Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: 3nGUKtGGAq5wcvwOjMAX3iYh2SeV28bYwkksMm+jw30=
Subject key identifier: 2E:45:59:58:06:B9:AD:47:A0:C7:D8:DA:11:94:8D:2F:98:CE:C4:63
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 01A0016F40EB8ABA2B60E16F74A01CAFACD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 0696
Signing time: Fri 14 Aug 2026 18:01:03 +0000
Manifest this update: Fri 14 Aug 2026 18:01:03 +0000
Manifest next update: Sat 15 Aug 2026 18:01:03 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: TiH5qyFb7XajIUn5+lsprVFnxQgbTa25ytRXayXq/B8=)
2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:40:eb:8a:ba:2b:60:e1:6f:74:a0:1c:af:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Aug 14 18:01:03 2026 GMT
Not After : Aug 15 18:01:03 2026 GMT
Subject: CN=2e45595806b9ad47a0c7d8da11948d2f98cec463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:eb:c4:59:68:9d:e2:56:24:29:08:99:82:
c5:07:1e:3c:03:a8:53:c4:15:e3:e4:7d:1a:a7:87:
51:4d:be:df:b4:08:8f:92:7d:d0:8a:c6:3f:c3:d7:
71:d6:7e:12:2f:f0:f3:3b:65:c4:44:bd:38:cc:7e:
6e:1e:d2:00:77:22:a4:bd:3f:b0:4a:67:82:4e:fc:
e1:21:a8:d0:ae:5e:89:19:2b:5d:ff:4c:a1:fa:04:
2b:cc:a9:81:c3:f3:e6:6f:6c:84:b1:f4:81:ca:21:
c1:37:eb:df:e3:4d:28:79:3a:7a:28:ed:c7:48:42:
3c:92:79:3f:48:3f:82:33:ee:4b:d6:10:76:1a:4c:
99:80:72:66:ba:95:f6:3b:8e:31:72:58:d5:b5:5d:
a7:43:cb:1a:cf:0c:11:58:13:c6:9c:e8:d2:4d:9d:
14:f3:15:4b:41:35:8b:6c:3b:5a:3b:cb:a9:5e:b1:
dc:90:a2:ce:1f:de:97:67:6d:76:24:33:20:60:5b:
ba:83:16:51:17:71:8d:67:14:b8:66:58:d1:a0:3a:
c4:c7:ee:e7:47:96:d0:17:81:d9:89:43:6c:e4:98:
15:67:77:1e:82:66:20:6d:08:da:f2:35:03:5e:9e:
dd:ba:14:b9:4e:ff:4b:02:af:80:ae:f1:33:b2:2e:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:59:58:06:B9:AD:47:A0:C7:D8:DA:11:94:8D:2F:98:CE:C4:63
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:55:dd:87:0f:ba:27:86:00:e9:1e:30:84:ea:11:77:3b:eb:
44:49:8f:2a:35:fc:aa:ee:c3:7d:fa:0c:3a:7d:8e:d0:8a:b8:
c5:73:2e:53:c8:6a:89:05:b2:d8:b3:d1:e9:a6:06:18:75:40:
95:ce:90:61:5d:75:17:e6:49:4f:8c:17:8e:34:ca:97:76:a4:
de:aa:b4:6d:d5:b0:16:33:48:72:3e:f7:c1:ba:5e:e0:73:9e:
2d:80:51:95:84:0c:70:db:ea:50:82:b5:a2:b3:cf:7b:bc:05:
69:b2:7a:bd:fd:48:ba:f6:51:d7:c3:e4:6b:7b:a3:65:8b:b1:
04:ad:5a:60:3a:d2:21:d5:17:db:1f:98:22:a8:ad:3d:b6:db:
0e:00:47:a9:53:15:49:c6:18:64:d4:08:b3:6c:fb:71:a0:47:
9f:4b:a8:40:66:75:25:69:fa:d7:17:fa:69:26:42:4d:d9:d9:
8b:92:63:59:0f:9e:32:b9:2f:54:ef:38:9e:ab:b6:d4:43:cd:
ea:b4:a5:39:b5:28:b3:b9:0c:dd:1f:18:3e:63:7a:8a:a5:4d:
7c:3f:7a:8d:08:45:1b:cb:a7:84:f5:8d:82:32:e5:b5:b4:8a:
46:16:b3:89:98:b0:20:c0:55:ba:91:f5:29:7a:48:ee:15:bf:
40:f8:13:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb0DrirorYOFvdKAcr6zXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTg5MDk0ZTEyZTU0ZGQ5MDFlMzJkMzNjZTUxMzFlMDQ2
ZWU3MGMwHhcNMjYwODE0MTgwMTAzWhcNMjYwODE1MTgwMTAzWjAzMTEwLwYDVQQD
EygyZTQ1NTk1ODA2YjlhZDQ3YTBjN2Q4ZGExMTk0OGQyZjk4Y2VjNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMLrxFloneJWJCkImYLFBx48A6hT
xBXj5H0ap4dRTb7ftAiPkn3QisY/w9dx1n4SL/DzO2XERL04zH5uHtIAdyKkvT+w
SmeCTvzhIajQrl6JGStd/0yh+gQrzKmBw/Pmb2yEsfSByiHBN+vf400oeTp6KO3H
SEI8knk/SD+CM+5L1hB2GkyZgHJmupX2O44xcljVtV2nQ8sazwwRWBPGnOjSTZ0U
8xVLQTWLbDtaO8upXrHckKLOH96XZ212JDMgYFu6gxZRF3GNZxS4ZljRoDrEx+7n
R5bQF4HZiUNs5JgVZ3cegmYgbQja8jUDXp7duhS5Tv9LAq+ArvEzsi5z4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5FWVgGua1HoMfY2hGUjS+YzsRjMB8GA1UdIwQY
MBaAFNWokJThLlTdkB4y0zzlEx4EbucMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFpUWxPRXVWTjJRSGpMVFBPVVRIZ1J1NXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yMmQyMGUtMGJkNi00OWZiLWI5YzMt
ZTIwZDcwN2MwMGZiLzEvMWFpUWxPRXVWTjJRSGpMVFBPVVRIZ1J1NXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yMmQyMGUtMGJkNi00OWZiLWI5YzMtZTIwZDcwN2MwMGZi
LzEvMWFpUWxPRXVWTjJRSGpMVFBPVVRIZ1J1NXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVXdhw+6
J4YA6R4whOoRdzvrREmPKjX8qu7DffoMOn2O0Iq4xXMuU8hqiQWy2LPR6aYGGHVA
lc6QYV11F+ZJT4wXjjTKl3ak3qq0bdWwFjNIcj73wbpe4HOeLYBRlYQMcNvqUIK1
orPPe7wFabJ6vf1IuvZR18Pka3ujZYuxBK1aYDrSIdUX2x+YIqitPbbbDgBHqVMV
ScYYZNQIs2z7caBHn0uoQGZ1JWn61xf6aSZCTdnZi5JjWQ+eMrkvVO84nqu21EPN
6rSlObUos7kM3R8YPmN6iqVNfD96jQhFG8unhPWNgjLltbSKRhaziZiwIMBVupH1
KXpI7hW/QPgTTw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client