Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: 1au6/A26Iy/b9Jd6m0hxBIxVq8xXHuITbpDN5h7BKYk=
Subject key identifier: 04:1C:BA:C3:D2:DE:56:33:C9:8C:AD:8E:94:1B:0A:99:34:F8:A0:94
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01A089E7F0CCFAD96203A5997FD8401DB2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0A62
Signing time: Thu 10 Sep 2026 06:01:13 +0000
Manifest this update: Thu 10 Sep 2026 06:01:13 +0000
Manifest next update: Fri 11 Sep 2026 06:01:13 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: lChOPVfHZp/2xTya3BNTfjsvd8RFb0MMjuq5AVxts4M=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:f0:cc:fa:d9:62:03:a5:99:7f:d8:40:1d:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Sep 10 06:01:13 2026 GMT
Not After : Sep 11 06:01:13 2026 GMT
Subject: CN=041cbac3d2de5633c98cad8e941b0a9934f8a094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:c6:99:7a:f1:8e:37:0c:ba:a6:e5:ef:a3:
a5:66:65:dd:17:fc:08:ec:70:4e:cd:5b:b2:ba:92:
75:52:26:1b:9d:1d:15:73:c8:ff:dd:2e:33:fe:4f:
16:1b:24:c5:20:37:e5:66:28:65:50:d5:78:3a:57:
30:a5:87:e2:c9:e2:83:f8:06:12:2c:9c:fe:7a:fa:
64:18:aa:0e:29:72:ab:72:4a:af:82:d6:48:3f:32:
01:f3:20:3c:32:33:66:32:db:1f:41:74:90:26:ff:
37:2d:ab:14:86:69:f5:6b:ae:50:35:a5:2e:8b:8e:
37:c3:88:32:3f:18:0e:d4:b4:56:44:84:42:62:65:
96:a0:1d:5d:1a:04:30:72:0a:46:0a:9e:c5:e5:6f:
df:94:20:b2:24:47:99:22:aa:7a:3f:95:1c:de:af:
b8:d0:57:5c:89:2d:cd:09:85:46:e9:d9:34:80:37:
f4:f3:bc:f1:44:53:f1:60:0a:fa:0b:0e:ca:46:ad:
ad:4c:67:40:99:29:07:d1:8a:83:b7:66:69:00:93:
76:b2:90:2a:02:b8:75:3b:2d:d2:91:17:2d:28:49:
92:bb:ac:8e:f2:a0:df:7f:a5:73:7f:ed:8e:b2:15:
c7:eb:ce:86:57:0a:14:3d:25:d1:80:40:5f:83:ed:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:BA:C3:D2:DE:56:33:C9:8C:AD:8E:94:1B:0A:99:34:F8:A0:94
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:89:24:de:50:40:8a:d5:ef:71:f6:53:1a:da:39:33:96:6d:
2f:ac:fa:58:6f:c6:b8:fa:af:00:39:af:21:ef:4e:5a:89:7b:
26:8a:77:f3:92:b3:9a:26:59:5a:b0:79:06:fa:ad:5c:e8:8d:
51:6c:41:5f:be:89:1e:a8:0a:9f:af:43:ea:64:09:ee:f8:28:
2a:6c:43:78:2b:ca:bb:ad:d6:00:22:21:0f:26:33:9d:53:f9:
b0:db:65:5e:8c:80:77:e2:73:12:8c:1d:94:72:94:4a:d6:ac:
39:71:db:c7:f9:78:69:19:ee:3f:59:16:7f:42:17:10:dd:04:
92:8a:8a:d9:0b:c7:71:98:ae:40:ba:eb:91:a0:92:1d:df:38:
c8:2b:c1:82:25:11:0f:ad:2b:c5:c6:1d:b6:eb:ce:c2:7e:bd:
67:50:11:77:61:ba:db:8e:d4:83:3b:b6:bb:b3:d8:73:b1:45:
ad:6b:b0:83:57:f8:1e:aa:cd:89:aa:94:d0:be:35:b2:81:f3:
33:13:27:02:ab:3e:34:02:24:fa:b0:ee:6d:26:eb:60:72:81:
14:d3:f5:bf:a8:6d:0f:ce:70:e6:75:fa:e5:a4:06:9b:96:38:
c1:9e:4a:54:d1:d9:71:53:c6:f1:ee:26:44:d6:ea:12:18:95:
ce:ce:dd:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ5/DM+tliA6WZf9hAHbKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWJiZDU0MjkxMmE2NmZlZTZhMzQxMjhhM2E4Y2Y3MDk3
ZGM2OWIwHhcNMjYwOTEwMDYwMTEzWhcNMjYwOTExMDYwMTEzWjAzMTEwLwYDVQQD
EygwNDFjYmFjM2QyZGU1NjMzYzk4Y2FkOGU5NDFiMGE5OTM0ZjhhMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkerGmXrxjjcMuqbl76OlZmXdF/wI
7HBOzVuyupJ1UiYbnR0Vc8j/3S4z/k8WGyTFIDflZihlUNV4OlcwpYfiyeKD+AYS
LJz+evpkGKoOKXKrckqvgtZIPzIB8yA8MjNmMtsfQXSQJv83LasUhmn1a65QNaUu
i443w4gyPxgO1LRWRIRCYmWWoB1dGgQwcgpGCp7F5W/flCCyJEeZIqp6P5Uc3q+4
0FdciS3NCYVG6dk0gDf087zxRFPxYAr6Cw7KRq2tTGdAmSkH0YqDt2ZpAJN2spAq
Arh1Oy3SkRctKEmSu6yO8qDff6Vzf+2OshXH686GVwoUPSXRgEBfg+1VEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQcusPS3lYzyYytjpQbCpk0+KCUMB8GA1UdIwQY
MBaAFGlbvVQpEqZv7mo0Eoo6jPcJfcabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgt
OTgxNmM2N2E5MjYyLzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgtOTgxNmM2N2E5MjYy
LzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIkk3lBA
itXvcfZTGto5M5ZtL6z6WG/GuPqvADmvIe9OWol7Jop385KzmiZZWrB5BvqtXOiN
UWxBX76JHqgKn69D6mQJ7vgoKmxDeCvKu63WACIhDyYznVP5sNtlXoyAd+JzEowd
lHKUStasOXHbx/l4aRnuP1kWf0IXEN0EkoqK2QvHcZiuQLrrkaCSHd84yCvBgiUR
D60rxcYdtuvOwn69Z1ARd2G6247Ugzu2u7PYc7FFrWuwg1f4HqrNiaqU0L41soHz
MxMnAqs+NAIk+rDubSbrYHKBFNP1v6htD85w5nX65aQGm5Y4wZ5KVNHZcVPG8e4m
RNbqEhiVzs7dMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:19 2026 by rpki-client