Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: XRioMAFc0kHJ2mesjdblxZUEsSJKN2VWBqDRu+TT8xQ=
Subject key identifier: 00:72:2A:48:E0:17:DC:2C:4B:A0:E0:20:C2:01:93:80:07:C9:BF:44
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 01A14CBD8EED81E25444C8C1EAFA66F46377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 02:00:53 +0000
Manifest this update: Sun 18 Oct 2026 02:00:53 +0000
Manifest next update: Mon 19 Oct 2026 02:00:53 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: sdSx7R+tZ/RSWXI25JbReKAmEpuQa4ww38Ab4g7Su+Q=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:bd:8e:ed:81:e2:54:44:c8:c1:ea:fa:66:f4:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Oct 18 02:00:53 2026 GMT
Not After : Oct 19 02:00:53 2026 GMT
Subject: CN=00722a48e017dc2c4ba0e020c201938007c9bf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:b9:dc:e8:4d:01:74:71:9a:26:14:2a:bf:
6c:5d:9a:1e:50:db:9b:45:c1:1b:f0:d8:3f:b1:87:
52:3c:f5:7a:fc:56:db:f3:15:6c:c7:59:0d:00:7a:
9a:10:51:b5:cd:db:dd:32:2a:fc:aa:69:06:28:e0:
20:62:5d:43:06:4b:52:9f:b1:6f:8f:da:04:0a:6f:
00:70:d7:32:14:cf:70:ab:54:80:81:2f:3f:91:81:
76:44:9d:2b:71:f1:e0:e7:d2:14:b3:93:58:49:b7:
db:94:39:87:ae:e5:5c:da:4f:07:a2:e8:81:9f:65:
68:dc:27:e1:94:e0:1c:1a:fb:da:36:ff:7e:d9:e0:
6c:08:f5:4a:9d:b6:6a:64:ab:ce:6f:a5:f6:0e:af:
55:e8:70:4a:01:99:02:58:92:a5:dd:eb:f9:3f:28:
78:c7:7c:7a:a1:f5:a2:01:4b:1e:7c:5a:ec:f7:fa:
5d:cb:97:7b:e4:ea:a6:a0:72:50:f0:9f:2b:2d:f0:
e0:3b:d8:52:86:d1:89:18:ee:3c:21:56:00:c3:ee:
79:88:5c:68:62:be:cc:cc:03:25:90:da:2d:19:b2:
04:f6:76:8f:c7:6b:2a:d2:a8:eb:d1:ac:fe:e4:95:
98:c9:4b:19:33:03:7a:32:a2:cf:b5:72:41:34:46:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:2A:48:E0:17:DC:2C:4B:A0:E0:20:C2:01:93:80:07:C9:BF:44
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c7:b5:ba:8e:6f:2c:f0:61:bd:94:87:1c:89:16:c9:6d:6f:
62:15:e2:65:ca:4d:4b:6e:5f:9c:d8:ed:41:6b:84:73:39:45:
53:2c:01:4a:31:73:5c:6b:8a:94:86:a5:f8:23:5e:7a:a8:79:
be:9a:68:f9:be:50:39:dd:0d:fc:04:36:af:37:26:5b:9c:a5:
27:34:80:c2:b7:43:53:1f:89:e0:cf:11:19:ca:b6:1c:35:01:
13:a8:58:bd:dd:c2:9e:da:c5:57:c8:98:f4:99:7a:5a:7b:c5:
34:73:b0:ad:1f:d3:a3:da:7a:b3:c8:bf:24:72:08:38:e7:e2:
5b:de:7d:94:2e:1d:14:c4:22:0c:a4:13:33:1c:a8:ec:c1:88:
84:5c:ba:fa:6f:86:fa:cb:9d:37:3c:66:eb:ce:8f:5a:74:9f:
0a:8e:c4:41:f0:96:e6:99:9f:ac:da:ae:c1:2b:58:82:71:f6:
51:7d:08:b2:0a:18:6f:e2:74:22:1a:bb:fc:b8:ea:a5:49:c9:
77:e4:36:c4:11:46:f1:db:9e:01:4a:4e:79:31:c4:11:79:34:
7a:60:33:d3:5f:d0:77:69:6d:37:64:db:94:22:c7:6d:ae:1b:
fe:4d:68:e0:61:ab:74:ad:19:ac:43:ed:0b:f4:54:ef:ad:27:
37:eb:8a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMvY7tgeJURMjB6vpm9GN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDQyNWNjN2IxYjc4ODBhODc1Zjc2YmVkYTgwZmUzMTA5
MzE5ZWQwHhcNMjYxMDE4MDIwMDUzWhcNMjYxMDE5MDIwMDUzWjAzMTEwLwYDVQQD
EygwMDcyMmE0OGUwMTdkYzJjNGJhMGUwMjBjMjAxOTM4MDA3YzliZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5m53OhNAXRxmiYUKr9sXZoeUNub
RcEb8Ng/sYdSPPV6/Fbb8xVsx1kNAHqaEFG1zdvdMir8qmkGKOAgYl1DBktSn7Fv
j9oECm8AcNcyFM9wq1SAgS8/kYF2RJ0rcfHg59IUs5NYSbfblDmHruVc2k8HouiB
n2Vo3CfhlOAcGvvaNv9+2eBsCPVKnbZqZKvOb6X2Dq9V6HBKAZkCWJKl3ev5Pyh4
x3x6ofWiAUsefFrs9/pdy5d75OqmoHJQ8J8rLfDgO9hShtGJGO48IVYAw+55iFxo
Yr7MzAMlkNotGbIE9naPx2sq0qjr0az+5JWYyUsZMwN6MqLPtXJBNEb7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAByKkjgF9wsS6DgIMIBk4AHyb9EMB8GA1UdIwQY
MBaAFGjUJcx7G3iAqHX3a+2oD+MQkxntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2Et
NWM0NWI2MThmOTkwLzEvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2EtNWM0NWI2MThmOTkw
LzEvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8e1uo5v
LPBhvZSHHIkWyW1vYhXiZcpNS25fnNjtQWuEczlFUywBSjFzXGuKlIal+CNeeqh5
vppo+b5QOd0N/AQ2rzcmW5ylJzSAwrdDUx+J4M8RGcq2HDUBE6hYvd3CntrFV8iY
9Jl6WnvFNHOwrR/To9p6s8i/JHIIOOfiW959lC4dFMQiDKQTMxyo7MGIhFy6+m+G
+sudNzxm686PWnSfCo7EQfCW5pmfrNquwStYgnH2UX0IsgoYb+J0Ihq7/LjqpUnJ
d+Q2xBFG8dueAUpOeTHEEXk0emAz01/Qd2ltN2TblCLHba4b/k1o4GGrdK0ZrEPt
C/RU760nN+uKPA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:33:52 2026 by rpki-client