Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
File: aZjDB3nmXTenYUVBuarjuzK0LGY.mft (raw, json)
Hash identifier: 3EEc7qCy8nfhxnTSbgSEqjuAPnOWLJORQ1tZomWGnGI=
Subject key identifier: 94:6A:2B:9A:FB:34:2F:9A:D4:F7:6A:56:B8:AE:F8:17:CA:61:B7:9C
Authority key identifier: 69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
Certificate issuer: /CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Certificate serial: 01A10693356690D9E65BAB1F0D0FACF4355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
Manifest number: 99
Signing time: Sun 04 Oct 2026 11:01:12 +0000
Manifest this update: Sun 04 Oct 2026 11:01:12 +0000
Manifest next update: Mon 05 Oct 2026 11:01:12 +0000
Files and hashes: 1: aZjDB3nmXTenYUVBuarjuzK0LGY.crl (hash: qCKcmQgVWyHayWAWTQA3NfK333ugk8V/nuPG0Vx5rs8=)
2: fNLPZyr7tjwkFb0_nEhTcM4W4zA.asa (hash: H/Qtg2MVE67F1b0Jil386VOnCKa4In18ScPS/BN4YB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:35:66:90:d9:e6:5b:ab:1f:0d:0f:ac:f4:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998c30779e65d37a7614541b9aae3bb32b42c66
Validity
Not Before: Oct 4 11:01:12 2026 GMT
Not After : Oct 5 11:01:12 2026 GMT
Subject: CN=946a2b9afb342f9ad4f76a56b8aef817ca61b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:2f:6e:28:d6:a1:63:cd:a5:79:c5:32:41:
52:4d:4c:8c:20:d0:60:b8:08:11:e8:37:a5:e8:40:
fe:5e:d4:ea:22:3e:ea:e7:15:1b:03:f7:7f:48:0d:
db:73:4d:e9:c7:f9:70:5a:20:17:f7:7b:35:5a:67:
28:71:5c:21:77:97:17:67:4f:41:67:b4:3a:fe:76:
11:89:21:9e:7b:e8:28:a3:32:ec:6d:4e:6a:8e:65:
77:f6:77:40:2c:9c:d4:c1:a9:70:85:91:75:76:13:
2f:3d:bf:72:f3:e2:7c:81:5c:fa:51:5e:87:42:7a:
21:24:db:a7:02:8f:fb:98:84:c0:05:d7:24:a6:b5:
42:8f:bb:f0:c7:5a:57:34:9c:4d:48:25:68:a6:0e:
2f:76:74:38:c0:fe:b8:ff:c7:2d:f0:84:b3:59:b2:
cf:52:51:be:4a:5a:c9:fb:e0:dd:71:f0:2c:57:64:
d0:a7:d6:77:39:8f:f2:95:a5:3c:6c:72:0c:62:5a:
f5:df:35:16:7a:32:8d:18:99:ed:a6:04:49:ca:4f:
07:80:40:1c:1a:ea:40:cd:bd:94:61:d5:26:01:30:
97:77:3f:be:45:80:e9:6d:dc:50:3e:16:3b:b7:f0:
c2:54:80:36:a7:32:e8:8e:9e:78:10:83:d1:83:42:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:2B:9A:FB:34:2F:9A:D4:F7:6A:56:B8:AE:F8:17:CA:61:B7:9C
X509v3 Authority Key Identifier:
keyid:69:98:C3:07:79:E6:5D:37:A7:61:45:41:B9:AA:E3:BB:32:B4:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZjDB3nmXTenYUVBuarjuzK0LGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/350edf-099b-4549-b987-823db1b85bca/1/aZjDB3nmXTenYUVBuarjuzK0LGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:c6:31:8e:4e:45:91:bc:c4:52:36:96:80:34:8d:12:73:
