Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: z4kzsDaShIp/t2uXVdGH30sifRXY1B72MlZFu3FNUzY=
Subject key identifier: 8A:65:B8:42:8C:61:AD:D4:CF:A4:A7:7D:46:DD:9B:7D:EC:27:B2:E8
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 01A0C1E839D03398FC20A2BAF6F1B3170DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 1330
Signing time: Mon 21 Sep 2026 03:00:16 +0000
Manifest this update: Mon 21 Sep 2026 03:00:16 +0000
Manifest next update: Tue 22 Sep 2026 03:00:16 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: ChnhFd0p9OQMUEMuEUcytccpccbKOFUCZkQa2teDl+g=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:39:d0:33:98:fc:20:a2:ba:f6:f1:b3:17:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Sep 21 03:00:16 2026 GMT
Not After : Sep 22 03:00:16 2026 GMT
Subject: CN=8a65b8428c61add4cfa4a77d46dd9b7dec27b2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:00:82:ab:06:d7:2e:fc:99:07:ae:4d:35:
e2:e5:f2:06:74:ba:3f:d0:f6:aa:cd:48:bc:b0:e9:
89:bf:ff:2d:7e:47:63:07:ba:f9:94:ea:f9:90:ed:
27:69:5c:40:16:0e:d1:4c:48:4d:a9:1b:4b:5c:94:
12:30:bd:c1:44:b1:54:20:30:db:42:23:2c:aa:02:
94:68:50:65:e0:e0:c3:8e:bf:f6:0e:a9:e5:b1:21:
03:f0:b5:7a:c6:a1:54:64:cf:c7:a5:f2:3e:66:1c:
57:d8:c0:fa:72:85:61:78:d3:09:64:e7:53:50:85:
f6:aa:37:0b:4d:c8:f0:f8:b8:0f:dc:52:96:ce:1d:
bb:d9:47:e3:c6:5e:75:93:da:1c:ae:a0:8c:6e:6e:
82:28:ef:e0:d9:01:80:58:d2:c6:56:7f:81:9f:2e:
99:45:19:a1:83:fd:26:da:98:c3:c9:b5:b8:e6:61:
66:ae:43:da:b3:7e:38:96:71:b9:ea:95:21:59:d6:
38:ba:66:54:9d:12:35:34:61:0b:9f:5a:00:48:3e:
b0:cd:65:33:bc:fe:9c:18:ae:35:d2:e8:98:6d:7f:
b0:28:67:dc:e9:e2:6e:63:e7:a2:a1:77:3b:94:ea:
bf:4d:4d:6f:50:23:32:46:ee:84:55:48:27:39:54:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:65:B8:42:8C:61:AD:D4:CF:A4:A7:7D:46:DD:9B:7D:EC:27:B2:E8
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:34:7f:b5:7e:58:55:5b:13:cd:3b:26:09:f3:95:2b:9c:
31:ce:fc:0b:61:e3:f8:73:b9:51:f2:ed:db:bb:9c:26:51:cc:
ba:82:06:da:61:f9:6c:d8:3e:ff:40:d3:d2:3c:6f:da:8d:a7:
81:63:7e:83:ad:37:39:f8:55:63:dd:07:a1:1c:0c:1b:1f:55:
00:71:65:e2:f5:06:5e:1a:29:3f:09:f8:5e:4d:07:f9:7a:23:
b0:94:64:2f:d0:af:8f:8b:ae:05:6b:94:d7:0f:14:74:6d:22:
2c:93:36:73:5a:7c:61:e0:4e:d7:53:30:b6:ed:20:51:3a:18:
27:74:ca:86:2e:e8:98:ed:8d:fd:3d:47:5a:dc:b8:df:71:a7:
17:f4:73:67:64:2f:b7:f4:03:4e:0c:7e:71:6c:15:6f:34:92:
a2:2c:53:8f:bc:7b:6f:65:14:90:3b:e7:57:64:85:7e:cb:76:
96:ae:8f:72:33:ab:91:38:21:de:3a:bc:61:f3:b3:47:d5:e0:
52:11:2b:ac:6c:9f:c5:7b:44:b5:98:0a:9d:85:0e:f1:3c:9d:
fd:0b:63:bc:85:2b:49:5d:d3:86:b3:f8:5f:ec:d3:81:94:77:
42:29:b8:f9:e1:6f:2f:d5:23:30:5e:b4:ff:e7:ae:d2:3c:82:
8a:e8:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:15:29 2026 by rpki-client