Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: EzMUC8TfEHFHBRxRdHNJueWnGeTIdvXjaLUhk0evbh4=
Subject key identifier: 78:39:4E:62:80:AC:2B:A1:63:7C:8E:6C:78:8D:66:C4:06:F5:59:3A
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 01A173944AD320AFAB3F72BF6C77A5320257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: 01A4
Signing time: Sun 25 Oct 2026 15:01:00 +0000
Manifest this update: Sun 25 Oct 2026 15:01:00 +0000
Manifest next update: Mon 26 Oct 2026 15:01:00 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: Z2LrD67RKXqxC7/s7wymU6tz9dE/icTCQy5HW7mvKzo=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:4a:d3:20:af:ab:3f:72:bf:6c:77:a5:32:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Oct 25 15:01:00 2026 GMT
Not After : Oct 26 15:01:00 2026 GMT
Subject: CN=78394e6280ac2ba1637c8e6c788d66c406f5593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:52:52:10:86:9b:9b:44:df:e9:45:02:fe:
31:0a:04:d8:f9:7f:e7:41:f9:02:8e:91:f5:94:3e:
72:6e:0a:d5:58:81:7a:ac:05:4e:12:87:06:68:78:
24:52:c6:7f:31:3c:28:1a:52:28:90:1b:ea:95:1b:
d1:54:53:3b:ed:cc:29:51:fa:a7:a0:21:e8:01:2f:
0e:2f:b5:ae:22:cb:da:1d:11:c5:ad:e6:ae:d6:d8:
b6:db:98:95:64:a2:9c:69:97:32:d1:10:6b:d2:ba:
fd:15:5e:ad:4b:ce:07:0d:d3:ba:9c:3d:c8:ec:37:
73:e2:8a:51:4c:d2:22:8c:3a:da:ea:75:94:98:26:
87:1f:60:22:f5:e4:2d:d9:2c:be:19:ee:6d:19:e5:
61:ae:bf:e0:62:be:5b:f6:18:e2:79:83:e5:ef:f4:
8c:39:bf:79:30:90:6d:9a:82:24:ec:83:81:a5:e1:
d4:90:21:d1:69:e1:73:11:15:f2:b1:ab:1f:05:46:
b0:9e:76:e7:d9:a6:2f:2a:64:2d:5b:88:7f:56:7d:
b1:d0:f8:fd:f9:43:f6:74:20:47:93:68:7f:3d:1f:
ec:58:c7:09:fd:10:fc:1f:78:c0:c7:e9:cd:95:50:
df:7c:f3:ed:37:48:5f:d3:3f:05:f6:1d:64:90:42:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:4E:62:80:AC:2B:A1:63:7C:8E:6C:78:8D:66:C4:06:F5:59:3A
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d0:f1:39:03:22:98:6c:3f:31:07:4e:39:10:af:99:59:41:
fc:cf:e4:46:32:29:5d:e5:b8:c7:98:33:5d:07:70:4b:e1:27:
d6:92:b5:2e:17:16:d2:65:5f:03:3e:c9:4a:e9:49:25:64:3d:
7e:7b:15:94:28:9f:78:e0:c0:5c:ed:dd:7a:d1:1a:f0:1a:7a:
bc:37:36:df:44:40:67:f0:8c:f8:32:e1:61:dc:76:2e:2c:1a:
08:11:4b:d0:e1:c3:ea:58:24:86:92:40:55:da:f7:01:38:cf:
75:3d:32:83:45:bb:ce:42:41:45:56:9a:5e:b4:c7:6b:9b:88:
1c:be:db:de:ea:fc:14:04:81:af:4e:9f:31:41:33:da:f5:ed:
04:fa:d8:68:b0:ab:99:b2:bd:40:6d:4b:62:18:72:18:7e:68:
8e:27:ef:1e:7b:a7:6b:41:25:a7:e6:0b:90:c0:a5:df:f6:ae:
51:cc:bb:10:16:34:7f:ac:de:47:f1:70:06:8d:b7:4a:e0:ec:
70:d5:30:f2:90:15:ba:ad:9f:8d:77:61:c7:d1:47:d1:dc:14:
2c:d0:e9:8f:cb:da:77:4f:c9:f5:b4:f8:01:d1:37:da:df:19:
40:95:bd:fa:1e:23:a1:ae:e3:bc:7c:69:20:bf:52:5e:44:21:
9f:ed:af:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzlErTIK+rP3K/bHelMgJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTJlNzQ1ODI1MzFhYWFmZWU4OGI5YzcyZThjMjllNDU0
ZDA2NTkwHhcNMjYxMDI1MTUwMTAwWhcNMjYxMDI2MTUwMTAwWjAzMTEwLwYDVQQD
Eyg3ODM5NGU2MjgwYWMyYmExNjM3YzhlNmM3ODhkNjZjNDA2ZjU1OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCpSUhCGm5tE3+lFAv4xCgTY+X/n
QfkCjpH1lD5ybgrVWIF6rAVOEocGaHgkUsZ/MTwoGlIokBvqlRvRVFM77cwpUfqn
oCHoAS8OL7WuIsvaHRHFreau1ti225iVZKKcaZcy0RBr0rr9FV6tS84HDdO6nD3I
7Ddz4opRTNIijDra6nWUmCaHH2Ai9eQt2Sy+Ge5tGeVhrr/gYr5b9hjieYPl7/SM
Ob95MJBtmoIk7IOBpeHUkCHRaeFzERXysasfBUawnnbn2aYvKmQtW4h/Vn2x0Pj9
+UP2dCBHk2h/PR/sWMcJ/RD8H3jAx+nNlVDffPPtN0hf0z8F9h1kkEIviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg5TmKArCuhY3yObHiNZsQG9Vk6MB8GA1UdIwQY
MBaAFACS50WCUxqq/uiLnHLowp5FTQZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83NTkxNDMtZDliZC00NmU0LTg4NjUt
OGUxZGE1MTQyYzcyLzEvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83NTkxNDMtZDliZC00NmU0LTg4NjUtOGUxZGE1MTQyYzcy
LzEvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdDxOQMi
mGw/MQdOORCvmVlB/M/kRjIpXeW4x5gzXQdwS+En1pK1LhcW0mVfAz7JSulJJWQ9
fnsVlCifeODAXO3detEa8Bp6vDc230RAZ/CM+DLhYdx2LiwaCBFL0OHD6lgkhpJA
Vdr3ATjPdT0yg0W7zkJBRVaaXrTHa5uIHL7b3ur8FASBr06fMUEz2vXtBPrYaLCr
mbK9QG1LYhhyGH5ojifvHnuna0Elp+YLkMCl3/auUcy7EBY0f6zeR/FwBo23SuDs
cNUw8pAVuq2fjXdhx9FH0dwULNDpj8vad0/J9bT4AdE32t8ZQJW9+h4joa7jvHxp
IL9SXkQhn+2vJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:34 2026 by rpki-client