Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: +Rer5qPHaXL7EyZvIvexPENa17ouHt+I/D67xZIHKjo=
Subject key identifier: 1C:4B:23:47:CA:48:EC:D8:13:59:0C:95:9C:2E:79:50:9B:0B:45:31
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 01A0C40E8A2FF335A876E9420FCBBECF5705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 13:01:22 +0000
Manifest this update: Mon 21 Sep 2026 13:01:22 +0000
Manifest next update: Tue 22 Sep 2026 13:01:22 +0000
Files and hashes: 1: 2s8BwWfMsc1DdyxWLxSnFJbe2GM.roa (hash: NV7KOQeRFSKnPsVfH3yXaw+5FrZAKvvgJHtK0M65oGw=)
2: 5Qkrye_BdRj_KcilndhhMxwQKeU.roa (hash: M+o8cm6+Lmjuj+2WuiEMDee7ML6JKyuX/hZR2CMS3Pk=)
3: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: MR1ycN2n9pKXh2cBrZaW9t72Q8HMBrYVJl6k/9iPlqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:8a:2f:f3:35:a8:76:e9:42:0f:cb:be:cf:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Sep 21 13:01:22 2026 GMT
Not After : Sep 22 13:01:22 2026 GMT
Subject: CN=1c4b2347ca48ecd813590c959c2e79509b0b4531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:02:83:6b:a1:60:0a:64:fe:59:33:df:7a:
58:75:ee:27:1a:cb:1a:5b:b6:dc:04:c1:4b:d1:ca:
d8:03:d4:91:a6:88:78:d6:dc:5c:25:81:09:f3:22:
43:81:3e:0c:e3:e8:2a:24:aa:8e:61:08:30:db:0b:
1d:97:6e:d8:39:71:53:d8:61:68:8d:9d:d2:4e:aa:
e0:4b:f3:6f:01:8f:38:d2:c5:a5:38:fd:ab:56:4a:
ad:ad:2c:1b:52:a3:ae:3a:85:58:23:3e:ac:41:55:
e6:31:fd:5f:db:1a:9c:2a:92:0c:80:95:d2:22:3b:
3f:71:4a:7f:a3:53:65:d8:14:1d:53:50:94:de:1d:
df:be:26:d8:44:4c:e6:e2:85:f6:93:3e:10:fa:53:
16:4d:fd:6d:39:ad:f3:8b:b9:61:fb:a7:89:93:06:
a3:6f:0f:ed:70:f2:99:12:d6:30:25:d2:fa:46:6e:
39:74:78:12:76:c6:33:b1:3e:0b:3b:77:47:11:a4:
c8:38:c8:d2:bb:fe:e2:aa:f0:4e:b7:b8:2a:ea:fc:
4f:6f:61:b0:26:e5:a8:c6:b7:81:2b:84:5c:45:e5:
2f:ea:90:bd:e8:6e:2c:71:04:57:40:a6:83:2c:f3:
f0:e7:90:15:58:db:be:51:72:45:3d:e9:05:5f:81:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:23:47:CA:48:EC:D8:13:59:0C:95:9C:2E:79:50:9B:0B:45:31
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:e7:62:47:68:ea:e6:9b:f9:6b:4f:ed:8f:6e:f3:d5:4a:
aa:ef:a9:c8:d2:9f:73:42:f0:ca:fd:63:d0:e7:21:d9:07:3d:
f2:43:c0:13:85:88:8d:70:e1:1f:f4:fb:23:19:1b:88:00:00:
8d:bc:b5:b1:41:39:e6:83:f5:6b:c0:8e:d4:1b:4f:4e:4a:67:
21:a9:7b:81:03:87:a5:f6:e2:e3:07:24:1c:d4:34:f1:99:1d:
f9:be:38:e3:1c:28:9b:0c:00:c3:3d:43:d8:f4:c3:a8:c3:84:
d7:67:99:bb:ef:85:b7:a4:b9:3f:48:33:d9:dd:4f:0d:18:2c:
0d:7d:60:4c:84:63:19:56:75:17:e0:2b:df:03:a8:c2:60:18:
33:90:1f:cb:3f:96:06:96:1e:b7:35:6e:39:a6:e2:48:17:d6:
51:c6:cd:5d:41:07:37:7d:75:17:3e:8d:62:cd:f5:ce:bd:ba:
09:35:f2:63:3e:3b:5c:35:06:11:ca:49:6e:1e:1f:de:3a:48:
5b:c4:4d:b4:40:64:07:fb:fd:6f:42:3d:d4:59:e1:a5:1d:32:
d9:92:4e:f1:b5:63:5d:2d:86:b1:ab:da:2b:11:97:c3:5a:45:
f7:bc:97:90:88:d9:5d:d2:59:61:30:ad:42:a3:92:b3:d3:b4:
df:1a:28:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDoov8zWodulCD8u+z1cFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2
MDBiZWYwHhcNMjYwOTIxMTMwMTIyWhcNMjYwOTIyMTMwMTIyWjAzMTEwLwYDVQQD
EygxYzRiMjM0N2NhNDhlY2Q4MTM1OTBjOTU5YzJlNzk1MDliMGI0NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx44Cg2uhYApk/lkz33pYde4nGssa
W7bcBMFL0crYA9SRpoh41txcJYEJ8yJDgT4M4+gqJKqOYQgw2wsdl27YOXFT2GFo
jZ3STqrgS/NvAY840sWlOP2rVkqtrSwbUqOuOoVYIz6sQVXmMf1f2xqcKpIMgJXS
Ijs/cUp/o1Nl2BQdU1CU3h3fvibYREzm4oX2kz4Q+lMWTf1tOa3zi7lh+6eJkwaj
bw/tcPKZEtYwJdL6Rm45dHgSdsYzsT4LO3dHEaTIOMjSu/7iqvBOt7gq6vxPb2Gw
JuWoxreBK4RcReUv6pC96G4scQRXQKaDLPPw55AVWNu+UXJFPekFX4H5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxLI0fKSOzYE1kMlZwueVCbC0UxMB8GA1UdIwQY
MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt
M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi
LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBznYkdo
6uab+WtP7Y9u89VKqu+pyNKfc0Lwyv1j0Och2Qc98kPAE4WIjXDhH/T7IxkbiAAA
jby1sUE55oP1a8CO1BtPTkpnIal7gQOHpfbi4wckHNQ08Zkd+b444xwomwwAwz1D
2PTDqMOE12eZu++Ft6S5P0gz2d1PDRgsDX1gTIRjGVZ1F+Ar3wOowmAYM5Afyz+W
BpYetzVuOabiSBfWUcbNXUEHN311Fz6NYs31zr26CTXyYz47XDUGEcpJbh4f3jpI
W8RNtEBkB/v9b0I91FnhpR0y2ZJO8bVjXS2GsavaKxGXw1pF97yXkIjZXdJZYTCt
QqOSs9O03xooqA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:07:18 2026 by rpki-client