f4:ed:c5:fb:fb:e8:5c:aa:a3:f2:bb:6a:b3:1a:11:fa:f7:73:
83:8b:63:d7:a9:71:11:89:25:f5:25:d8:f2:23:b8:c1:cf:8a:
4e:16:a6:50:8f:f2:50:42:63:26:e1:a2:74:9a:b8:80:f3:79:
03:e9:cd:77:33:3a:71:5b:b7:8f:8e:a2:a5:e6:6e:b8:e8:b3:
48:1c:7d:d7:6e:3a:e3:57:4c:70:f4:88:cb:ef:8f:2e:31:f0:
ea:e2:4c:1e:14:b6:50:fb:e4:12:49:ca:0d:77:2d:4c:ba:ad:
2f:59:7c:25:b1:ae:26:f1:08:0b:cd:30:dc:f8:a0:b4:71:9e:
16:d6:e7:bf:01:32:e7:d2:cc:02:5d:15:cc:67:52:25:c9:52:
34:74:e8:34:1a:da:a3:a5:dc:2d:8e:56:35:a3:ed:c9:74:d2:
96:7c:f7:a8:3f:90:85:39:a1:c0:16:3c:93:64:5f:e5:a9:99:
2b:c8:0e:00:02:42:6e:c5:d9:4b:e7:6f:57:ad:aa:3e:ae:03:
5b:49:5b:5c:b8:30:1d:8d:bf:ad:ed:0d:65:55:da:cf:32:e9:
55:21:23:ae:0d:1f:c9:7c:19:a8:f1:b1:67:b3:35:2e:18:d1:
b9:64:a9:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGkzVmkNnmW6sfDQ+s9DVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OThjMzA3NzllNjVkMzdhNzYxNDU0MWI5YWFlM2JiMzJi
NDJjNjYwHhcNMjYxMDA0MTEwMTEyWhcNMjYxMDA1MTEwMTEyWjAzMTEwLwYDVQQD
Eyg5NDZhMmI5YWZiMzQyZjlhZDRmNzZhNTZiOGFlZjgxN2NhNjFiNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmcvbijWoWPNpXnFMkFSTUyMINBg
uAgR6Del6ED+XtTqIj7q5xUbA/d/SA3bc03px/lwWiAX93s1WmcocVwhd5cXZ09B
Z7Q6/nYRiSGee+goozLsbU5qjmV39ndALJzUwalwhZF1dhMvPb9y8+J8gVz6UV6H
QnohJNunAo/7mITABdckprVCj7vwx1pXNJxNSCVopg4vdnQ4wP64/8ct8ISzWbLP
UlG+SlrJ++DdcfAsV2TQp9Z3OY/ylaU8bHIMYlr13zUWejKNGJntpgRJyk8HgEAc
GupAzb2UYdUmATCXdz++RYDpbdxQPhY7t/DCVIA2pzLojp54EIPRg0KLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRqK5r7NC+a1PdqVriu+BfKYbecMB8GA1UdIwQY
MBaAFGmYwwd55l03p2FFQbmq47sytCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTBlZGYtMDk5Yi00NTQ5LWI5ODct
ODIzZGIxYjg1YmNhLzEvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNTBlZGYtMDk5Yi00NTQ5LWI5ODctODIzZGIxYjg1YmNh
LzEvYVpqREIzbm1YVGVuWVVWQnVhcmp1ekswTEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn63GMY5O
RZG8xFI2loA0jRJz9O3F+/voXKqj8rtqsxoR+vdzg4tj16lxEYkl9SXY8iO4wc+K
ThamUI/yUEJjJuGidJq4gPN5A+nNdzM6cVu3j46ipeZuuOizSBx9124641dMcPSI
y++PLjHw6uJMHhS2UPvkEknKDXctTLqtL1l8JbGuJvEIC80w3PigtHGeFtbnvwEy
59LMAl0VzGdSJclSNHToNBrao6XcLY5WNaPtyXTSlnz3qD+QhTmhwBY8k2Rf5amZ
K8gOAAJCbsXZS+dvV62qPq4DW0lbXLgwHY2/re0NZVXazzLpVSEjrg0fyXwZqPGx
Z7M1LhjRuWSplw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:15:04 2026 by rpki-client