Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
File: AIZWyhRKM5MRaFzl-oq_HScFoeI.mft (raw, json)
Hash identifier: 3xPw2/3lzF1rYRs1o0dXXxisCy1ujSAalhlGbyQfdz8=
Subject key identifier: 00:87:07:CC:DB:86:42:D2:3E:48:9E:7E:DF:FC:EE:DB:00:51:75:34
Authority key identifier: 00:86:56:CA:14:4A:33:93:11:68:5C:E5:FA:8A:BF:1D:27:05:A1:E2
Certificate issuer: /CN=008656ca144a339311685ce5fa8abf1d2705a1e2
Certificate serial: 01A03FAA07DEE9A93216CDD7443BE9EEB765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
Manifest number: 0107
Signing time: Wed 26 Aug 2026 20:01:42 +0000
Manifest this update: Wed 26 Aug 2026 20:01:42 +0000
Manifest next update: Thu 27 Aug 2026 20:01:42 +0000
Files and hashes: 1: AIZWyhRKM5MRaFzl-oq_HScFoeI.crl (hash: IygQ0pZuhwlfzy6tMu/hC1aVb7rdY+kmt67frfZtC0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:aa:07:de:e9:a9:32:16:cd:d7:44:3b:e9:ee:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=008656ca144a339311685ce5fa8abf1d2705a1e2
Validity
Not Before: Aug 26 20:01:42 2026 GMT
Not After : Aug 27 20:01:42 2026 GMT
Subject: CN=008707ccdb8642d23e489e7edffceedb00517534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:db:1d:3c:76:a4:79:4f:2f:86:82:15:e0:
b6:af:c6:8b:ac:6b:4b:06:37:ec:38:ee:53:c9:29:
bc:e7:e0:49:95:d4:cc:01:a5:59:f0:06:4f:c1:0e:
17:bc:fc:84:c8:c0:64:54:6b:fc:40:0a:bc:6f:ed:
fd:2d:2c:0b:c6:82:46:63:f9:81:c4:20:0b:6f:d8:
f3:6e:4a:e0:11:37:93:3b:04:00:fe:8b:c2:38:87:
92:05:a9:70:91:a3:eb:6d:7f:b8:58:dd:8a:9a:d9:
2e:a0:66:a3:e7:95:54:16:9f:91:a8:69:d6:be:54:
97:ea:ef:45:fa:de:10:4b:b2:39:94:b7:e2:b0:96:
f1:d0:63:de:3e:88:1b:83:ac:64:23:90:c3:55:22:
fd:f6:34:36:c0:a5:8b:6e:19:09:ca:f0:c2:aa:b4:
84:f7:2a:1c:bc:6e:9a:96:dd:76:d5:de:b4:75:3c:
00:ce:19:8c:6c:4d:ba:04:fb:7a:32:5d:55:32:18:
55:10:e1:30:40:b1:46:69:15:4e:9e:09:3d:15:f6:
ed:9d:8c:d9:65:46:c9:17:5d:a9:fc:98:aa:7f:6f:
68:a2:54:66:92:e5:d3:c0:e7:20:9a:e9:ce:e3:c2:
c7:7e:b7:fe:a8:2a:e7:15:bc:2d:7f:87:26:0c:9a:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:07:CC:DB:86:42:D2:3E:48:9E:7E:DF:FC:EE:DB:00:51:75:34
X509v3 Authority Key Identifier:
keyid:00:86:56:CA:14:4A:33:93:11:68:5C:E5:FA:8A:BF:1D:27:05:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:0f:77:31:33:5b:76:ee:a4:8f:07:8d:44:01:f5:14:c9:
16:75:c4:90:21:31:e0:ac:ca:64:35:a3:e6:1d:91:3d:33:61:
