Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: afxEv2lomM1WdEOKPUlCXKYGlbPPUEXjEhT6+cQM6kw=
Subject key identifier: 68:6E:67:A4:1C:EA:D0:E4:E2:86:09:DE:31:0F:04:4D:34:44:0D:4D
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 01A0C858AC3BC3F610F1971B52789BD8BB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0FDD
Signing time: Tue 22 Sep 2026 09:00:49 +0000
Manifest this update: Tue 22 Sep 2026 09:00:49 +0000
Manifest next update: Wed 23 Sep 2026 09:00:49 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: Tm79oOoM76/ipohQ5coqYDQnQq+ZwwDRINoC2jOn0Xg=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:ac:3b:c3:f6:10:f1:97:1b:52:78:9b:d8:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Sep 22 09:00:49 2026 GMT
Not After : Sep 23 09:00:49 2026 GMT
Subject: CN=686e67a41cead0e4e28609de310f044d34440d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:8f:91:cc:b2:f4:b4:b9:4a:80:87:2f:85:
92:16:d3:13:3c:0e:cf:1d:4c:aa:a6:b2:9e:74:25:
36:70:36:15:62:2d:ea:fd:cb:7f:36:89:cd:da:37:
06:f5:ff:dd:55:1c:95:c9:7a:8e:d8:f3:cd:a7:03:
16:e6:be:79:ef:42:04:85:64:0c:82:6a:2d:14:2d:
aa:06:8e:8d:08:f8:e3:24:e3:f1:e6:f8:d4:fe:37:
90:49:22:b3:56:3d:13:27:52:22:74:26:5d:94:4f:
8a:cf:28:9d:27:34:f9:99:80:a7:1c:70:6c:85:0f:
be:8c:b8:eb:ec:d6:f1:91:f5:fe:4e:f1:33:c7:e0:
ad:e9:bc:a3:42:99:39:d3:9c:ef:a4:0d:b5:c2:65:
78:a6:7f:e3:99:12:dd:97:00:7c:48:24:e5:7a:dc:
d4:6e:09:d4:46:c9:53:38:06:ce:37:49:08:6a:1a:
e5:ba:da:34:c1:8f:7d:30:28:3f:7a:a5:2d:b6:7d:
03:cf:87:ba:ea:73:56:09:5d:95:bd:92:e6:ad:44:
85:7d:ee:0e:95:87:f0:0e:db:b5:02:af:e8:5e:a2:
41:04:ba:07:43:20:2b:0c:64:76:e4:1d:01:25:37:
63:f6:4e:73:d4:10:3a:15:78:1f:c1:76:cf:f9:26:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:67:A4:1C:EA:D0:E4:E2:86:09:DE:31:0F:04:4D:34:44:0D:4D
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f7:b9:45:93:71:85:15:a7:90:45:29:22:5f:9f:51:74:0d:
73:c4:56:6f:fe:ad:23:d2:f3:fe:be:27:45:cc:86:b2:f3:8d:
9b:33:99:f9:6e:72:5e:37:1b:58:3e:9d:59:69:65:3e:02:ab:
b5:82:f2:89:88:7e:2b:92:1f:90:83:66:27:bb:37:c6:ed:47:
d9:14:35:90:c1:98:ec:03:fa:d8:11:f1:cd:8d:e9:87:09:83:
c3:1c:db:b8:49:38:28:7f:db:35:b0:4b:84:92:e5:36:77:86:
8f:55:e3:39:37:ad:d1:35:cb:13:89:48:2c:9e:79:d4:aa:6f:
70:c9:ba:bb:1c:28:b8:47:49:9b:29:8f:a7:bf:86:ad:4f:eb:
95:6c:06:a4:34:82:57:8d:7d:c5:57:ce:5a:bd:5d:55:fd:67:
43:3d:de:67:d1:34:bf:6b:2e:ae:62:12:f6:fb:c6:0d:3d:f8:
ca:6c:4c:46:48:56:e3:fc:69:48:4a:2b:74:5f:58:ee:08:f5:
95:65:d4:6f:90:c4:f4:9f:82:23:0a:c9:80:6e:17:b1:0b:ef:
ed:75:84:9b:04:c5:9d:b1:68:7c:74:1a:23:fc:c3:77:7b:fd:
c3:e6:0c:43:0d:df:3d:34:d0:ea:95:fe:ef:27:71:cf:eb:17:
69:20:ed:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWKw7w/YQ8ZcbUnib2LtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjYwOTIyMDkwMDQ5WhcNMjYwOTIzMDkwMDQ5WjAzMTEwLwYDVQQD
Eyg2ODZlNjdhNDFjZWFkMGU0ZTI4NjA5ZGUzMTBmMDQ0ZDM0NDQwZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNmPkcyy9LS5SoCHL4WSFtMTPA7P
HUyqprKedCU2cDYVYi3q/ct/NonN2jcG9f/dVRyVyXqO2PPNpwMW5r5570IEhWQM
gmotFC2qBo6NCPjjJOPx5vjU/jeQSSKzVj0TJ1IidCZdlE+KzyidJzT5mYCnHHBs
hQ++jLjr7NbxkfX+TvEzx+Ct6byjQpk505zvpA21wmV4pn/jmRLdlwB8SCTletzU
bgnURslTOAbON0kIahrluto0wY99MCg/eqUttn0Dz4e66nNWCV2VvZLmrUSFfe4O
lYfwDtu1Aq/oXqJBBLoHQyArDGR25B0BJTdj9k5z1BA6FXgfwXbP+Sb3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhuZ6Qc6tDk4oYJ3jEPBE00RA1NMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPe5RZNx
hRWnkEUpIl+fUXQNc8RWb/6tI9Lz/r4nRcyGsvONmzOZ+W5yXjcbWD6dWWllPgKr
tYLyiYh+K5IfkINmJ7s3xu1H2RQ1kMGY7AP62BHxzY3phwmDwxzbuEk4KH/bNbBL
hJLlNneGj1XjOTet0TXLE4lILJ551KpvcMm6uxwouEdJmymPp7+GrU/rlWwGpDSC
V419xVfOWr1dVf1nQz3eZ9E0v2surmIS9vvGDT34ymxMRkhW4/xpSEordF9Y7gj1
lWXUb5DE9J+CIwrJgG4XsQvv7XWEmwTFnbFofHQaI/zDd3v9w+YMQw3fPTTQ6pX+
7ydxz+sXaSDtlQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:01:25 2026 by rpki-client