Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: VE0NpRjpFX0VsQmof/0PoFQP7rWXnFc2A2thUeL7Uao=
Subject key identifier: 60:BC:9D:B9:E2:C3:02:67:FC:42:DE:DA:02:27:CF:57:52:62:4C:24
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 01A08C0CFEEA4C542DB79AA32D5A9BD2C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 03E9
Signing time: Thu 10 Sep 2026 16:00:56 +0000
Manifest this update: Thu 10 Sep 2026 16:00:56 +0000
Manifest next update: Fri 11 Sep 2026 16:00:56 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: EGgaakuvXUuqhjnqh4EiOirt1ZFs5Q5OvsExGWvQbV4=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:fe:ea:4c:54:2d:b7:9a:a3:2d:5a:9b:d2:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Sep 10 16:00:56 2026 GMT
Not After : Sep 11 16:00:56 2026 GMT
Subject: CN=60bc9db9e2c30267fc42deda0227cf5752624c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:5b:6e:6c:39:d6:86:9e:c3:bd:ed:d6:19:
89:7c:9c:dd:f3:2e:46:7c:3a:25:44:1e:f9:7c:d7:
50:1e:d0:e5:68:62:ff:08:d6:de:fc:52:a4:a4:39:
f3:00:59:e0:3d:d5:54:32:e5:55:c7:cc:98:9d:d5:
71:cf:f2:0a:34:58:de:6b:50:6f:6d:43:c6:7d:88:
75:09:4e:25:df:99:69:cd:04:6f:66:f9:9e:c8:7e:
ab:e6:31:ee:78:1a:fd:68:dd:83:b0:ce:ed:44:ed:
61:16:86:19:7c:0e:46:5d:ab:4f:d9:9c:5e:ce:d5:
eb:da:2d:f1:08:36:d4:25:ad:14:a4:33:82:78:63:
a6:7c:7a:2b:91:4e:cc:4e:e2:61:7c:db:02:2d:79:
d3:d5:11:f0:ae:60:e7:68:50:aa:be:44:1a:c5:f4:
52:cb:34:cd:90:d2:08:3a:8b:03:7d:42:06:bb:16:
82:d6:68:54:0e:32:94:11:54:73:5d:e7:2a:9b:f5:
66:6d:3d:9c:ce:a2:f2:11:0e:62:f3:de:ee:4c:71:
c4:79:8d:29:6a:a4:46:a1:01:22:1a:5d:99:a0:35:
dc:9c:2d:c6:91:cc:db:d2:03:d7:2c:f7:b4:a2:5f:
62:7e:f5:ea:73:28:88:7c:1d:b7:15:87:24:5f:ae:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BC:9D:B9:E2:C3:02:67:FC:42:DE:DA:02:27:CF:57:52:62:4C:24
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f1:3f:6d:76:53:3a:bb:64:ea:a1:af:c6:6a:76:f6:61:41:
de:8f:0d:f7:9e:72:ba:81:b1:7a:5f:fb:08:7f:cc:d7:fe:6a:
81:39:3c:b5:b1:ba:3d:18:62:44:e3:69:69:58:56:05:f2:5a:
78:1b:2d:35:55:80:93:f7:ab:e3:58:89:b2:7c:35:ca:ef:68:
9b:40:fc:8e:b1:81:d0:18:7d:1a:29:7d:47:94:2d:29:95:54:
ad:3c:39:86:87:6f:0b:94:ee:2d:c2:74:25:90:57:94:b2:cc:
bb:e9:ad:8a:2f:6b:c9:39:90:07:bd:f7:ea:71:db:6a:9f:aa:
ca:04:8d:5a:62:61:75:92:cc:95:eb:f2:8b:2d:a7:2c:00:4f:
d0:aa:d6:dd:27:c6:45:29:50:46:9f:79:bf:59:e8:8a:0c:df:
b8:b0:ee:45:97:7a:08:6e:59:53:b5:13:32:6f:01:42:89:20:
84:c1:68:88:da:76:ce:40:c1:b5:3a:0b:df:d5:ca:2e:32:f0:
56:6c:64:36:4d:c7:5c:14:2b:82:80:7e:30:cc:57:8d:b6:96:
44:50:42:23:78:00:20:e5:f9:49:ce:60:b3:0e:74:0f:09:57:
cd:b1:3d:ec:a6:9a:30:6f:f2:2c:37:ed:f5:71:b2:f8:ca:a3:
ca:29:ae:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDP7qTFQtt5qjLVqb0sIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj
YzljMTUwHhcNMjYwOTEwMTYwMDU2WhcNMjYwOTExMTYwMDU2WjAzMTEwLwYDVQQD
Eyg2MGJjOWRiOWUyYzMwMjY3ZmM0MmRlZGEwMjI3Y2Y1NzUyNjI0YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F9bbmw51oaew73t1hmJfJzd8y5G
fDolRB75fNdQHtDlaGL/CNbe/FKkpDnzAFngPdVUMuVVx8yYndVxz/IKNFjea1Bv
bUPGfYh1CU4l35lpzQRvZvmeyH6r5jHueBr9aN2DsM7tRO1hFoYZfA5GXatP2Zxe
ztXr2i3xCDbUJa0UpDOCeGOmfHorkU7MTuJhfNsCLXnT1RHwrmDnaFCqvkQaxfRS
yzTNkNIIOosDfUIGuxaC1mhUDjKUEVRzXecqm/VmbT2czqLyEQ5i897uTHHEeY0p
aqRGoQEiGl2ZoDXcnC3Gkczb0gPXLPe0ol9ifvXqcyiIfB23FYckX679kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC8nbniwwJn/ELe2gInz1dSYkwkMB8GA1UdIwQY
MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt
MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx
LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/E/bXZT
Ortk6qGvxmp29mFB3o8N955yuoGxel/7CH/M1/5qgTk8tbG6PRhiRONpaVhWBfJa
eBstNVWAk/er41iJsnw1yu9om0D8jrGB0Bh9Gil9R5QtKZVUrTw5hodvC5TuLcJ0
JZBXlLLMu+mtii9ryTmQB7336nHbap+qygSNWmJhdZLMlevyiy2nLABP0KrW3SfG
RSlQRp95v1noigzfuLDuRZd6CG5ZU7UTMm8BQokghMFoiNp2zkDBtToL39XKLjLw
VmxkNk3HXBQrgoB+MMxXjbaWRFBCI3gAIOX5Sc5gsw50DwlXzbE97KaaMG/yLDft
9XGy+Mqjyimutw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:18 2026 by rpki-client