Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: U/cfv9UkK22dRfSKZHYHFhltjmNXaV/fFrWvX5fncQI=
Subject key identifier: 95:67:8A:55:F0:8F:42:05:61:9B:38:C7:8F:E3:AD:16:AF:78:3D:BF
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 01A0C6D7E4D26DA14F8DA7AD2986CC228842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 1032
Signing time: Tue 22 Sep 2026 02:00:32 +0000
Manifest this update: Tue 22 Sep 2026 02:00:32 +0000
Manifest next update: Wed 23 Sep 2026 02:00:32 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: KDDzOGBN1/8e6c+Ib4jXtrhIxelAb29wsPSy+jQqJEs=)
2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:e4:d2:6d:a1:4f:8d:a7:ad:29:86:cc:22:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Sep 22 02:00:32 2026 GMT
Not After : Sep 23 02:00:32 2026 GMT
Subject: CN=95678a55f08f4205619b38c78fe3ad16af783dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:da:2f:57:fe:30:6a:e8:95:67:a2:a7:c5:
f9:9c:be:4e:50:bb:9b:88:b0:92:a3:4f:3c:31:71:
cd:e6:38:bc:04:bf:6c:db:c0:f1:8c:ab:45:3f:c2:
33:5d:2d:2f:e2:c4:ad:4d:17:24:ce:03:bb:b1:cd:
b1:27:82:1e:28:f6:7f:ca:ef:b1:6a:0c:2d:28:30:
97:fb:7d:99:d7:a3:67:5b:e5:18:d0:24:f0:25:f9:
05:75:b8:8e:4e:d9:42:1e:07:d4:32:0c:82:fb:da:
38:a7:ca:da:ce:94:09:21:00:21:e1:b1:82:f5:b5:
a9:cd:ba:23:f5:75:6a:75:b1:dd:68:e5:b9:be:78:
2f:2b:38:d4:ce:51:2f:54:26:00:0f:73:1e:e4:58:
f0:93:c3:fe:c6:6e:54:61:fb:96:1e:c3:13:3e:4f:
cc:ff:90:1b:a8:e8:a7:38:e2:52:d8:35:ea:cc:9b:
5e:e6:27:87:ab:5f:07:e5:23:53:20:5a:22:ce:3f:
6d:65:49:98:77:69:5b:22:c6:f2:4d:04:e1:68:e2:
b4:14:70:e7:87:77:90:91:e2:1f:f9:bb:d9:1b:8c:
7d:f0:20:03:5c:62:6b:04:8a:f1:53:9e:c0:f6:d9:
74:03:ce:36:85:18:c7:68:c2:01:8c:4e:d1:ad:18:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:8A:55:F0:8F:42:05:61:9B:38:C7:8F:E3:AD:16:AF:78:3D:BF
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:68:ba:59:d5:8a:9f:2a:46:a5:ff:81:43:8f:db:78:21:85:
da:d3:3a:a1:50:cf:e4:71:82:45:30:73:43:37:96:73:54:a4:
71:d1:98:9a:d4:30:8e:a5:5a:4b:59:eb:4f:85:29:76:f1:d8:
8c:6a:d1:54:d5:c0:24:2b:dd:e4:d2:c4:50:9f:e5:86:39:10:
26:a7:0e:66:ed:e9:1a:c3:13:32:f0:e6:1d:62:e5:4c:d4:9e:
85:51:92:52:2e:b7:be:23:ab:44:78:5c:75:73:f5:e3:73:23:
b2:29:43:89:fb:e0:d5:34:30:43:ab:80:3b:65:c5:58:e5:48:
75:6c:87:5f:e1:15:0f:4d:f3:c0:7a:80:2c:16:99:50:2f:2a:
7e:b8:79:f9:e1:48:12:79:0e:0d:e7:e5:51:02:24:8f:ea:36:
04:7b:05:e7:1b:55:67:bc:18:61:3c:68:b3:96:08:04:58:36:
75:1a:68:32:9f:b1:c3:43:1d:bd:34:23:f6:8b:81:a1:71:cc:
ac:9c:f1:36:16:e3:32:5a:ba:24:2b:b0:71:6f:92:0d:60:65:
86:01:4a:10:ca:4e:5b:27:4f:4d:f1:5c:8a:b7:c4:f3:11:60:
b1:67:82:38:e4:1b:fe:d2:cc:b8:ea:50:be:5d:c7:11:35:79:
ca:a4:f6:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG1+TSbaFPjaetKYbMIohCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGQwZmVlMmNkNTY2OTY1Y2EwOGRiNTUwNjYzY2IyMGI0
MTIzNDMwHhcNMjYwOTIyMDIwMDMyWhcNMjYwOTIzMDIwMDMyWjAzMTEwLwYDVQQD
Eyg5NTY3OGE1NWYwOGY0MjA1NjE5YjM4Yzc4ZmUzYWQxNmFmNzgzZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+HaL1f+MGrolWeip8X5nL5OULub
iLCSo088MXHN5ji8BL9s28DxjKtFP8IzXS0v4sStTRckzgO7sc2xJ4IeKPZ/yu+x
agwtKDCX+32Z16NnW+UY0CTwJfkFdbiOTtlCHgfUMgyC+9o4p8razpQJIQAh4bGC
9bWpzboj9XVqdbHdaOW5vngvKzjUzlEvVCYAD3Me5Fjwk8P+xm5UYfuWHsMTPk/M
/5AbqOinOOJS2DXqzJte5ieHq18H5SNTIFoizj9tZUmYd2lbIsbyTQThaOK0FHDn
h3eQkeIf+bvZG4x98CADXGJrBIrxU57A9tl0A842hRjHaMIBjE7RrRis4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVnilXwj0IFYZs4x4/jrRaveD2/MB8GA1UdIwQY
MBaAFAAND+4s1WaWXKCNtVBmPLILQSNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTkt
Yjk0MWJhOTIxYjNmLzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9lNmZlMDktYzIyZC00NWI3LWE1OTktYjk0MWJhOTIxYjNm
LzEvQUEwUDdpelZacFpjb0kyMVVHWThzZ3RCSTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Gi6WdWK
nypGpf+BQ4/beCGF2tM6oVDP5HGCRTBzQzeWc1SkcdGYmtQwjqVaS1nrT4UpdvHY
jGrRVNXAJCvd5NLEUJ/lhjkQJqcOZu3pGsMTMvDmHWLlTNSehVGSUi63viOrRHhc
dXP143MjsilDifvg1TQwQ6uAO2XFWOVIdWyHX+EVD03zwHqALBaZUC8qfrh5+eFI
EnkODeflUQIkj+o2BHsF5xtVZ7wYYTxos5YIBFg2dRpoMp+xw0MdvTQj9ouBoXHM
rJzxNhbjMlq6JCuwcW+SDWBlhgFKEMpOWydPTfFcirfE8xFgsWeCOOQb/tLMuOpQ
vl3HETV5yqT2dA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:56:06 2026 by rpki-client