Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: Z9TQ5FCEHRxSmt93gFki5fxMwix+qZH6OoOw7OBBGW4=
Subject key identifier: 89:7F:65:E3:B8:56:C9:66:99:BB:A4:F4:C1:B5:B6:3C:DF:AE:C3:CB
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 01A0D012D39846EB82AA4725321CB1E9E067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0FE1
Signing time: Wed 23 Sep 2026 21:01:29 +0000
Manifest this update: Wed 23 Sep 2026 21:01:29 +0000
Manifest next update: Thu 24 Sep 2026 21:01:29 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: O6oR8e2WMFXlsC1VBQh4i2Plqpm4pMco7IQ/dY9fnkQ=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:d3:98:46:eb:82:aa:47:25:32:1c:b1:e9:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Sep 23 21:01:29 2026 GMT
Not After : Sep 24 21:01:29 2026 GMT
Subject: CN=897f65e3b856c96699bba4f4c1b5b63cdfaec3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:7f:bc:d7:a8:d1:cc:65:77:98:36:71:7e:
e7:1b:b1:ef:fe:60:e7:b0:66:06:8f:f9:58:ee:3b:
a6:77:fd:5b:b2:80:52:f6:04:b1:38:fb:9d:00:58:
70:d5:e4:9f:66:86:94:1d:bd:40:b6:25:4b:75:6c:
18:11:da:0a:54:6b:f0:5f:8d:ed:97:68:91:6a:59:
04:25:aa:74:b0:f6:7a:2f:10:7c:0b:36:ac:54:5f:
7b:48:31:0b:35:4e:3e:65:83:95:3e:63:27:a2:a7:
14:84:ab:5e:de:b7:39:2f:86:4a:75:c3:0d:ca:07:
ef:6d:25:43:7d:e2:fc:2a:7e:9e:c1:80:e1:64:e9:
e0:f8:7f:41:0a:dd:a3:ae:81:6b:fe:2b:0e:60:dc:
68:9b:0a:ff:64:42:01:8c:b0:3c:f2:54:15:74:c4:
16:3e:ea:f3:41:db:7d:0a:83:58:a2:dc:31:ba:ca:
54:55:1a:03:91:c1:7b:9c:e4:c4:a3:69:6e:1f:2a:
2c:81:77:bc:84:f5:ea:2a:ce:44:da:80:db:e5:ec:
fa:b3:2d:75:40:75:21:f4:3f:da:bc:d0:dd:35:37:
b1:8e:0c:15:c9:4f:95:1c:27:d6:49:d9:48:d7:7f:
3a:c3:8f:9b:2f:6b:8a:62:2f:29:c1:a3:5a:86:2e:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:65:E3:B8:56:C9:66:99:BB:A4:F4:C1:B5:B6:3C:DF:AE:C3:CB
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a5:ac:d8:4a:a2:12:67:7e:4a:98:23:87:62:f8:45:84:db:
b9:72:cd:9a:14:fc:c4:41:36:93:02:01:11:ad:14:bc:7e:48:
15:8a:37:64:9a:d8:6f:aa:c0:42:ec:9d:45:2a:8e:89:da:bd:
32:bb:42:7b:9c:88:30:b6:d5:42:4e:3e:4a:4e:35:0c:f6:5f:
05:b1:32:b7:aa:bb:5c:b0:01:eb:13:a4:1c:92:95:a9:45:52:
36:e7:84:44:0d:9f:8f:0f:66:ed:73:c7:44:28:68:9d:21:ff:
01:f8:2b:c1:90:d1:09:c6:74:e2:7a:e7:26:61:94:6c:71:7f:
d1:85:6d:78:e4:37:f3:94:6a:72:16:b9:bb:77:66:4b:66:b3:
14:1f:a8:93:e3:39:eb:2e:7d:e6:af:51:db:95:96:d0:1d:6d:
67:e1:33:f6:57:cd:c4:3e:f8:53:a3:b1:4b:67:ac:6e:95:ea:
8e:b0:86:1d:de:ac:7b:3f:b2:7c:c5:51:cd:43:ea:fb:6f:a8:
74:fd:db:98:0f:bc:b0:cd:07:cc:3a:15:a3:a8:33:85:3c:30:
12:e3:00:01:0b:1c:d7:ee:ed:a3:e0:c3:b0:36:8d:96:1f:7d:
bd:3c:dc:3a:b2:68:51:2d:19:5a:d9:eb:a2:0a:17:68:71:36:
10:4c:56:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEtOYRuuCqkclMhyx6eBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjYwOTIzMjEwMTI5WhcNMjYwOTI0MjEwMTI5WjAzMTEwLwYDVQQD
Eyg4OTdmNjVlM2I4NTZjOTY2OTliYmE0ZjRjMWI1YjYzY2RmYWVjM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01x/vNeo0cxld5g2cX7nG7Hv/mDn
sGYGj/lY7jumd/1bsoBS9gSxOPudAFhw1eSfZoaUHb1AtiVLdWwYEdoKVGvwX43t
l2iRalkEJap0sPZ6LxB8CzasVF97SDELNU4+ZYOVPmMnoqcUhKte3rc5L4ZKdcMN
ygfvbSVDfeL8Kn6ewYDhZOng+H9BCt2jroFr/isOYNxomwr/ZEIBjLA88lQVdMQW
PurzQdt9CoNYotwxuspUVRoDkcF7nOTEo2luHyosgXe8hPXqKs5E2oDb5ez6sy11
QHUh9D/avNDdNTexjgwVyU+VHCfWSdlI1386w4+bL2uKYi8pwaNahi55YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl/ZeO4Vslmmbuk9MG1tjzfrsPLMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqWs2Eqi
Emd+Spgjh2L4RYTbuXLNmhT8xEE2kwIBEa0UvH5IFYo3ZJrYb6rAQuydRSqOidq9
MrtCe5yIMLbVQk4+Sk41DPZfBbEyt6q7XLAB6xOkHJKVqUVSNueERA2fjw9m7XPH
RChonSH/AfgrwZDRCcZ04nrnJmGUbHF/0YVteOQ385Rqcha5u3dmS2azFB+ok+M5
6y595q9R25WW0B1tZ+Ez9lfNxD74U6OxS2esbpXqjrCGHd6sez+yfMVRzUPq+2+o
dP3bmA+8sM0HzDoVo6gzhTwwEuMAAQsc1+7to+DDsDaNlh99vTzcOrJoUS0ZWtnr
ogoXaHE2EExWZA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:15 2026 by rpki-client