a0:eb:31:ce:1d:48:23:ed:b1:3c:08:46:6b:3d:9b:91:23:43:
c2:6b:27:b0:be:e4:a1:64:33:1d:3a:a0:f7:e9:28:48:d9:23:
f9:1f:4d:ed:7b:db:cd:42:a3:41:70:92:7f:e2:27:c0:40:00:
de:39:a0:02:93:4a:28:72:94:92:60:e4:a7:d9:31:67:66:cd:
8a:42:b8:b7:cb:db:37:0b:07:e1:ec:90:a3:f3:dc:68:9b:66:
b9:af:d5:50:d3:05:d5:e2:03:24:67:92:06:1a:07:cc:23:17:
de:0b:91:2f:e4:f5:be:e9:6d:00:17:6c:a8:ad:84:ab:8d:13:
0a:1b:38:f5:c6:b1:d9:67:46:d5:9c:73:b8:ed:02:35:f9:10:
f0:f7:cd:4c:14:dc:96:e2:05:fc:e1:aa:f0:ec:0d:4f:89:ba:
4f:5d:64:38:28:18:81:5c:5c:85:fe:e0:5b:7f:24:e8:8e:e2:
9f:50:fb:f5:16:b9:87:e4:68:bf:eb:7d:4d:ff:3e:a0:0c:aa:
17:57:66:81:5f:f4:81:bb:a0:60:4c:26:39:84:ca:02:af:b2:
46:e6:c3:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qgfe6akyFs3XRDvp7rdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODY1NmNhMTQ0YTMzOTMxMTY4NWNlNWZhOGFiZjFkMjcw
NWExZTIwHhcNMjYwODI2MjAwMTQyWhcNMjYwODI3MjAwMTQyWjAzMTEwLwYDVQQD
EygwMDg3MDdjY2RiODY0MmQyM2U0ODllN2VkZmZjZWVkYjAwNTE3NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbvbHTx2pHlPL4aCFeC2r8aLrGtL
BjfsOO5TySm85+BJldTMAaVZ8AZPwQ4XvPyEyMBkVGv8QAq8b+39LSwLxoJGY/mB
xCALb9jzbkrgETeTOwQA/ovCOIeSBalwkaPrbX+4WN2KmtkuoGaj55VUFp+RqGnW
vlSX6u9F+t4QS7I5lLfisJbx0GPePogbg6xkI5DDVSL99jQ2wKWLbhkJyvDCqrSE
9yocvG6alt121d60dTwAzhmMbE26BPt6Ml1VMhhVEOEwQLFGaRVOngk9FfbtnYzZ
ZUbJF12p/Jiqf29oolRmkuXTwOcgmunO48LHfrf+qCrnFbwtf4cmDJqjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACHB8zbhkLSPkieft/87tsAUXU0MB8GA1UdIwQY
MBaAFACGVsoUSjOTEWhc5fqKvx0nBaHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlaV3loUktNNU1SYUZ6bC1vcV9IU2NGb2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jM2E3MjQtNjhlOS00YTlmLWFkYjYt
MGQ0ZTM5ZWI4NzIzLzEvQUlaV3loUktNNU1SYUZ6bC1vcV9IU2NGb2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jM2E3MjQtNjhlOS00YTlmLWFkYjYtMGQ0ZTM5ZWI4NzIz
LzEvQUlaV3loUktNNU1SYUZ6bC1vcV9IU2NGb2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNUPdzEz
W3bupI8HjUQB9RTJFnXEkCEx4KzKZDWj5h2RPTNhoOsxzh1II+2xPAhGaz2bkSND
wmsnsL7koWQzHTqg9+koSNkj+R9N7XvbzUKjQXCSf+InwEAA3jmgApNKKHKUkmDk
p9kxZ2bNikK4t8vbNwsH4eyQo/PcaJtmua/VUNMF1eIDJGeSBhoHzCMX3guRL+T1
vultABdsqK2Eq40TChs49cax2WdG1ZxzuO0CNfkQ8PfNTBTcluIF/OGq8OwNT4m6
T11kOCgYgVxchf7gW38k6I7in1D79Ra5h+Rov+t9Tf8+oAyqF1dmgV/0gbugYEwm
OYTKAq+yRubDEA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:30 2026 by rpki-client