Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: uySixJzGe7QHX8tt9t5axC+dI6ISMxZhNRFweACJWTI=
Subject key identifier: 24:09:03:D4:C2:06:D2:B1:62:52:73:14:E7:E3:2F:65:B9:C1:8D:36
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 019F0E1BBB01ED49D63DE4D8D5CDC84F91CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 0AEC
Signing time: Sun 28 Jun 2026 12:02:05 +0000
Manifest this update: Sun 28 Jun 2026 12:02:05 +0000
Manifest next update: Mon 29 Jun 2026 12:02:05 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: GIL6fjHtie5N2x0uTSMA/KkDmDkEZ7TaCWqGZGmpCho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:1b:bb:01:ed:49:d6:3d:e4:d8:d5:cd:c8:4f:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Jun 28 12:02:05 2026 GMT
Not After : Jun 29 12:02:05 2026 GMT
Subject: CN=240903d4c206d2b162527314e7e32f65b9c18d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:93:1f:c4:ff:52:b7:af:ce:2c:e1:5e:30:
94:72:d3:2c:07:f8:62:92:80:c5:2b:33:67:6f:5c:
d3:b3:c5:29:2a:e7:0c:49:b4:64:9f:2c:c5:3e:1f:
38:d9:f8:c7:0e:b5:8b:8a:d9:9e:17:2a:71:9c:36:
77:f5:26:85:8b:67:ee:2a:de:42:62:59:b8:1e:9b:
26:05:37:4c:d9:aa:73:d3:d6:a2:ca:b3:15:61:c8:
6b:22:cd:46:d4:bf:cf:7a:99:8c:e4:b8:f7:08:b8:
db:e3:85:78:a8:72:4f:4a:c3:2d:c3:c3:4b:9b:0f:
40:0e:35:39:18:1e:0e:2c:4c:c4:31:5e:9f:ef:cb:
1b:20:ab:a6:cc:7f:d0:5a:95:7f:aa:fb:a4:56:ad:
3b:d1:df:2e:3c:1f:59:72:60:48:63:e1:16:f7:30:
de:5c:bb:e9:b8:83:f3:20:62:69:79:b5:28:a7:93:
04:eb:4f:02:25:5f:61:14:12:cc:29:20:5f:3e:dd:
bb:df:5a:7c:34:69:26:95:2c:3b:76:e4:5d:4d:39:
8b:27:42:06:8f:e1:f6:75:33:af:22:d6:32:8c:8a:
e9:02:98:dd:cd:09:6f:18:df:a0:ac:10:b4:72:dc:
e1:fa:d1:54:c8:57:3c:5a:23:13:60:d3:cf:9a:83:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:03:D4:C2:06:D2:B1:62:52:73:14:E7:E3:2F:65:B9:C1:8D:36
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:7a:81:40:56:3a:0d:6f:7d:32:c5:80:73:dd:5a:12:d6:
87:a1:5b:79:2c:a8:3f:6b:f4:ae:d0:a6:e1:fc:ef:89:0e:07:
52:21:b8:b3:68:fd:b6:74:be:6b:05:0d:25:28:be:72:ec:23:
6d:2a:46:14:aa:30:2f:51:ce:59:53:2b:9b:97:76:0f:a3:40:
44:13:41:88:f6:6d:ac:e2:e2:82:16:66:1e:a5:6e:bb:b8:98:
16:34:26:ef:31:eb:a6:84:51:d7:9b:aa:00:90:06:6d:72:21:
73:69:0c:44:35:29:3f:36:c7:73:50:5e:dc:8d:86:75:cf:61:
dd:93:2f:c8:18:da:5c:10:b4:10:f6:e9:27:e9:9c:d0:5e:09:
01:6b:b2:6c:13:2b:28:5c:52:1f:b2:a7:fd:15:20:93:10:34:
5a:6e:ab:f1:2a:22:31:fa:98:e0:83:14:46:02:27:1c:6f:3f:
8b:68:01:d2:ff:c3:b9:19:8f:95:2f:de:ca:7e:2d:c7:15:8a:
46:cd:3d:23:3c:de:39:9a:d1:48:89:95:13:df:44:72:65:2f:
e0:5b:73:ba:f5:99:05:88:32:c9:d1:c0:23:5f:f4:71:8e:fa:
2c:56:03:4f:4c:77:d7:79:2e:59:a9:e9:e2:99:a9:11:c5:8d:
34:ec:d6:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8OG7sB7UnWPeTY1c3IT5HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWIyOGU4MGRmMWFkNmFhMDQwMzE1Yjg0ZTMyNmFhMjNh
MDQxN2MwHhcNMjYwNjI4MTIwMjA1WhcNMjYwNjI5MTIwMjA1WjAzMTEwLwYDVQQD
EygyNDA5MDNkNGMyMDZkMmIxNjI1MjczMTRlN2UzMmY2NWI5YzE4ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+6TH8T/UrevzizhXjCUctMsB/hi
koDFKzNnb1zTs8UpKucMSbRknyzFPh842fjHDrWLitmeFypxnDZ39SaFi2fuKt5C
Ylm4HpsmBTdM2apz09aiyrMVYchrIs1G1L/PepmM5Lj3CLjb44V4qHJPSsMtw8NL
mw9ADjU5GB4OLEzEMV6f78sbIKumzH/QWpV/qvukVq070d8uPB9ZcmBIY+EW9zDe
XLvpuIPzIGJpebUop5ME608CJV9hFBLMKSBfPt2731p8NGkmlSw7duRdTTmLJ0IG
j+H2dTOvItYyjIrpApjdzQlvGN+grBC0ctzh+tFUyFc8WiMTYNPPmoNdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQJA9TCBtKxYlJzFOfjL2W5wY02MB8GA1UdIwQY
MBaAFGqrKOgN8a1qoEAxW4TjJqojoEF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgt
NDkwYzJlZGExNjJmLzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgtNDkwYzJlZGExNjJm
LzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9l6gUBW
Og1vfTLFgHPdWhLWh6FbeSyoP2v0rtCm4fzviQ4HUiG4s2j9tnS+awUNJSi+cuwj
bSpGFKowL1HOWVMrm5d2D6NARBNBiPZtrOLighZmHqVuu7iYFjQm7zHrpoRR15uq
AJAGbXIhc2kMRDUpPzbHc1Be3I2Gdc9h3ZMvyBjaXBC0EPbpJ+mc0F4JAWuybBMr
KFxSH7Kn/RUgkxA0Wm6r8SoiMfqY4IMURgInHG8/i2gB0v/DuRmPlS/eyn4txxWK
Rs09IzzeOZrRSImVE99EcmUv4FtzuvWZBYgyydHAI1/0cY76LFYDT0x313kuWanp
4pmpEcWNNOzW+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:57:35 2026 by rpki-client