Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: s0XQ1b5iR2TfEZ3TR3ssMJwYBkPUrMzB9qc1ZBB+yPE=
Subject key identifier: 13:EC:AE:5A:31:CD:76:46:2A:9C:49:DD:4D:87:57:BF:ED:FB:BC:37
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 01A08A8D0D4D56ACB6380CCD645F35580083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 09:01:34 +0000
Manifest this update: Thu 10 Sep 2026 09:01:34 +0000
Manifest next update: Fri 11 Sep 2026 09:01:34 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: QQkpCknZd1/5xL7UPMY7eXGO+Hi7A4PGT5KYBMdJ4tU=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0d:4d:56:ac:b6:38:0c:cd:64:5f:35:58:00:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Sep 10 09:01:34 2026 GMT
Not After : Sep 11 09:01:34 2026 GMT
Subject: CN=13ecae5a31cd76462a9c49dd4d8757bfedfbbc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:6f:a8:de:ed:72:71:07:89:2d:8b:c5:b3:
e6:50:ed:ff:a7:88:62:14:b0:e0:bb:0a:11:67:59:
99:cc:63:fb:4e:3d:4c:3b:b7:03:77:13:8f:1a:f5:
8e:f9:c8:1c:b9:e8:01:1c:3f:2b:7c:10:93:01:32:
4e:62:a3:ab:42:a9:6f:33:03:46:79:e6:fd:46:62:
12:4d:89:08:3f:20:4f:44:29:01:b3:67:56:fe:34:
1e:32:10:c1:32:bc:e6:c4:b3:1f:4f:88:6a:ba:ea:
78:a4:ac:2d:f4:d1:cc:57:de:41:0c:e9:72:a4:cc:
89:e2:45:4e:b6:46:6d:99:00:85:e7:ce:01:40:1b:
b3:ea:9d:ff:54:d6:ab:82:c8:d1:04:a9:a9:5e:b7:
03:ca:c1:06:3b:23:0a:fb:2d:c1:d9:3e:2a:ad:57:
c3:17:01:f7:cf:25:40:7f:50:c1:9e:ca:eb:2f:e0:
f5:d7:da:bc:5f:4a:6a:b7:58:66:70:77:0e:67:53:
de:70:24:fb:49:ff:d8:36:9a:34:98:82:1c:8a:bb:
ba:22:35:58:5f:7d:19:e9:0d:60:3c:92:75:e0:25:
e0:69:85:36:d7:70:a7:cc:c3:2f:09:d7:6a:68:e8:
03:cc:16:f3:00:95:27:dd:9e:b7:2e:f9:b5:f6:05:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:AE:5A:31:CD:76:46:2A:9C:49:DD:4D:87:57:BF:ED:FB:BC:37
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:f3:28:74:b5:08:40:24:79:1f:22:9b:0c:bb:35:cf:0a:
78:e5:10:3e:98:b5:f0:35:59:c5:8c:dd:98:6e:8c:ea:55:23:
75:34:43:55:97:40:37:3b:f6:ea:c5:dc:3e:6a:06:7b:af:85:
5a:d6:f9:cb:1b:4e:33:14:fa:42:99:72:49:8c:2a:55:16:13:
2b:0d:35:65:de:4e:92:ad:92:2f:f7:d6:f7:7a:64:ac:82:55:
1b:09:7e:7c:4d:68:85:85:a9:40:e2:b8:d8:fe:90:59:70:8e:
ef:72:70:7e:66:56:14:20:90:74:a8:53:14:14:14:0a:cf:d8:
85:04:c3:02:c5:b9:2a:b4:aa:fd:f7:bb:f9:b1:4b:18:c5:51:
94:b4:b7:e8:73:3e:94:76:bd:2d:64:ae:27:24:e7:e5:20:a6:
c8:8d:f4:c3:6f:0b:8f:8b:6f:e7:41:a9:4f:1b:97:a1:70:e5:
3d:ea:00:44:e9:ad:f6:9f:94:8b:f3:71:bc:31:d5:3e:ba:10:
d2:98:fd:c3:84:03:8c:be:cf:7b:b6:9c:04:2b:c5:ce:04:91:
f2:a2:f3:01:90:e2:2e:87:d9:8e:ef:91:f4:b0:09:13:fd:c0:
82:34:16:1b:0e:c6:02:90:9a:c1:81:93:fb:98:2e:53:fb:f1:
fd:ce:1a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQ1NVqy2OAzNZF81WACDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjYwOTEwMDkwMTM0WhcNMjYwOTExMDkwMTM0WjAzMTEwLwYDVQQD
EygxM2VjYWU1YTMxY2Q3NjQ2MmE5YzQ5ZGQ0ZDg3NTdiZmVkZmJiYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1RvqN7tcnEHiS2LxbPmUO3/p4hi
FLDguwoRZ1mZzGP7Tj1MO7cDdxOPGvWO+cgcuegBHD8rfBCTATJOYqOrQqlvMwNG
eeb9RmISTYkIPyBPRCkBs2dW/jQeMhDBMrzmxLMfT4hquup4pKwt9NHMV95BDOly
pMyJ4kVOtkZtmQCF584BQBuz6p3/VNargsjRBKmpXrcDysEGOyMK+y3B2T4qrVfD
FwH3zyVAf1DBnsrrL+D119q8X0pqt1hmcHcOZ1PecCT7Sf/YNpo0mIIciru6IjVY
X30Z6Q1gPJJ14CXgaYU213CnzMMvCddqaOgDzBbzAJUn3Z63Lvm19gVQgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPsrloxzXZGKpxJ3U2HV7/t+7w3MB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamTzKHS1
CEAkeR8imwy7Nc8KeOUQPpi18DVZxYzdmG6M6lUjdTRDVZdANzv26sXcPmoGe6+F
Wtb5yxtOMxT6QplySYwqVRYTKw01Zd5Okq2SL/fW93pkrIJVGwl+fE1ohYWpQOK4
2P6QWXCO73JwfmZWFCCQdKhTFBQUCs/YhQTDAsW5KrSq/fe7+bFLGMVRlLS36HM+
lHa9LWSuJyTn5SCmyI30w28Lj4tv50GpTxuXoXDlPeoAROmt9p+Ui/NxvDHVProQ
0pj9w4QDjL7Pe7acBCvFzgSR8qLzAZDiLofZju+R9LAJE/3AgjQWGw7GApCawYGT
+5guU/vx/c4a/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:06:22 2026 by rpki-client