Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
File: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft (raw, json)
Hash identifier: QEuNOrGthGUpAVOmc0vV2lrJCI4ow7dWleyqiOakbB4=
Subject key identifier: BA:93:BE:59:E8:2C:44:9E:5B:C9:89:73:34:A8:C3:46:12:C1:DC:46
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Certificate issuer: /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial: 01A0C9D8A395C789F6676266E20600B4CE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
Manifest number: 01D8
Signing time: Tue 22 Sep 2026 16:00:12 +0000
Manifest this update: Tue 22 Sep 2026 16:00:12 +0000
Manifest next update: Wed 23 Sep 2026 16:00:12 +0000
Files and hashes: 1: J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (hash: Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=)
2: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl (hash: knsiF1RtLDIZfdeqKx5//GTXDxZmdoDZfx2CFwTMjrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:a3:95:c7:89:f6:67:62:66:e2:06:00:b4:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Validity
Not Before: Sep 22 16:00:12 2026 GMT
Not After : Sep 23 16:00:12 2026 GMT
Subject: CN=ba93be59e82c449e5bc9897334a8c34612c1dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:33:46:c1:e4:31:40:61:e0:ab:4c:5c:a8:
92:c5:12:40:7b:cf:d3:2b:98:6f:90:04:23:d5:14:
cc:1a:82:86:54:9a:70:44:73:a7:4d:1c:0e:4f:99:
e7:79:74:83:7f:13:95:8c:38:e5:ba:8d:04:9c:62:
ea:5a:ac:1b:38:17:59:52:8d:98:1c:9a:02:b7:1e:
5e:c4:76:be:fb:24:c3:15:77:ef:68:4b:b4:6c:3c:
68:72:0b:de:98:58:a6:3b:e0:94:47:b6:00:e3:6c:
60:6a:77:ae:60:dc:58:6a:ad:d6:7f:38:60:9d:76:
30:13:4b:d0:f5:2a:a9:7a:d2:86:5e:6e:6a:a5:cd:
99:35:26:dd:eb:3c:49:c0:a5:39:9c:42:df:4e:14:
78:37:34:a9:63:6c:15:6a:79:b2:ea:c3:dc:3a:a6:
5c:54:20:b0:16:01:da:5a:dc:b3:f6:fe:25:12:22:
6b:dc:ec:ee:79:4a:00:8c:67:37:4c:d4:4f:49:0e:
a7:50:75:66:59:d1:67:d1:b3:dd:66:bd:f7:22:c7:
7a:38:1b:dd:55:5a:18:9b:62:a0:07:c3:63:82:b3:
3b:2c:7c:e8:bb:93:97:49:b6:81:3e:a8:83:5d:9d:
34:4a:1e:d0:98:50:c7:f7:99:f0:f6:2e:d5:8d:f7:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:BE:59:E8:2C:44:9E:5B:C9:89:73:34:A8:C3:46:12:C1:DC:46
X509v3 Authority Key Identifier:
keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:dd:89:87:8a:64:d2:1d:2f:b1:c7:42:21:e7:05:7f:6f:
3d:22:d1:95:17:7d:f3:c6:48:5d:4c:14:0d:38:9b:f9:0d:c6:
21:57:00:ef:46:d4:57:36:16:c4:c9:a8:9d:ac:3a:ba:b6:a4:
27:13:16:b2:b6:da:77:c6:64:1a:db:1b:ef:f7:48:e6:57:c8:
91:a3:29:a6:a8:6e:09:86:cf:fc:b2:f4:19:f7:ba:85:52:20:
2d:bf:df:1e:b7:ad:df:ac:56:2b:42:24:fa:a9:de:73:06:4b:
72:8a:29:95:49:b3:60:aa:d4:ad:0a:b8:26:ab:0b:99:41:ae:
cc:b2:f3:eb:97:e9:65:57:93:1f:51:f1:66:1f:42:e2:76:0b:
b2:05:aa:51:8a:9f:fe:db:ba:b6:6b:90:5d:88:19:ae:4e:5f:
fe:04:0a:52:ef:04:3c:7d:64:96:ad:33:39:3a:d2:30:66:ec:
be:2e:e6:75:98:33:95:57:95:cc:d1:78:13:b0:57:91:4f:66:
6a:73:9d:eb:20:65:c6:c9:5f:d7:00:48:65:71:22:c6:87:86:
10:ad:a8:ea:73:29:c3:38:e6:c1:0e:13:20:e4:02:2d:7c:e9:
72:d3:61:cb:ed:ae:aa:a4:d4:17:89:d0:98:84:cf:28:73:da:
88:84:d5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2KOVx4n2Z2Jm4gYAtM4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzUzMGE2Zjc0ZmE4MWVkM2Q2Y2M2YzM0ZTI5NWI0Mjgw
OWU0ZmYwHhcNMjYwOTIyMTYwMDEyWhcNMjYwOTIzMTYwMDEyWjAzMTEwLwYDVQQD
EyhiYTkzYmU1OWU4MmM0NDllNWJjOTg5NzMzNGE4YzM0NjEyYzFkYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QIzRsHkMUBh4KtMXKiSxRJAe8/T
K5hvkAQj1RTMGoKGVJpwRHOnTRwOT5nneXSDfxOVjDjluo0EnGLqWqwbOBdZUo2Y
HJoCtx5exHa++yTDFXfvaEu0bDxocgvemFimO+CUR7YA42xganeuYNxYaq3Wfzhg
nXYwE0vQ9SqpetKGXm5qpc2ZNSbd6zxJwKU5nELfThR4NzSpY2wVanmy6sPcOqZc
VCCwFgHaWtyz9v4lEiJr3OzueUoAjGc3TNRPSQ6nUHVmWdFn0bPdZr33Isd6OBvd
VVoYm2KgB8NjgrM7LHzou5OXSbaBPqiDXZ00Sh7QmFDH95nw9i7VjfdReQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqTvlnoLESeW8mJczSow0YSwdxGMB8GA1UdIwQY
MBaAFGl1MKb3T6ge09bMbDTilbQoCeT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhVd3B2ZFBxQjdUMXN4c05PS1Z0Q2dKNVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xM2RlNzAtNDM0ZC00NTliLTk1OWUt
NDUwMzE4ZDM3NWZmLzEvYVhVd3B2ZFBxQjdUMXN4c05PS1Z0Q2dKNVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xM2RlNzAtNDM0ZC00NTliLTk1OWUtNDUwMzE4ZDM3NWZm
LzEvYVhVd3B2ZFBxQjdUMXN4c05PS1Z0Q2dKNVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPXdiYeK
ZNIdL7HHQiHnBX9vPSLRlRd988ZIXUwUDTib+Q3GIVcA70bUVzYWxMmonaw6urak
JxMWsrbad8ZkGtsb7/dI5lfIkaMppqhuCYbP/LL0Gfe6hVIgLb/fHret36xWK0Ik
+qnecwZLcooplUmzYKrUrQq4JqsLmUGuzLLz65fpZVeTH1HxZh9C4nYLsgWqUYqf
/tu6tmuQXYgZrk5f/gQKUu8EPH1klq0zOTrSMGbsvi7mdZgzlVeVzNF4E7BXkU9m
anOd6yBlxslf1wBIZXEixoeGEK2o6nMpwzjmwQ4TIOQCLXzpctNhy+2uqqTUF4nQ
mITPKHPaiITVuA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:18 2026 by rpki-client