Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: d+NXsejY9Lu5+dFzE63FnWJspt79CDW8M/8Hy9Gr00c=
Subject key identifier: BF:1C:01:15:6E:27:55:C5:1D:BE:D7:23:9C:27:40:1B:A0:CF:8B:92
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019FA260DD9560AF130D1C534C47D595E0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1299
Signing time: Mon 27 Jul 2026 07:01:24 +0000
Manifest this update: Mon 27 Jul 2026 07:01:24 +0000
Manifest next update: Tue 28 Jul 2026 07:01:24 +0000
Files and hashes: 1: A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa (hash: 6nA7grwYfCC8F9QlWfwY7V2uHRishBzwFCKkdr7sz1A=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: 4nt4LtqLBnQzEq59cqSGFKbByRatVDSCLagEHiU2Z0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:dd:95:60:af:13:0d:1c:53:4c:47:d5:95:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jul 27 07:01:24 2026 GMT
Not After : Jul 28 07:01:24 2026 GMT
Subject: CN=bf1c01156e2755c51dbed7239c27401ba0cf8b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:84:52:24:23:cb:73:8c:a9:a5:8b:d1:be:
24:c6:95:98:fe:c9:7d:5f:a1:80:a9:28:f7:b2:24:
4d:c2:53:e6:02:75:11:e3:7e:e4:4d:59:c3:77:88:
94:48:56:ce:67:f1:21:f3:16:ca:0f:0d:0b:54:b3:
d1:8d:bc:c4:a2:e0:ec:14:bb:b5:c7:9a:7b:da:1e:
a9:fe:e1:6a:f6:23:95:8e:76:b3:87:81:a4:44:c4:
5e:05:a4:e1:e8:dd:dc:f5:2b:84:25:ce:8a:a1:ab:
b5:11:73:a1:d2:ec:2f:88:d6:fb:90:a3:3d:d6:30:
1a:93:04:66:eb:cb:4e:30:0e:c8:12:1c:a3:f0:ec:
6c:7b:e4:18:2c:32:5f:cc:e7:00:a7:0b:92:77:72:
c3:07:16:95:77:71:40:03:e9:f3:a3:54:a1:6b:7c:
ed:f8:aa:1c:9b:4d:d7:e3:3f:38:1c:ee:6f:9b:08:
36:8a:09:d7:0b:17:98:12:c1:28:29:e3:4b:43:2f:
e8:df:93:46:8d:10:be:04:f9:6a:47:bd:6c:75:62:
47:ec:1d:e1:f7:e4:97:3d:fa:b1:28:fd:00:c7:75:
26:5a:09:95:bd:25:e6:d2:aa:7b:a7:dd:0f:dc:c9:
2a:4c:99:d3:9e:c2:b0:30:c7:b5:7e:d6:e1:3e:01:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:01:15:6E:27:55:C5:1D:BE:D7:23:9C:27:40:1B:A0:CF:8B:92
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:24:e1:cf:e8:8b:b1:9b:e4:c2:6a:88:6b:86:a2:2a:b3:8b:
18:44:11:62:ea:33:e2:07:82:6f:75:ee:2d:56:56:ed:1b:c6:
37:67:3a:4f:22:7c:86:7e:3c:75:cb:f2:e5:e1:3a:1d:2b:13:
ed:58:24:a6:b4:70:63:75:6f:0c:bd:43:55:85:16:71:86:7b:
96:08:7f:70:85:44:33:1c:0c:49:ac:24:0e:46:6f:c2:95:ef:
39:f2:41:21:2e:14:ab:61:c5:6e:71:1f:2b:4a:d3:2e:bd:e9:
43:0e:bd:7a:b7:dd:91:11:fb:d2:f6:81:e8:9f:7a:1c:6d:d1:
bb:05:18:56:e5:db:ad:7f:3a:3b:2c:c4:9a:4a:69:18:89:41:
36:89:7a:8d:30:7b:32:f4:7f:0c:87:47:93:55:63:e5:34:50:
c0:b4:d7:89:98:ca:98:a3:9a:25:ef:b5:55:46:5c:c1:7a:0f:
1c:72:d6:8e:db:be:99:a3:e6:cf:fb:88:d2:19:5e:54:dd:03:
0f:c2:12:b3:90:b6:a8:34:a3:37:d6:53:65:f6:95:8a:3f:66:
93:3c:5c:9e:04:d0:c1:a0:87:45:b4:ed:f7:5d:f1:0b:65:82:
76:0a:0b:ff:06:ec:c3:19:8b:e3:38:ed:28:b4:a4:c8:a9:91:
ae:bd:58:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYN2VYK8TDRxTTEfVleC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjYwNzI3MDcwMTI0WhcNMjYwNzI4MDcwMTI0WjAzMTEwLwYDVQQD
EyhiZjFjMDExNTZlMjc1NWM1MWRiZWQ3MjM5YzI3NDAxYmEwY2Y4YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurCEUiQjy3OMqaWL0b4kxpWY/sl9
X6GAqSj3siRNwlPmAnUR437kTVnDd4iUSFbOZ/Eh8xbKDw0LVLPRjbzEouDsFLu1
x5p72h6p/uFq9iOVjnazh4GkRMReBaTh6N3c9SuEJc6Koau1EXOh0uwviNb7kKM9
1jAakwRm68tOMA7IEhyj8Oxse+QYLDJfzOcApwuSd3LDBxaVd3FAA+nzo1Sha3zt
+Kocm03X4z84HO5vmwg2ignXCxeYEsEoKeNLQy/o35NGjRC+BPlqR71sdWJH7B3h
9+SXPfqxKP0Ax3UmWgmVvSXm0qp7p90P3MkqTJnTnsKwMMe1ftbhPgFuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8cARVuJ1XFHb7XI5wnQBugz4uSMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSThz+iL
sZvkwmqIa4aiKrOLGEQRYuoz4geCb3XuLVZW7RvGN2c6TyJ8hn48dcvy5eE6HSsT
7VgkprRwY3VvDL1DVYUWcYZ7lgh/cIVEMxwMSawkDkZvwpXvOfJBIS4Uq2HFbnEf
K0rTLr3pQw69erfdkRH70vaB6J96HG3RuwUYVuXbrX86OyzEmkppGIlBNol6jTB7
MvR/DIdHk1Vj5TRQwLTXiZjKmKOaJe+1VUZcwXoPHHLWjtu+maPmz/uI0hleVN0D
D8ISs5C2qDSjN9ZTZfaVij9mkzxcngTQwaCHRbTt913xC2WCdgoL/wbswxmL4zjt
KLSkyKmRrr1Y1w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:25 2026 by rpki-client