Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: PFZgeDTl2A9H18GghcGNod3x65bSGpbJ/Qk6s368t8A=
Subject key identifier: 8B:6B:4B:8C:CB:5D:6D:85:6C:2C:74:E4:DB:66:67:F7:53:7F:43:06
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019DA22EC03844C6FA0DC1E99C644BC77CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 0161
Signing time: Sat 18 Apr 2026 20:01:05 +0000
Manifest this update: Sat 18 Apr 2026 20:01:05 +0000
Manifest next update: Sun 19 Apr 2026 20:01:05 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: rYRW9DVwVzkcw9PC/lOC5vUD/cw/Jff5ywJ4f2guXIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:2e:c0:38:44:c6:fa:0d:c1:e9:9c:64:4b:c7:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Apr 18 20:01:05 2026 GMT
Not After : Apr 19 20:01:05 2026 GMT
Subject: CN=8b6b4b8ccb5d6d856c2c74e4db6667f7537f4306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:14:b8:f4:c4:70:70:2f:2d:27:e1:4f:ce:
f9:64:53:9a:b8:dc:b6:01:14:86:5d:4e:c8:d2:02:
b9:b6:e2:7b:db:69:3e:81:32:1d:2f:3c:8e:04:cb:
86:b8:3d:87:56:0b:d8:1d:09:0c:f9:35:8e:af:6b:
53:91:29:09:14:58:b7:c8:66:20:43:a6:64:58:aa:
d2:d3:61:2a:81:77:50:9c:58:06:b6:5a:eb:a8:5f:
b0:31:a5:2a:e4:40:2a:50:a0:2a:42:e7:85:32:67:
4e:13:79:c5:da:ff:a4:85:ab:20:d5:9d:61:06:49:
c2:d9:cb:80:52:f2:3a:78:8a:5e:87:53:bb:9e:01:
e0:6d:32:8e:83:d0:f1:fd:ef:47:6e:12:60:22:55:
67:56:6e:98:75:11:67:e2:89:b3:9d:10:64:18:7d:
28:4f:a7:6d:bf:c6:01:91:ca:30:04:20:03:ab:8a:
79:a3:16:7c:99:fd:49:fa:b4:45:a0:41:11:6c:13:
09:07:b8:ef:81:c7:35:12:41:5c:0c:1a:2a:a9:87:
5c:1c:01:bd:ba:a6:18:9c:f2:9f:50:ee:75:35:8b:
88:02:c4:ff:b7:fd:b4:43:3f:bc:96:c0:2c:e5:8a:
30:ae:cd:85:a3:f6:60:2c:a4:df:8d:25:2f:0d:a1:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6B:4B:8C:CB:5D:6D:85:6C:2C:74:E4:DB:66:67:F7:53:7F:43:06
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:0b:21:61:5b:ef:c2:2e:1e:09:d9:04:f6:40:41:75:2c:
b0:60:81:87:31:37:71:17:93:72:6a:36:f1:b6:56:2e:56:5b:
1b:3c:fb:9a:aa:b1:73:c3:50:54:3f:95:bc:fc:18:76:f7:df:
bf:0d:d1:f1:50:30:61:db:a9:05:76:b3:86:f1:45:01:7a:dc:
33:90:3b:a0:fa:db:84:a0:20:70:12:2b:cf:ec:00:4f:2e:dd:
f4:c7:99:78:a4:cf:fc:4f:30:a5:06:cf:c5:d7:8d:9d:0e:68:
bf:51:4f:c2:db:2b:e2:0a:21:dd:ef:02:f3:6b:1b:06:1d:92:
94:d2:1d:98:41:29:7b:f3:a4:d6:ad:10:7f:3a:b2:fe:f6:7f:
cd:f3:e9:7f:2a:2a:52:86:fb:7c:4e:63:05:fa:b2:46:d7:53:
3e:f7:52:f3:fc:3c:3a:9f:ed:dc:33:af:91:00:29:67:8a:8c:
01:d2:9e:0e:01:4d:b1:26:78:b0:2a:62:30:8b:6e:8f:06:00:
d1:9c:b2:f5:bf:cf:08:a5:82:02:94:d6:c7:bd:b6:06:54:4c:
24:e5:ac:27:16:aa:af:fe:5f:d5:d1:ae:47:ad:92:dc:b2:a2:
85:c3:ac:d4:5f:f9:f1:5c:76:8a:09:e4:08:c7:ec:47:ba:d5:
bb:54:d5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2iLsA4RMb6DcHpnGRLx3y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy
ODM3MTMwHhcNMjYwNDE4MjAwMTA1WhcNMjYwNDE5MjAwMTA1WjAzMTEwLwYDVQQD
Eyg4YjZiNGI4Y2NiNWQ2ZDg1NmMyYzc0ZTRkYjY2NjdmNzUzN2Y0MzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP8UuPTEcHAvLSfhT875ZFOauNy2
ARSGXU7I0gK5tuJ722k+gTIdLzyOBMuGuD2HVgvYHQkM+TWOr2tTkSkJFFi3yGYg
Q6ZkWKrS02EqgXdQnFgGtlrrqF+wMaUq5EAqUKAqQueFMmdOE3nF2v+khasg1Z1h
BknC2cuAUvI6eIpeh1O7ngHgbTKOg9Dx/e9HbhJgIlVnVm6YdRFn4omznRBkGH0o
T6dtv8YBkcowBCADq4p5oxZ8mf1J+rRFoEERbBMJB7jvgcc1EkFcDBoqqYdcHAG9
uqYYnPKfUO51NYuIAsT/t/20Qz+8lsAs5Yowrs2Fo/ZgLKTfjSUvDaF+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItrS4zLXW2FbCx05NtmZ/dTf0MGMB8GA1UdIwQY
MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt
OGFkM2MwZDExNTY1LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1
LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVYLIWFb
78IuHgnZBPZAQXUssGCBhzE3cReTcmo28bZWLlZbGzz7mqqxc8NQVD+VvPwYdvff
vw3R8VAwYdupBXazhvFFAXrcM5A7oPrbhKAgcBIrz+wATy7d9MeZeKTP/E8wpQbP
xdeNnQ5ov1FPwtsr4goh3e8C82sbBh2SlNIdmEEpe/Ok1q0Qfzqy/vZ/zfPpfyoq
Uob7fE5jBfqyRtdTPvdS8/w8Op/t3DOvkQApZ4qMAdKeDgFNsSZ4sCpiMItujwYA
0Zyy9b/PCKWCApTWx722BlRMJOWsJxaqr/5f1dGuR62S3LKihcOs1F/58Vx2ignk
CMfsR7rVu1TVmw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:12:36 2026 by rpki-client