Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: Lfq8vpq/NC0LilDPfnVmpXGb6FuOeICdrGSJhIeyKC8=
Subject key identifier: 87:EE:5F:F7:D5:8D:0F:63:31:D9:2E:75:6F:05:0C:08:C4:A3:87:83
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 01A088D53F09D2494A35C14CAD6360BFA574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 0221
Signing time: Thu 10 Sep 2026 01:01:11 +0000
Manifest this update: Thu 10 Sep 2026 01:01:11 +0000
Manifest next update: Fri 11 Sep 2026 01:01:11 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: 11nV+PUXeLxo2JH6ml6zYyBAYZRKkV/msOA7CUZs8Zw=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:3f:09:d2:49:4a:35:c1:4c:ad:63:60:bf:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Sep 10 01:01:11 2026 GMT
Not After : Sep 11 01:01:11 2026 GMT
Subject: CN=87ee5ff7d58d0f6331d92e756f050c08c4a38783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:48:e4:b0:9c:3d:d7:16:cb:07:f1:81:31:
ba:a9:36:19:87:01:55:99:cf:7a:21:69:5e:82:2b:
01:a2:be:61:da:dd:fd:31:f0:63:61:89:4d:95:44:
da:ae:2f:16:6b:3f:6a:c1:96:53:0d:cb:be:f9:e1:
c8:2c:3c:a2:c3:37:07:f1:bd:ea:bd:6b:da:02:5c:
53:26:4e:58:72:05:db:99:ec:55:a9:e5:0b:b1:b7:
dc:2d:4e:65:43:c1:6d:97:cc:21:7c:86:1d:55:0d:
93:0f:d0:44:99:6d:9d:08:64:55:a9:13:13:2c:82:
f8:d9:e7:66:b0:90:f6:91:aa:f5:f2:1d:7e:3d:7f:
bf:b6:2b:b7:0d:5b:99:b0:2d:14:bf:57:92:55:2f:
6c:f6:5a:20:64:47:54:0c:b2:4e:ee:69:d9:98:19:
f4:36:27:be:5d:04:33:a9:99:a4:b6:9b:9c:bf:73:
f0:3c:c3:7c:4b:e4:13:e3:60:4d:3e:0b:52:30:92:
bb:47:a5:71:2d:13:8f:51:33:eb:a5:58:07:51:42:
70:14:e4:9e:62:46:60:dd:9e:ac:d7:3c:5f:04:9f:
e9:06:ef:47:77:7c:53:f7:b1:a7:49:5d:89:08:df:
d2:9e:d5:da:dd:4a:c9:da:a9:07:74:56:df:53:a6:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:5F:F7:D5:8D:0F:63:31:D9:2E:75:6F:05:0C:08:C4:A3:87:83
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:53:37:d9:d9:a8:0b:d0:c1:12:bd:fa:1a:d8:85:af:50:
c7:ee:c0:84:6f:2e:35:5b:c6:1d:55:99:09:78:c8:f6:12:6c:
18:77:38:55:d4:5b:16:3c:56:32:c7:67:79:a0:4d:6d:40:1d:
7c:0c:41:ad:d7:60:b0:0f:08:3a:e1:1e:50:c1:50:be:61:97:
9e:53:ee:86:c2:fd:6c:01:f3:77:c4:42:eb:75:9b:2c:04:a9:
ae:69:84:fe:5f:02:e8:58:f1:0c:65:5f:f6:22:f8:fa:f9:c3:
4d:b8:30:aa:ee:cc:b1:e5:2f:4f:d5:e7:96:d5:28:d4:51:61:
8b:12:39:ae:89:45:6a:26:4a:44:7a:2a:9d:4d:e4:9a:10:a0:
2f:0d:50:24:cd:5a:07:d4:73:d0:ba:4c:09:ad:12:04:5e:96:
41:36:fb:7c:15:bf:0e:50:a8:52:40:77:eb:1f:fb:01:6b:22:
db:e4:f0:0a:07:77:51:2c:7e:32:3d:34:e1:7c:88:36:d0:46:
6d:6c:e5:02:93:54:10:bd:6a:55:73:df:61:5f:ab:04:61:c0:
46:27:8e:f3:c6:e0:45:bb:36:41:7f:6b:f6:05:ca:a2:17:32:
3f:3a:da:04:6d:11:37:52:92:8c:63:de:39:4f:5d:8b:84:4e:
f8:5d:4d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1T8J0klKNcFMrWNgv6V0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODRmZDk0MWNmN2IyOTRiODgyZTc0ZGIwZmM5NzE2NzQz
NGRhYmMwHhcNMjYwOTEwMDEwMTExWhcNMjYwOTExMDEwMTExWjAzMTEwLwYDVQQD
Eyg4N2VlNWZmN2Q1OGQwZjYzMzFkOTJlNzU2ZjA1MGMwOGM0YTM4NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nhI5LCcPdcWywfxgTG6qTYZhwFV
mc96IWlegisBor5h2t39MfBjYYlNlUTari8Waz9qwZZTDcu++eHILDyiwzcH8b3q
vWvaAlxTJk5YcgXbmexVqeULsbfcLU5lQ8Ftl8whfIYdVQ2TD9BEmW2dCGRVqRMT
LIL42edmsJD2kar18h1+PX+/tiu3DVuZsC0Uv1eSVS9s9logZEdUDLJO7mnZmBn0
Nie+XQQzqZmktpucv3PwPMN8S+QT42BNPgtSMJK7R6VxLROPUTPrpVgHUUJwFOSe
YkZg3Z6s1zxfBJ/pBu9Hd3xT97GnSV2JCN/SntXa3UrJ2qkHdFbfU6YyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfuX/fVjQ9jMdkudW8FDAjEo4eDMB8GA1UdIwQY
MBaAFAKE/ZQc97KUuILnTbD8lxZ0NNq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZjMyMDUtNTJlOS00NmE0LWI2YzIt
YzcwMzUyMjQ4OGY5LzEvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZjMyMDUtNTJlOS00NmE0LWI2YzItYzcwMzUyMjQ4OGY5
LzEvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTlTN9nZ
qAvQwRK9+hrYha9Qx+7AhG8uNVvGHVWZCXjI9hJsGHc4VdRbFjxWMsdneaBNbUAd
fAxBrddgsA8IOuEeUMFQvmGXnlPuhsL9bAHzd8RC63WbLASprmmE/l8C6FjxDGVf
9iL4+vnDTbgwqu7MseUvT9XnltUo1FFhixI5rolFaiZKRHoqnU3kmhCgLw1QJM1a
B9Rz0LpMCa0SBF6WQTb7fBW/DlCoUkB36x/7AWsi2+TwCgd3USx+Mj004XyINtBG
bWzlApNUEL1qVXPfYV+rBGHARieO88bgRbs2QX9r9gXKohcyPzraBG0RN1KSjGPe
OU9di4RO+F1Nlg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:20:38 2026 by rpki-client