Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: eKyMo7O3NYH9nl333SY3fAW2X2wNp+qtAnXlkNLuPlY=
Subject key identifier: 9F:13:73:85:C1:A1:55:83:35:A0:47:D5:CA:61:2B:46:9A:1E:EE:69
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019D3940EF5BE5BC71800E9CCD876BA41C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0CFC
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (hash: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=)
2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: lhDiO8nW3eUrJZubgQF9952tMnln22MYycSREKVSfv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ef:5b:e5:bc:71:80:0e:9c:cd:87:6b:a4:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=9f137385c1a1558335a047d5ca612b469a1eee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:cf:aa:7c:47:bc:d7:de:bd:d7:aa:e7:2c:
80:94:52:27:0c:4a:9a:46:dc:46:bb:e9:39:67:46:
b9:a3:d5:ac:cb:a9:5b:45:df:77:de:f2:18:cc:d4:
82:c9:fc:1d:2e:99:d4:ef:84:7d:de:dd:7c:cf:9c:
6c:e6:e9:46:3b:15:c7:f5:c8:da:bc:0c:a0:40:8b:
c2:fa:64:a6:76:5c:58:70:8d:9f:38:04:74:dd:3b:
0a:b7:dc:79:fe:df:1b:7e:11:29:61:e4:4a:52:56:
52:6c:89:78:35:a5:ea:de:c5:c1:a5:8f:57:78:c2:
ff:41:20:34:5c:6b:0e:61:a5:ca:69:d7:c9:15:40:
19:5a:1c:c5:02:9a:1d:9a:8e:d6:ae:20:fb:cf:31:
02:07:ab:dc:64:23:ed:dc:56:09:47:68:62:1e:02:
4d:ce:91:f6:db:61:77:e4:bf:8d:89:a1:f2:2d:43:
36:52:49:70:a7:87:b2:a8:0d:ef:0f:32:1b:d3:ce:
77:c0:d9:71:3b:b5:41:07:5e:bf:24:9d:51:52:15:
00:da:84:8f:39:89:82:24:96:26:d5:bb:08:f3:a9:
9e:14:29:db:20:49:34:50:de:f8:f2:c4:ec:cc:8b:
ec:ce:6e:8a:59:1e:eb:ad:b0:f3:20:0f:c7:d9:b2:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:73:85:C1:A1:55:83:35:A0:47:D5:CA:61:2B:46:9A:1E:EE:69
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e6:cd:5b:20:3a:13:98:bb:0d:08:10:ac:0c:0a:30:ca:ce:
fa:cf:10:6d:9f:d8:ac:7a:66:3d:6b:c3:d9:4c:4f:12:1e:df:
40:ab:bc:bd:a5:65:10:42:a2:dd:6d:a2:3f:13:68:a7:42:2a:
51:0f:80:03:3e:ff:b7:35:ec:76:1b:16:1b:8e:2e:1b:d5:e9:
04:bc:92:39:90:61:49:04:e5:61:07:19:11:9b:06:d2:fa:2a:
de:d8:1f:b8:22:eb:29:23:ef:f0:2f:bc:22:f2:be:4d:52:42:
db:48:c0:41:2f:72:ae:2e:07:ea:6f:e3:c6:8c:3e:09:0b:71:
22:f0:3e:f9:b7:99:48:82:56:7e:a3:fb:4e:57:77:28:ff:75:
c3:ed:71:5e:cf:a5:24:65:f6:9b:2b:b8:05:a1:24:13:2c:96:
34:9e:d8:2f:51:ba:3c:3b:8a:74:f6:36:07:46:a2:03:c0:dd:
8a:1a:76:e2:07:1e:1e:6e:f1:2f:e1:52:bd:01:0d:42:6e:d8:
3f:a5:e1:67:4c:4d:e4:ea:24:79:1e:e0:76:34:64:bc:92:70:
94:ab:50:ec:9f:8a:bb:1e:62:cd:f4:63:59:d5:cc:ae:96:70:
13:73:5a:bc:e8:81:0f:81:56:85:b4:c7:cb:5c:49:bd:06:02:
b1:2b:d8:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QO9b5bxxgA6czYdrpByaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4
MTkzZmYwHhcNMjYwMzI5MTEwMDQ5WhcNMjYwMzMwMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZjEzNzM4NWMxYTE1NTgzMzVhMDQ3ZDVjYTYxMmI0NjlhMWVlZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqHPqnxHvNfevdeq5yyAlFInDEqa
RtxGu+k5Z0a5o9Wsy6lbRd933vIYzNSCyfwdLpnU74R93t18z5xs5ulGOxXH9cja
vAygQIvC+mSmdlxYcI2fOAR03TsKt9x5/t8bfhEpYeRKUlZSbIl4NaXq3sXBpY9X
eML/QSA0XGsOYaXKadfJFUAZWhzFApodmo7WriD7zzECB6vcZCPt3FYJR2hiHgJN
zpH222F35L+NiaHyLUM2Uklwp4eyqA3vDzIb0853wNlxO7VBB16/JJ1RUhUA2oSP
OYmCJJYm1bsI86meFCnbIEk0UN748sTszIvszm6KWR7rrbDzIA/H2bLc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8Tc4XBoVWDNaBH1cphK0aaHu5pMB8GA1UdIwQY
MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt
NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2
LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACebNWyA6
E5i7DQgQrAwKMMrO+s8QbZ/YrHpmPWvD2UxPEh7fQKu8vaVlEEKi3W2iPxNop0Iq
UQ+AAz7/tzXsdhsWG44uG9XpBLySOZBhSQTlYQcZEZsG0voq3tgfuCLrKSPv8C+8
IvK+TVJC20jAQS9yri4H6m/jxow+CQtxIvA++beZSIJWfqP7Tld3KP91w+1xXs+l
JGX2myu4BaEkEyyWNJ7YL1G6PDuKdPY2B0aiA8Ddihp24gceHm7xL+FSvQENQm7Y
P6XhZ0xN5OokeR7gdjRkvJJwlKtQ7J+Kux5izfRjWdXMrpZwE3NavOiBD4FWhbTH
y1xJvQYCsSvYaw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:33 2026 by rpki-client