Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: fSRJj/jJtipvosqpJZpgHPuRGR9fjmwgyuN5q8F8lMM=
Subject key identifier: 5C:6D:6B:CA:EC:04:7E:80:0C:25:CF:A0:ED:5B:B2:95:35:78:89:64
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019F1265BDC5DD557F9542C15FDF17636B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1917
Signing time: Mon 29 Jun 2026 08:01:25 +0000
Manifest this update: Mon 29 Jun 2026 08:01:25 +0000
Manifest next update: Tue 30 Jun 2026 08:01:25 +0000
Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=)
2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: jJQUvkDIdsPfGLsau2jgWD6s92zB+4Nx4tzZdgMl0yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:bd:c5:dd:55:7f:95:42:c1:5f:df:17:63:6b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jun 29 08:01:25 2026 GMT
Not After : Jun 30 08:01:25 2026 GMT
Subject: CN=5c6d6bcaec047e800c25cfa0ed5bb29535788964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:98:ac:a3:72:ab:67:e6:c7:a5:d0:ec:40:
9a:53:f2:32:24:9c:e6:87:a6:60:c4:de:6a:ab:b2:
0c:8f:55:c8:b3:fe:8f:70:74:29:de:d4:fc:43:3e:
7e:ff:93:b7:d2:a4:4f:5a:3a:cd:ce:2d:0f:7d:10:
4a:e0:17:8c:0d:93:71:bd:a7:e7:38:50:53:d7:26:
55:85:27:24:8b:0c:e5:72:e5:bf:77:86:c2:9d:0d:
c4:7b:20:db:66:71:a2:f5:31:00:f6:a6:80:80:d5:
21:35:92:b6:88:da:cd:3a:d9:c5:fb:fb:f5:17:15:
3c:af:b6:d5:0b:48:4d:41:3e:da:9d:b6:43:76:c1:
73:b0:ec:30:a9:3b:47:fb:e6:75:42:1c:8e:dd:95:
26:4f:0f:a2:8c:4c:f4:05:b9:96:65:13:ab:9a:e4:
88:23:aa:1d:c5:77:34:cf:a9:f6:2c:96:ba:88:b1:
23:05:42:87:8b:16:84:ba:5a:66:14:93:b2:c1:ff:
95:08:df:e0:46:a8:2c:59:98:cd:bf:01:b8:7c:ee:
01:05:eb:fd:45:6c:95:14:df:fb:16:ff:4e:93:28:
03:71:5a:0e:68:28:e7:d4:b3:43:07:ed:27:ad:e2:
09:b1:16:51:80:68:0d:d6:10:1f:c0:87:b7:10:75:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:6B:CA:EC:04:7E:80:0C:25:CF:A0:ED:5B:B2:95:35:78:89:64
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:0d:9e:bb:d4:cf:e7:d8:d3:8a:db:54:10:a1:18:46:13:
33:43:2b:37:12:0e:03:2c:0a:ca:ca:d6:74:c4:ec:6e:58:31:
60:5c:f5:2a:8d:3f:cb:d8:2f:a3:77:63:6e:6b:f2:3a:a0:47:
4c:85:d5:fa:a3:72:9b:51:9b:cb:5e:58:cb:93:79:35:a2:c9:
21:07:84:97:eb:02:61:a6:2a:a1:fa:31:a4:77:f3:fa:ce:74:
cc:fb:62:6c:a1:a1:b1:45:1d:e0:e4:28:61:0c:8f:9b:04:3d:
ca:cf:ab:67:cd:b1:6f:35:20:5a:c5:23:e3:54:86:35:da:df:
a3:0b:91:d7:1e:32:56:82:ae:09:53:a0:44:0b:6a:3b:f6:dc:
d4:10:a7:9a:d4:55:a7:40:4e:78:07:08:8d:aa:5e:18:d4:0c:
fe:4f:b0:c3:93:92:ea:ef:d5:a1:3c:86:da:47:e6:05:71:87:
ad:7f:b6:31:3d:a1:58:0d:e0:4b:38:1b:eb:52:c5:85:91:0e:
84:1e:74:a7:86:0e:20:83:0f:c8:12:21:75:81:71:3a:59:ca:
09:0e:9d:65:6b:c6:f8:b5:11:ec:41:4f:43:6a:fc:08:48:88:
b4:0f:dc:9d:c5:f8:cf:ff:0a:67:04:6d:f8:c8:7c:33:ad:00:
8b:7b:01:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZb3F3VV/lULBX98XY2t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTcxMGExNjkzNzEwYWM4MzVmMGI2NzQ1ZjkwZDJkNjgw
YTEyMDAwHhcNMjYwNjI5MDgwMTI1WhcNMjYwNjMwMDgwMTI1WjAzMTEwLwYDVQQD
Eyg1YzZkNmJjYWVjMDQ3ZTgwMGMyNWNmYTBlZDViYjI5NTM1Nzg4OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis6YrKNyq2fmx6XQ7ECaU/IyJJzm
h6ZgxN5qq7IMj1XIs/6PcHQp3tT8Qz5+/5O30qRPWjrNzi0PfRBK4BeMDZNxvafn
OFBT1yZVhSckiwzlcuW/d4bCnQ3EeyDbZnGi9TEA9qaAgNUhNZK2iNrNOtnF+/v1
FxU8r7bVC0hNQT7anbZDdsFzsOwwqTtH++Z1QhyO3ZUmTw+ijEz0BbmWZROrmuSI
I6odxXc0z6n2LJa6iLEjBUKHixaEulpmFJOywf+VCN/gRqgsWZjNvwG4fO4BBev9
RWyVFN/7Fv9OkygDcVoOaCjn1LNDB+0nreIJsRZRgGgN1hAfwIe3EHVPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxta8rsBH6ADCXPoO1bspU1eIlkMB8GA1UdIwQY
MBaAFGmXEKFpNxCsg18LZ0X5DS1oChIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYt
MjliOThlY2RmZjEyLzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYtMjliOThlY2RmZjEy
LzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLANnrvU
z+fY04rbVBChGEYTM0MrNxIOAywKysrWdMTsblgxYFz1Ko0/y9gvo3djbmvyOqBH
TIXV+qNym1Gby15Yy5N5NaLJIQeEl+sCYaYqofoxpHfz+s50zPtibKGhsUUd4OQo
YQyPmwQ9ys+rZ82xbzUgWsUj41SGNdrfowuR1x4yVoKuCVOgRAtqO/bc1BCnmtRV
p0BOeAcIjapeGNQM/k+ww5OS6u/VoTyG2kfmBXGHrX+2MT2hWA3gSzgb61LFhZEO
hB50p4YOIIMPyBIhdYFxOlnKCQ6dZWvG+LUR7EFPQ2r8CEiItA/cncX4z/8KZwRt
+Mh8M60Ai3sBQg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:47 2026 by rpki-client