Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: wFzgWuGlMsExMPiE+m2kOGyFKBZh2KfJneabueHvHn0=
Subject key identifier: 99:A3:DC:52:20:1A:90:34:4A:93:0A:B9:4A:CA:47:EB:6D:B1:C6:DA
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019FA228EAF074FD4B545C36F04C7DAA036B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 09EA
Signing time: Mon 27 Jul 2026 06:00:18 +0000
Manifest this update: Mon 27 Jul 2026 06:00:18 +0000
Manifest next update: Tue 28 Jul 2026 06:00:18 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: z7zTommd1vBHpPVpk8hYaoomW2WEQ6RlXpZ5PjUuUJ4=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:ea:f0:74:fd:4b:54:5c:36:f0:4c:7d:aa:03:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Jul 27 06:00:18 2026 GMT
Not After : Jul 28 06:00:18 2026 GMT
Subject: CN=99a3dc52201a90344a930ab94aca47eb6db1c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:ed:d1:e8:0d:f4:ba:39:b5:fa:c5:c3:0a:
74:ef:88:2f:61:d3:fd:24:f1:32:f7:dd:79:6f:ca:
69:41:3c:8c:87:41:e9:73:df:7a:9d:0b:b2:5e:2c:
1a:54:f9:f7:c4:b7:ed:e1:98:1d:9f:31:7c:73:d0:
90:c0:ec:83:c9:e7:b9:43:44:17:bd:24:bb:4a:66:
ec:0a:1e:b3:c0:08:12:c2:b6:c3:d5:0c:f6:b5:3f:
bc:7b:d4:46:d7:c0:a9:1d:b0:d4:7a:eb:6e:f2:dd:
1e:86:fb:95:20:e7:97:99:de:00:d4:c8:66:6d:e0:
01:ed:89:07:86:56:93:7f:40:b2:b5:f3:95:ca:4f:
98:01:40:75:2b:95:f1:69:b2:6b:7d:32:c0:a2:98:
5e:2a:d5:7c:33:1f:4b:b9:8d:fe:e8:0c:7a:5e:99:
9c:e7:8f:9d:c0:a0:02:44:22:17:bb:e0:dd:ca:dc:
95:50:18:d7:2d:c6:e8:00:3b:bf:03:5e:6f:39:08:
ce:a7:74:eb:36:13:4d:c8:7c:f7:80:b6:bb:fb:c7:
c9:2e:d3:de:f6:49:ff:9f:e3:54:16:2b:81:e9:da:
be:e3:25:dc:39:76:ff:c6:77:b9:0b:8e:97:39:9b:
6b:bd:c3:46:e8:26:d9:b7:65:96:bc:8a:c2:45:12:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:DC:52:20:1A:90:34:4A:93:0A:B9:4A:CA:47:EB:6D:B1:C6:DA
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:9c:71:bc:f8:3a:f0:48:d6:35:9f:7f:83:ac:d0:a3:e8:
16:0b:88:42:8b:26:e1:e2:f6:41:48:55:c8:2b:8b:2c:08:61:
1a:84:39:32:5a:00:e7:b1:bd:2d:bc:03:bf:de:34:bc:25:af:
ac:65:1c:bf:89:31:17:fb:dc:b9:59:60:a1:3d:48:a6:cb:3b:
a8:72:39:5c:36:93:71:24:05:99:df:f1:7a:2c:6d:3c:d4:a5:
ae:a7:20:75:fd:23:64:eb:dc:88:17:e9:b1:86:89:3b:5d:cb:
18:5f:f8:f4:86:8b:24:f1:86:85:a3:08:89:8f:99:07:9f:02:
43:3e:27:49:e4:96:12:40:03:27:ed:b9:18:2a:f7:b6:23:da:
3b:2e:bd:35:a1:57:aa:34:8e:54:bc:96:e4:34:89:9a:d9:76:
85:49:d7:56:da:28:11:5a:7e:c9:e3:2c:e3:c3:41:59:04:d4:
b5:24:67:0b:ab:83:b6:75:96:9a:09:bb:f8:1f:9f:bf:74:6b:
eb:9c:f3:f3:d8:c7:12:37:c9:ba:73:6f:5d:bf:ac:73:5b:29:
4c:b0:37:46:0b:dd:7c:ef:a6:ff:cf:bf:f7:8c:b7:68:03:24:
1d:22:a9:f8:69:cf:0d:d5:1f:f6:0a:31:c4:65:f1:e8:a0:dd:
1e:28:77:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKOrwdP1LVFw28Ex9qgNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWJiZDU0MjkxMmE2NmZlZTZhMzQxMjhhM2E4Y2Y3MDk3
ZGM2OWIwHhcNMjYwNzI3MDYwMDE4WhcNMjYwNzI4MDYwMDE4WjAzMTEwLwYDVQQD
Eyg5OWEzZGM1MjIwMWE5MDM0NGE5MzBhYjk0YWNhNDdlYjZkYjFjNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvPt0egN9Lo5tfrFwwp074gvYdP9
JPEy9915b8ppQTyMh0Hpc996nQuyXiwaVPn3xLft4ZgdnzF8c9CQwOyDyee5Q0QX
vSS7SmbsCh6zwAgSwrbD1Qz2tT+8e9RG18CpHbDUeutu8t0ehvuVIOeXmd4A1Mhm
beAB7YkHhlaTf0CytfOVyk+YAUB1K5XxabJrfTLAopheKtV8Mx9LuY3+6Ax6Xpmc
54+dwKACRCIXu+DdytyVUBjXLcboADu/A15vOQjOp3TrNhNNyHz3gLa7+8fJLtPe
9kn/n+NUFiuB6dq+4yXcOXb/xne5C46XOZtrvcNG6CbZt2WWvIrCRRL/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmj3FIgGpA0SpMKuUrKR+ttscbaMB8GA1UdIwQY
MBaAFGlbvVQpEqZv7mo0Eoo6jPcJfcabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgt
OTgxNmM2N2E5MjYyLzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgtOTgxNmM2N2E5MjYy
LzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB2ccbz4
OvBI1jWff4Os0KPoFguIQosm4eL2QUhVyCuLLAhhGoQ5MloA57G9LbwDv940vCWv
rGUcv4kxF/vcuVlgoT1Ipss7qHI5XDaTcSQFmd/xeixtPNSlrqcgdf0jZOvciBfp
sYaJO13LGF/49IaLJPGGhaMIiY+ZB58CQz4nSeSWEkADJ+25GCr3tiPaOy69NaFX
qjSOVLyW5DSJmtl2hUnXVtooEVp+yeMs48NBWQTUtSRnC6uDtnWWmgm7+B+fv3Rr
65zz89jHEjfJunNvXb+sc1spTLA3RgvdfO+m/8+/94y3aAMkHSKp+GnPDdUf9gox
xGXx6KDdHih3NQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:43 2026 by rpki-client