Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
File: aZjDB3nmXTenYUVBuarjuzK0LGY.mft (raw, json)
Hash identifier: cJ6PhXKx7XSnwZ3P9WEFf8l1gwys6+67iejYMGlvgVc=
Subject key identifier: B0:90:93:F2:B5:76:86:6C:94:45:18:14:0F:8D:05:51:AA:3F:FB:3B
Authority key identifier: 69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
Certificate issuer: /CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Certificate serial: 019FF835F2D7B1B9F414A9FA895B7CC0E507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
Manifest number: 0D
Signing time: Wed 12 Aug 2026 23:01:52 +0000
Manifest this update: Wed 12 Aug 2026 23:01:52 +0000
Manifest next update: Thu 13 Aug 2026 23:01:52 +0000
Files and hashes: 1: aZjDB3nmXTenYUVBuarjuzK0LGY.crl (hash: Kx8mLC3ZnZ+2xodrAdjZhhk+/TIo5sGsUGntxY7wmVc=)
2: fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa (hash: H/Qtg2MVE67F1b0Jil386VOnCKa4In18ScPS/BN4YB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:f2:d7:b1:b9:f4:14:a9:fa:89:5b:7c:c0:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Validity
Not Before: Aug 12 23:01:52 2026 GMT
Not After : Aug 13 23:01:52 2026 GMT
Subject: CN=b09093f2b576866c944518140f8d0551aa3ffb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:45:0a:3a:63:b0:27:b2:fe:da:19:da:f8:
42:3b:40:4d:92:c6:20:6c:6f:a1:1e:bc:cd:da:1c:
97:09:8b:67:e0:fb:e7:d1:c9:ba:b5:d7:40:44:10:
f8:75:83:94:33:90:90:ff:3c:99:90:b6:dd:5a:ac:
45:fd:ba:3c:22:ad:f8:28:15:e4:6f:12:ef:2f:02:
01:ef:a1:89:64:9e:3f:68:d8:43:c8:29:4e:41:a3:
d1:1d:f0:46:9c:40:a8:82:ce:e8:2a:c1:76:5e:1d:
a2:b1:74:85:fa:ee:bf:2b:14:3c:31:db:1a:5f:da:
f3:0a:2e:53:a0:bb:ff:4a:03:71:1b:92:fd:15:9a:
65:65:f5:c2:45:ab:e8:26:09:ed:84:1b:93:8a:a9:
51:b6:52:8a:f2:11:7b:54:b2:c3:99:e5:cc:e1:d7:
18:d5:32:49:b1:01:07:70:17:22:e0:1d:87:8f:da:
b1:09:3f:79:87:c2:7d:8c:72:ec:62:b8:4d:1a:f8:
37:6c:ef:03:56:3f:dc:13:a4:5b:d5:b6:eb:af:fc:
08:27:5c:2c:be:3d:04:c0:b8:af:44:4c:25:bb:3a:
16:9e:61:49:f6:a2:0b:71:33:23:d4:93:56:0c:8c:
16:36:51:e9:31:22:d3:92:96:9a:b6:1c:99:71:bd:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:93:F2:B5:76:86:6C:94:45:18:14:0F:8D:05:51:AA:3F:FB:3B
X509v3 Authority Key Identifier:
keyid:69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:ac:e0:8d:f2:75:a3:2f:57:b8:8b:19:df:cc:9e:f1:b3:
20:b5:a5:0a:b2:bc:29:e3:9b:92:d9:0d:1e:7a:d3:0a:77:62:
12:03:b4:df:e0:f3:40:e0:fa:90:25:f2:ba:1b:a4:b3:9d:84:
fc:c0:62:a2:6b:22:1e:c9:18:0e:f4:db:75:ae:4d:87:b7:c0:
b0:c7:7e:3f:7a:e7:64:b6:1c:cc:17:c9:d8:ae:27:fd:d2:b3:
81:29:59:25:87:1e:74:eb:85:5c:f1:cd:83:1d:24:a8:12:9c:
1c:69:3a:5d:9e:a3:70:a8:92:f1:3e:97:b8:6c:4e:a9:9c:b4:
a7:a7:db:0d:d2:3b:fc:4c:78:12:62:68:61:bc:23:b0:77:16:
90:16:02:ac:b9:66:ac:62:d6:52:78:58:00:1b:f7:c8:80:8d:
92:e4:65:b3:ec:ce:f0:fb:ad:ec:c3:83:a4:ea:15:11:af:32:
9a:03:2e:a7:dd:78:c6:c5:ff:1b:7c:7c:4d:3d:8c:57:7d:6a:
f1:79:34:a9:83:26:51:b9:6f:7d:ff:4e:2e:13:36:5f:04:14:
a6:25:40:f6:13:05:41:07:2f:0e:23:dd:b7:93:8c:9e:9a:aa:
97:3b:f6:b0:3e:33:8d:81:a3:d5:e4:47:4a:2d:2b:19:f1:aa:
74:6e:3e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4NfLXsbn0FKn6iVt8wOUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OThjMzA3NzllNjVkMzdhNzYxNDU0MWI5YWFlM2JiMzJi
NDJjNjYwHhcNMjYwODEyMjMwMTUyWhcNMjYwODEzMjMwMTUyWjAzMTEwLwYDVQQD
EyhiMDkwOTNmMmI1NzY4NjZjOTQ0NTE4MTQwZjhkMDU1MWFhM2ZmYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLNFCjpjsCey/toZ2vhCO0BNksYg
bG+hHrzN2hyXCYtn4Pvn0cm6tddARBD4dYOUM5CQ/zyZkLbdWqxF/bo8Iq34KBXk
bxLvLwIB76GJZJ4/aNhDyClOQaPRHfBGnECogs7oKsF2Xh2isXSF+u6/KxQ8Mdsa
X9rzCi5ToLv/SgNxG5L9FZplZfXCRavoJgnthBuTiqlRtlKK8hF7VLLDmeXM4dcY
1TJJsQEHcBci4B2Hj9qxCT95h8J9jHLsYrhNGvg3bO8DVj/cE6Rb1bbrr/wIJ1ws
vj0EwLivREwluzoWnmFJ9qILcTMj1JNWDIwWNlHpMSLTkpaathyZcb1lsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCQk/K1doZslEUYFA+NBVGqP/s7MB8GA1UdIwQY
MBaAFGmYwwd55l03p2FFQbmq47sytCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTBlZGYtMDk5Yi00NTQ5LWI5ODct
ODIzZGIxYjg1YmNhLzEvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNTBlZGYtMDk5Yi00NTQ5LWI5ODctODIzZGIxYjg1YmNh
LzEvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRWs4I3y
daMvV7iLGd/MnvGzILWlCrK8KeObktkNHnrTCndiEgO03+DzQOD6kCXyuhuks52E
/MBiomsiHskYDvTbda5Nh7fAsMd+P3rnZLYczBfJ2K4n/dKzgSlZJYcedOuFXPHN
gx0kqBKcHGk6XZ6jcKiS8T6XuGxOqZy0p6fbDdI7/Ex4EmJoYbwjsHcWkBYCrLlm
rGLWUnhYABv3yICNkuRls+zO8Put7MODpOoVEa8ymgMup914xsX/G3x8TT2MV31q
8Xk0qYMmUblvff9OLhM2XwQUpiVA9hMFQQcvDiPdt5OMnpqqlzv2sD4zjYGj1eRH
Si0rGfGqdG4+Ng==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:13 2026 by rpki-client