Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: IfTePGFJ/8WSQH90Ia54IAKweAG4X0bUWfZ3kAvFe5g=
Subject key identifier: 3D:D1:C3:BE:8D:17:F4:56:68:E9:10:21:55:DC:AB:93:55:66:40:7B
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 01A17E181AA5FFC2CDF73586B60E2DE8F6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1391
Signing time: Tue 27 Oct 2026 16:01:11 +0000
Manifest this update: Tue 27 Oct 2026 16:01:11 +0000
Manifest next update: Wed 28 Oct 2026 16:01:11 +0000
Files and hashes: 1: 2yM5Do3zWOnr0yQBZ1vtd1vIjV8.roa (hash: xC4pizZCJao9T4oTMaaLUU+A5wr8fDYQOCKbRN4Gjs4=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: B3zvsqL7taohb8B7O73repCmEsaK7yw8HsaGPWZF4Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:1a:a5:ff:c2:cd:f7:35:86:b6:0e:2d:e8:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Oct 27 16:01:11 2026 GMT
Not After : Oct 28 16:01:11 2026 GMT
Subject: CN=3dd1c3be8d17f45668e9102155dcab935566407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:8b:25:a7:b3:6c:83:18:19:68:38:27:76:
29:34:3e:9c:04:d6:ce:62:d8:71:6c:ef:96:cf:a5:
58:c9:3a:8a:e7:02:11:a0:92:ae:06:b7:7b:53:54:
5e:bb:17:23:46:84:4e:2c:17:dd:98:76:56:5a:f0:
09:92:1e:13:a8:1b:7f:d2:90:b4:64:9c:c7:42:8e:
38:95:92:ff:ad:2e:a8:d3:42:75:85:a5:31:18:71:
9e:05:dc:79:32:60:3f:3a:af:1a:e8:75:ab:e6:a2:
49:b5:17:04:c1:da:64:ef:0f:b2:25:65:76:11:81:
e1:47:67:46:72:9a:2f:8a:6f:a3:b8:e4:b1:2e:e1:
d5:82:38:e0:d5:a9:d7:4c:b5:70:d6:c8:63:8d:6d:
05:8a:cc:08:41:97:8c:bd:55:4e:3b:08:40:2c:02:
16:e3:19:ff:14:8a:e5:9b:21:ef:2c:60:4e:41:4a:
66:86:c6:0a:0d:d7:b0:8b:98:d9:5f:72:c9:52:6f:
da:79:b3:c8:64:4e:55:61:da:ce:60:1a:97:53:6b:
08:f8:30:a5:34:46:11:b1:38:0c:43:b8:9b:e3:a2:
12:ab:8f:b4:c5:96:7c:c7:06:4d:c2:cc:79:9f:32:
12:f8:74:03:2b:6f:5c:78:92:90:1b:7a:03:b9:e0:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:C3:BE:8D:17:F4:56:68:E9:10:21:55:DC:AB:93:55:66:40:7B
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:3f:0f:64:22:24:39:dc:76:be:6f:63:67:d8:a6:b1:cf:
c4:b3:7f:84:b9:44:b3:f2:42:33:ed:a3:00:ba:8b:27:2c:b6:
c8:b7:e1:78:f7:07:00:94:d0:5a:64:2d:9a:f8:28:cc:6f:73:
15:46:2b:eb:d2:c4:f5:61:30:ba:6b:53:30:1a:bf:ba:11:18:
69:00:0a:4c:61:a1:fa:fd:3c:b5:68:0d:ad:b2:97:62:99:4b:
0a:c9:84:90:ac:5b:61:88:53:ff:8a:d0:54:0c:1d:90:c3:01:
55:c5:3b:b1:30:96:50:06:dc:d1:30:4c:2c:ff:b0:9d:dd:40:
f6:da:22:34:05:48:77:46:e9:da:15:eb:fa:15:5e:74:d5:90:
2b:f8:80:83:6b:b1:45:53:78:fa:cc:1c:c3:ab:7d:6f:f5:19:
7d:a2:71:bf:43:81:f8:45:76:9f:f5:e9:3e:35:7e:13:c8:f5:
b3:a0:87:9a:ac:86:c7:03:be:4b:46:f8:a2:ba:2f:d5:1a:87:
e6:eb:ea:47:49:6d:64:f8:a6:f6:5d:99:f7:47:b7:74:8f:b5:
16:37:d3:d2:3f:cb:37:96:00:b0:a1:33:fb:c2:27:a5:cc:74:
b2:f6:07:52:fc:6b:e1:be:62:67:35:34:b2:75:57:0c:02:c5:
33:cd:03:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+GBql/8LN9zWGtg4t6PbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjYxMDI3MTYwMTExWhcNMjYxMDI4MTYwMTExWjAzMTEwLwYDVQQD
EygzZGQxYzNiZThkMTdmNDU2NjhlOTEwMjE1NWRjYWI5MzU1NjY0MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXeLJaezbIMYGWg4J3YpND6cBNbO
YthxbO+Wz6VYyTqK5wIRoJKuBrd7U1ReuxcjRoROLBfdmHZWWvAJkh4TqBt/0pC0
ZJzHQo44lZL/rS6o00J1haUxGHGeBdx5MmA/Oq8a6HWr5qJJtRcEwdpk7w+yJWV2
EYHhR2dGcpovim+juOSxLuHVgjjg1anXTLVw1shjjW0FiswIQZeMvVVOOwhALAIW
4xn/FIrlmyHvLGBOQUpmhsYKDdewi5jZX3LJUm/aebPIZE5VYdrOYBqXU2sI+DCl
NEYRsTgMQ7ib46ISq4+0xZZ8xwZNwsx5nzIS+HQDK29ceJKQG3oDueDnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Rw76NF/RWaOkQIVXcq5NVZkB7MB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEY/D2Qi
JDncdr5vY2fYprHPxLN/hLlEs/JCM+2jALqLJyy2yLfhePcHAJTQWmQtmvgozG9z
FUYr69LE9WEwumtTMBq/uhEYaQAKTGGh+v08tWgNrbKXYplLCsmEkKxbYYhT/4rQ
VAwdkMMBVcU7sTCWUAbc0TBMLP+wnd1A9toiNAVId0bp2hXr+hVedNWQK/iAg2ux
RVN4+swcw6t9b/UZfaJxv0OB+EV2n/XpPjV+E8j1s6CHmqyGxwO+S0b4orov1RqH
5uvqR0ltZPim9l2Z90e3dI+1FjfT0j/LN5YAsKEz+8Inpcx0svYHUvxr4b5iZzU0
snVXDALFM80D7Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:00 2026 by rpki-client