Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: vjlwr+vUQG7PBEv46WsU8YmWJnxwnCFndMAE6hWQO3s=
Subject key identifier: C9:8C:FE:1E:AE:81:2B:8A:65:32:1A:9A:D3:2A:92:A3:9F:A9:A2:CE
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019EC0DB3233626D8FC8127F6C1B260346AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 12:00:50 +0000
Manifest this update: Sat 13 Jun 2026 12:00:50 +0000
Manifest next update: Sun 14 Jun 2026 12:00:50 +0000
Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: o8LCZBseBnVbdkqvAnpzQvpVxHe+55vfSzBOzT8+g2g=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:32:33:62:6d:8f:c8:12:7f:6c:1b:26:03:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jun 13 12:00:50 2026 GMT
Not After : Jun 14 12:00:50 2026 GMT
Subject: CN=c98cfe1eae812b8a65321a9ad32a92a39fa9a2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:22:d0:03:80:f7:8d:36:2f:65:f5:a5:41:
00:10:df:c9:ca:1b:df:b1:aa:ac:2c:46:4e:d8:45:
97:4c:30:4c:74:56:b3:51:97:45:7c:f5:f4:58:77:
3d:df:70:2e:2f:7a:15:e5:52:5e:03:f5:9e:9e:89:
95:aa:e5:6c:98:37:51:f2:9c:07:55:14:21:1d:55:
58:4a:fa:d9:4d:07:80:22:3a:00:dc:be:f5:23:74:
97:e3:b6:24:28:fe:40:2d:eb:02:be:71:84:c4:76:
19:41:f0:b0:a6:14:9b:5b:f0:65:df:ec:00:3e:b0:
1e:55:c8:55:90:5f:62:65:a1:41:e5:4a:d8:0c:1c:
f3:39:50:ac:9e:34:f1:c2:6e:5b:23:e5:4f:cd:7e:
77:78:f4:0e:8d:51:fe:43:86:2e:6d:a7:e8:c8:43:
bf:8e:0b:e0:43:88:c7:50:fb:2f:02:5c:67:3e:5f:
d5:ad:78:a0:86:79:66:8d:4f:86:1a:a5:83:8a:a8:
97:26:4f:ff:1f:6c:6b:d8:91:8e:91:02:40:1f:d6:
a4:90:98:c8:fc:d5:90:5c:8d:ac:8f:2d:26:30:b8:
2e:2b:86:b9:85:30:af:57:80:f8:a2:73:49:eb:4b:
ea:48:a1:7e:4e:64:28:ff:bd:e2:ae:6d:0e:79:2d:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:FE:1E:AE:81:2B:8A:65:32:1A:9A:D3:2A:92:A3:9F:A9:A2:CE
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0d:18:61:48:58:b7:a6:cf:e4:d9:85:d6:95:f4:25:5a:f6:
9b:a5:dd:bf:23:26:1c:fe:47:f7:dc:fb:cb:8b:3d:31:99:1c:
a3:c1:ab:5f:c2:8d:4a:50:3c:bd:5f:d3:72:ee:1c:33:37:c5:
7c:69:77:0b:93:78:50:66:36:bf:fd:b4:de:4a:7d:59:9c:c2:
35:58:10:b6:a4:91:eb:61:85:ab:da:8f:96:d5:1f:94:a1:68:
7d:3d:f5:a2:50:0d:c1:72:f9:55:e2:30:23:23:44:9e:48:9c:
fb:e1:67:ad:2a:f8:bb:b5:7d:2e:86:40:dc:7f:14:b3:29:54:
44:bc:4e:47:30:2a:43:5a:3c:46:e6:87:2b:02:71:7f:06:33:
a9:94:d9:8e:35:15:00:7d:35:20:af:f5:0f:21:61:94:ef:57:
ef:50:a3:e3:0e:0f:63:1d:35:4a:13:b9:22:43:f2:06:ff:d0:
7d:d7:09:80:e1:01:ec:40:9d:db:06:53:4b:34:be:a6:2e:8d:
7f:7d:b9:64:8b:c1:c3:43:4d:42:5c:a0:83:e5:d1:62:ed:28:
e3:c7:4c:4b:fb:e0:75:a4:36:02:ea:e3:0a:5e:9f:77:da:14:
b5:c2:5b:c5:83:01:c4:58:4b:18:5a:d3:1c:72:a0:2d:8f:40:
3c:99:f1:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2zIzYm2PyBJ/bBsmA0aqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm
YjEyMDkwHhcNMjYwNjEzMTIwMDUwWhcNMjYwNjE0MTIwMDUwWjAzMTEwLwYDVQQD
EyhjOThjZmUxZWFlODEyYjhhNjUzMjFhOWFkMzJhOTJhMzlmYTlhMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWYi0AOA9402L2X1pUEAEN/Jyhvf
saqsLEZO2EWXTDBMdFazUZdFfPX0WHc933AuL3oV5VJeA/WenomVquVsmDdR8pwH
VRQhHVVYSvrZTQeAIjoA3L71I3SX47YkKP5ALesCvnGExHYZQfCwphSbW/Bl3+wA
PrAeVchVkF9iZaFB5UrYDBzzOVCsnjTxwm5bI+VPzX53ePQOjVH+Q4YubafoyEO/
jgvgQ4jHUPsvAlxnPl/VrXighnlmjU+GGqWDiqiXJk//H2xr2JGOkQJAH9akkJjI
/NWQXI2sjy0mMLguK4a5hTCvV4D4onNJ60vqSKF+TmQo/73irm0OeS1dpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmM/h6ugSuKZTIamtMqkqOfqaLOMB8GA1UdIwQY
MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt
MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi
LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA0YYUhY
t6bP5NmF1pX0JVr2m6XdvyMmHP5H99z7y4s9MZkco8GrX8KNSlA8vV/Tcu4cMzfF
fGl3C5N4UGY2v/203kp9WZzCNVgQtqSR62GFq9qPltUflKFofT31olANwXL5VeIw
IyNEnkic++FnrSr4u7V9LoZA3H8UsylURLxORzAqQ1o8RuaHKwJxfwYzqZTZjjUV
AH01IK/1DyFhlO9X71Cj4w4PYx01ShO5IkPyBv/QfdcJgOEB7ECd2wZTSzS+pi6N
f325ZIvBw0NNQlygg+XRYu0o48dMS/vgdaQ2AurjCl6fd9oUtcJbxYMBxFhLGFrT
HHKgLY9APJnxKg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:09 2026 by rpki-client