:50:f0:3d:b8:87:f0:b8:a1:c0:15:ee:e6:3b:6b:
ef:77:27:c6:24:07:19:09:22:35:1c:96:7b:c3:c7:ff:ff:72:
c3:eb:d0:fd:fe:2f:52:1d:3f:97:ab:8d:fc:89:15:33:b4:65:
8b:57:3a:23:ba:0d:17:d7:38:f1:e0:2a:fe:0b:62:76:14:00:
cc:d5:24:1d:76:3a:da:f8:a1:fc:12:79:ed:53:2a:d4:ef:d1:
e5:7e:8f:15:72:38:a1:04:f0:8a:b5:d7:b2:89:90:dd:57:4b:
71:58:60:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlEBBPdamk0vDaxGdOBFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YWRiODI1ZjlmZGJjYTBjZDdjNzkwMWRlYjdhMjJhZTE3
OTdjMDYwHhcNMjYwODE1MDQwMDQyWhcNMjYwODE2MDQwMDQyWjAzMTEwLwYDVQQD
EyhlOWRjYzA4NGZhODZkZDU3OTY1ZjM0ZDRiZWZhNTI2YjUxNTdmODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulFb54hrXlGlELzjkZfFaMLXEQY8
XhAZWrMq+AN7s7EMqq3OSVFbdXt/BxjoB6Imili7x/5dlLgAaJ+mAJxmAyP5nKDO
Jj7L+UcFtKdi7JpD2LwJguPXidGqFLSBW/nAJgl6Uva9JKnD2tabcGxblGze+dMv
YLT9njbhvf4Va0bNweG1lxNl/1pQLstyR/yg1z12ZgAP9ngjlJv+XQf+J6cPUk/5
Wb30x23U2CrAO5z0NMVsEOFrMkhNrh5EE3tp2R3H3gjpP4hfoq6MSMXiwvDa6GJ4
QzNARE9d+e55sJfXcoTpHeLN4tqW/GSlqKjcYd509qlhB/sKGteP7xkLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOncwIT6ht1Xll801L76UmtRV/gnMB8GA1UdIwQY
MBaAFGmtuCX5/bygzXx5Ad63oirheXwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAt
MzIzNjI2N2M4Nzk5LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hZjZiN2EtOWE3MC00OTRlLThhOTAtMzIzNjI2N2M4Nzk5
LzEvYWEyNEpmbjl2S0ROZkhrQjNyZWlLdUY1ZkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/JBoIte
373ZeF70VA5DUVy+ef/baqz7yzlrTH+3sQHfCOB3QkpYyhZ4FZNC0eaPpf7YXvuH
7RR6d1da3SY+ITayAuNQnS2lWbe/q7+iQbM3mbbuPbG2JsX6g1jhDF8s07AfP8q3
Rz+n9wzccRSDlHO0sWm57l5pxOq2Y3adVU3wtmBiKAu7PUOxAl8l9pNhi2BMzFDw
PbiH8LihwBXu5jtr73cnxiQHGQkiNRyWe8PH//9yw+vQ/f4vUh0/l6uN/IkVM7Rl
i1c6I7oNF9c48eAq/gtidhQAzNUkHXY62vih/BJ57VMq1O/R5X6PFXI4oQTwirXX
somQ3VdLcVhgoA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:49 2026 by rpki-client