Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: oCc/BS2ytmssYi18Wi4AUC+DEyGEoHhZqCaK10EaQKw=
Subject key identifier: C1:FE:8E:30:CA:38:E8:86:1C:FE:F8:A2:A8:98:B1:AA:C7:CD:0A:5F
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 019FAA87ACE3E68D1E96D855C855E80CC458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 08FF
Signing time: Tue 28 Jul 2026 21:00:46 +0000
Manifest this update: Tue 28 Jul 2026 21:00:46 +0000
Manifest next update: Wed 29 Jul 2026 21:00:46 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: i3Lf2mC0uMgldgFRzYQlkArbK1hepQcjSh2IyH7C6AE=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ac:e3:e6:8d:1e:96:d8:55:c8:55:e8:0c:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Jul 28 21:00:46 2026 GMT
Not After : Jul 29 21:00:46 2026 GMT
Subject: CN=c1fe8e30ca38e8861cfef8a2a898b1aac7cd0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:2f:f1:51:f8:63:43:60:a0:e5:77:b2:b8:
00:89:a9:b1:dc:03:62:0f:3c:e1:f7:de:2c:c7:db:
07:58:bb:0c:db:cd:8b:43:f7:f7:85:5c:4a:a0:13:
a3:2b:6d:4d:df:a9:c3:38:ec:ee:0a:07:fb:22:b0:
1c:8e:a6:22:6c:3d:65:be:da:1f:86:50:c4:bc:ec:
45:2f:cb:88:d6:16:fe:04:85:77:42:40:ba:0b:f7:
3c:e9:86:a0:47:53:4d:af:9a:2b:3b:65:a9:38:8b:
1d:5f:a0:c0:60:e3:5f:44:49:ce:c6:2b:a7:2f:4d:
56:9d:c7:e2:c4:bc:c4:1a:68:e5:63:5a:06:10:9e:
84:be:b0:e4:eb:8d:3d:30:62:ae:24:ad:bc:8d:ce:
11:5a:f7:74:bc:00:18:18:a6:60:f5:bd:b8:b1:5e:
76:c0:ca:1a:63:a5:5d:ab:a6:09:b3:d1:7a:d0:52:
ec:4c:05:57:9e:4a:55:85:57:58:9b:8e:66:c6:c3:
db:5c:a6:80:a7:04:4b:c4:ea:1f:3c:18:a1:a5:23:
1a:5f:85:46:b4:0a:80:ad:d7:65:03:f1:75:47:49:
3f:06:15:51:f2:ca:28:b4:e0:ea:84:44:78:72:58:
7d:6f:96:c3:b2:e0:a8:0f:7e:0f:a1:91:28:30:52:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:8E:30:CA:38:E8:86:1C:FE:F8:A2:A8:98:B1:AA:C7:CD:0A:5F
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0c:74:7f:b6:1b:88:52:49:3e:2e:92:43:76:5f:ec:61:8f:
a1:09:0c:e0:d7:88:8d:0c:81:9f:ef:79:3d:3b:12:6a:c4:89:
b7:55:fb:f1:79:58:c5:10:9c:60:0f:13:4a:69:09:89:9c:4e:
9b:df:cf:d8:09:af:3f:55:54:79:9a:fd:66:68:38:70:02:55:
f2:3d:4c:56:f2:aa:a7:9f:0c:a0:23:12:ec:d6:ee:84:a0:68:
97:14:a2:39:10:4b:32:ac:26:04:84:d8:7b:d1:de:07:d8:a1:
27:30:ee:fa:b8:e7:15:fa:cf:d8:f2:21:8c:18:c4:1d:e9:80:
44:1a:cf:00:c4:0a:1d:1f:be:04:79:6a:39:eb:64:aa:ae:14:
9e:f6:2b:6e:9f:cc:14:5a:5e:65:53:0b:e1:2a:dd:19:b6:f8:
36:ee:e5:d8:7c:45:f3:c4:5b:3e:cf:1c:e3:0a:3e:b0:9b:80:
af:39:1f:0b:9f:42:72:28:3d:15:1c:13:55:db:7e:9c:f0:98:
c2:1f:8d:de:6d:a3:f3:aa:1d:5b:d5:25:e8:33:3d:ee:4d:b7:
67:49:be:3b:47:80:a6:28:24:d2:8a:69:bf:ae:29:15:21:98:
18:84:f7:32:32:b3:f7:e7:79:a4:22:d5:f2:4c:cc:e0:3b:71:
b3:c8:d8:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh6zj5o0elthVyFXoDMRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjYwNzI4MjEwMDQ2WhcNMjYwNzI5MjEwMDQ2WjAzMTEwLwYDVQQD
EyhjMWZlOGUzMGNhMzhlODg2MWNmZWY4YTJhODk4YjFhYWM3Y2QwYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31Uv8VH4Y0NgoOV3srgAiamx3ANi
Dzzh994sx9sHWLsM282LQ/f3hVxKoBOjK21N36nDOOzuCgf7IrAcjqYibD1lvtof
hlDEvOxFL8uI1hb+BIV3QkC6C/c86YagR1NNr5orO2WpOIsdX6DAYONfREnOxiun
L01WncfixLzEGmjlY1oGEJ6EvrDk6409MGKuJK28jc4RWvd0vAAYGKZg9b24sV52
wMoaY6Vdq6YJs9F60FLsTAVXnkpVhVdYm45mxsPbXKaApwRLxOofPBihpSMaX4VG
tAqArddlA/F1R0k/BhVR8sootODqhER4clh9b5bDsuCoD34PoZEoMFKZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH+jjDKOOiGHP74oqiYsarHzQpfMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQx0f7Yb
iFJJPi6SQ3Zf7GGPoQkM4NeIjQyBn+95PTsSasSJt1X78XlYxRCcYA8TSmkJiZxO
m9/P2AmvP1VUeZr9Zmg4cAJV8j1MVvKqp58MoCMS7NbuhKBolxSiORBLMqwmBITY
e9HeB9ihJzDu+rjnFfrP2PIhjBjEHemARBrPAMQKHR++BHlqOetkqq4UnvYrbp/M
FFpeZVML4SrdGbb4Nu7l2HxF88RbPs8c4wo+sJuArzkfC59Ccig9FRwTVdt+nPCY
wh+N3m2j86odW9Ul6DM97k23Z0m+O0eApigk0oppv64pFSGYGIT3MjKz9+d5pCLV
8kzM4Dtxs8jYnA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:15 2026 by rpki-client