Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: GmV/97fU8+wuhA3L+Iqy3bMB1ebNgyjjZNyIZGAvF08=
Subject key identifier: 53:0B:04:CF:C3:EB:7C:27:0C:A9:C0:9A:9E:5D:0F:B5:6F:37:F3:00
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 01A13A805EBEBCC284BBF83071F60EB9FF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 033D
Signing time: Wed 14 Oct 2026 13:00:53 +0000
Manifest this update: Wed 14 Oct 2026 13:00:53 +0000
Manifest next update: Thu 15 Oct 2026 13:00:53 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: XDCZyO7vgzScZfDNX075/vWAkq4NyjxL2+HZZwfJdm0=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:80:5e:be:bc:c2:84:bb:f8:30:71:f6:0e:b9:ff:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Oct 14 13:00:53 2026 GMT
Not After : Oct 15 13:00:53 2026 GMT
Subject: CN=530b04cfc3eb7c270ca9c09a9e5d0fb56f37f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:ca:5c:ae:d0:0d:94:2f:2e:44:84:15:88:
95:bf:bf:cd:d8:69:da:24:7b:a1:03:0e:7d:9f:e2:
95:7f:23:09:be:cd:91:a8:d7:ed:cd:02:af:9b:10:
b9:7a:5f:51:7e:97:7d:69:52:28:36:34:a3:ee:ae:
08:7f:f6:73:33:92:ee:ef:95:ce:7b:5a:ff:02:f2:
52:02:58:9b:6d:a6:a4:a3:9d:4a:09:a9:85:1a:01:
ed:2d:2b:e1:02:ee:7f:1b:53:05:71:b6:4f:d8:e3:
76:40:15:b8:8b:63:21:52:14:6d:16:3c:6a:90:f0:
45:c2:4c:86:e9:40:39:db:f2:f1:71:6e:93:10:68:
96:a4:cf:70:eb:28:b9:cd:8b:ec:cd:82:65:0e:35:
b3:01:73:df:48:42:2d:1d:f5:82:8f:9b:85:a0:b0:
87:b6:e4:97:a3:fc:81:38:95:b3:76:bd:97:76:ff:
0a:69:47:b4:c4:89:3b:d2:44:22:7d:36:a1:65:97:
1e:40:d9:a7:ab:d5:44:df:eb:e4:7f:6d:d8:61:49:
d2:4c:0e:82:b5:60:b6:be:ff:c0:46:7a:a4:eb:7e:
0c:21:8e:5e:a9:0f:4c:02:69:40:c5:da:af:63:60:
35:36:90:9e:68:08:e6:c6:87:da:36:77:ee:2f:fc:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:04:CF:C3:EB:7C:27:0C:A9:C0:9A:9E:5D:0F:B5:6F:37:F3:00
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:d0:06:6b:6d:89:3c:06:ec:07:05:c8:e6:01:61:eb:85:
93:a2:28:75:67:9b:20:e7:5f:b7:bb:11:91:23:72:1c:ba:68:
cc:56:4e:09:ef:da:8b:be:77:15:72:c5:6d:ab:e1:a0:21:f9:
d2:8c:c0:9d:6b:64:bb:89:55:52:bf:e2:3f:68:c3:04:90:42:
e4:74:2a:ee:2b:66:a4:5a:d1:1a:73:62:62:97:f9:a6:f3:25:
36:46:c4:c9:86:dc:de:a7:a7:da:ce:94:d5:f4:72:aa:51:17:
51:ed:a6:99:e2:1b:20:88:bb:00:0e:c7:05:5f:5c:ff:31:d8:
07:68:f9:40:39:fa:30:7a:45:24:b1:bc:03:1f:99:99:b6:70:
ed:1c:f0:a0:98:6c:d0:27:3d:3b:4e:97:24:02:91:2b:7c:ce:
61:dd:39:a5:84:0d:cf:72:3f:2f:f3:d1:af:dd:82:af:4a:62:
a7:f9:18:66:47:ae:2b:1e:a9:02:5b:6f:d5:1a:73:c5:74:b2:
4e:fa:1c:2b:4d:12:df:9a:9f:32:97:8d:39:c7:6b:d4:ad:c0:
fd:04:aa:23:78:71:b9:3e:53:ed:39:e2:3d:e0:fb:7e:17:f8:
c7:23:90:2f:33:e9:97:fc:b9:f7:d1:9a:57:6f:dd:ec:9f:9e:
e9:6e:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:20:15 2026 by rpki-client