Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: fv/qqIPllYWPn1A04GwuIeAGkNz7HFK4Y9lgU5lgd38=
Subject key identifier: FF:07:3C:68:9E:81:7E:4E:90:7D:E9:81:CD:EA:AC:2C:B5:3C:95:2A
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019D98F411B25FADAE66C71466544E13419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0A9A
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: 4EV0GNctvb9holk5gGMfoIWE/OTjPGJXzr2OzrqHstM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:11:b2:5f:ad:ae:66:c7:14:66:54:4e:13:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=ff073c689e817e4e907de981cdeaac2cb53c952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:fc:86:4d:fd:97:63:84:f0:9a:77:e1:c8:
ed:bb:81:de:36:47:00:ba:c6:1d:db:35:94:1a:85:
8a:b3:fa:7c:2e:48:92:00:00:8a:fa:01:ca:db:e9:
dd:89:b1:b6:05:4d:4c:07:bb:fd:b5:20:2f:1f:b6:
5a:f7:99:ce:18:4d:37:ba:25:07:07:cc:8e:17:23:
3e:46:5f:02:ee:a3:c0:c8:85:26:33:14:30:48:a5:
91:ec:b2:df:bd:86:ab:9f:27:0c:bf:86:2c:2f:de:
aa:f1:79:13:68:98:4f:1a:45:28:67:1a:76:98:14:
60:c8:2f:bb:d5:7c:22:8a:cc:e3:bf:51:a4:0e:e7:
f8:27:e6:29:c4:29:d4:40:99:70:27:d7:50:fd:7c:
67:6a:bb:80:11:8f:8d:44:19:35:dc:a1:ec:11:cf:
21:08:dd:4a:fb:de:bf:e5:35:80:be:8f:b3:af:36:
e7:13:d7:8b:a3:28:67:98:9f:9f:78:a3:4d:5c:f8:
f6:0b:f1:e7:e5:56:df:2d:4e:f8:b0:df:52:0c:1f:
70:76:98:aa:78:58:63:72:0f:f0:c8:f6:c4:72:3a:
c0:db:61:dc:27:ce:e8:d9:1a:40:a1:54:07:d3:22:
5b:d8:65:34:74:c9:1f:a5:75:55:6e:c8:1e:5b:89:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:3C:68:9E:81:7E:4E:90:7D:E9:81:CD:EA:AC:2C:B5:3C:95:2A
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4c:f3:4b:c1:56:49:6d:f2:77:b8:1f:a3:79:46:48:79:69:
cc:bb:c0:a8:04:35:03:0e:46:ec:3d:c3:6b:4e:10:a4:8d:47:
bf:a8:5c:19:be:80:78:b9:64:d6:e9:b8:60:88:9b:e4:35:4c:
07:01:25:0f:17:0e:19:27:3c:93:c8:d8:2b:19:3c:83:04:a6:
b4:ae:ec:ec:6e:d6:19:af:a9:0a:2e:d7:43:fc:8c:b6:94:4b:
3e:b3:78:0c:c0:77:00:19:1c:20:15:89:67:04:4f:0e:40:3b:
f0:2f:e8:e8:17:2b:b7:9d:4b:dc:40:b9:0e:87:39:54:4e:c0:
c5:7a:e7:f2:26:c1:72:d0:62:78:31:74:fe:5f:30:31:38:ef:
87:5e:fb:8b:78:8c:78:9d:81:01:41:2a:25:d5:d8:6a:4e:95:
35:17:0f:fc:0a:c7:0a:bb:f5:97:9a:9f:0a:ba:d9:40:aa:5f:
d6:11:a6:30:3a:8b:e2:24:17:c9:c4:93:8e:25:8c:5d:a5:93:
21:8d:44:a5:9f:37:8f:90:dc:75:5e:66:a4:3d:14:d5:46:e0:
15:eb:b9:0b:b2:21:f6:5d:b6:ec:9b:ee:b8:5a:73:b2:64:85:
ae:3e:25:56:70:59:1b:b8:af:3e:47:7f:4a:47:36:e2:39:1e:
e6:19:76:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9BGyX62uZscUZlROE0GeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5
Y2VlMWQwHhcNMjYwNDE3MDEwMDI1WhcNMjYwNDE4MDEwMDI1WjAzMTEwLwYDVQQD
EyhmZjA3M2M2ODllODE3ZTRlOTA3ZGU5ODFjZGVhYWMyY2I1M2M5NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRf8hk39l2OE8Jp34cjtu4HeNkcA
usYd2zWUGoWKs/p8LkiSAACK+gHK2+ndibG2BU1MB7v9tSAvH7Za95nOGE03uiUH
B8yOFyM+Rl8C7qPAyIUmMxQwSKWR7LLfvYarnycMv4YsL96q8XkTaJhPGkUoZxp2
mBRgyC+71Xwiiszjv1GkDuf4J+YpxCnUQJlwJ9dQ/XxnaruAEY+NRBk13KHsEc8h
CN1K+96/5TWAvo+zrzbnE9eLoyhnmJ+feKNNXPj2C/Hn5VbfLU74sN9SDB9wdpiq
eFhjcg/wyPbEcjrA22HcJ87o2RpAoVQH0yJb2GU0dMkfpXVVbsgeW4mYKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8HPGiegX5OkH3pgc3qrCy1PJUqMB8GA1UdIwQY
MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt
NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4
LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0zzS8FW
SW3yd7gfo3lGSHlpzLvAqAQ1Aw5G7D3Da04QpI1Hv6hcGb6AeLlk1um4YIib5DVM
BwElDxcOGSc8k8jYKxk8gwSmtK7s7G7WGa+pCi7XQ/yMtpRLPrN4DMB3ABkcIBWJ
ZwRPDkA78C/o6Bcrt51L3EC5Doc5VE7AxXrn8ibBctBieDF0/l8wMTjvh177i3iM
eJ2BAUEqJdXYak6VNRcP/ArHCrv1l5qfCrrZQKpf1hGmMDqL4iQXycSTjiWMXaWT
IY1EpZ83j5DcdV5mpD0U1UbgFeu5C7Ih9l227JvuuFpzsmSFrj4lVnBZG7ivPkd/
Skc24jke5hl2bg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:08 2026 by rpki-client