Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
File: AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft (raw, json)
Hash identifier: K9lSAUqp/4O7RoyMbnjF4+AJ5ETt7ssvJhxJCDYyo2M=
Subject key identifier: 59:58:CC:68:63:5C:56:71:DE:B4:FA:31:F3:ED:ED:83:7E:B1:7C:38
Authority key identifier: 01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
Certificate issuer: /CN=01697790ad0428089ffc96637199418890ffe889
Certificate serial: 01A12D6974091B5C4875145BE278886E03C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
Manifest number: 0196
Signing time: Mon 12 Oct 2026 00:00:47 +0000
Manifest this update: Mon 12 Oct 2026 00:00:47 +0000
Manifest next update: Tue 13 Oct 2026 00:00:47 +0000
Files and hashes: 1: 4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa (hash: N8kdOninId/klp3EyFdJsImC3+vMapb24sb5Y1paYvQ=)
2: AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl (hash: ExklH7rMFPfvPy4pNpY2tjBbjSlIXLpSpM6OaXdvIYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:74:09:1b:5c:48:75:14:5b:e2:78:88:6e:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01697790ad0428089ffc96637199418890ffe889
Validity
Not Before: Oct 12 00:00:47 2026 GMT
Not After : Oct 13 00:00:47 2026 GMT
Subject: CN=5958cc68635c5671deb4fa31f3eded837eb17c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:96:cd:00:5d:66:c9:03:59:04:56:69:ba:
39:ea:ab:de:7f:46:58:33:ac:5e:0e:7a:57:3d:d0:
ea:60:9e:d7:f9:07:e5:57:6f:43:7d:39:fa:fd:e6:
a2:d0:69:7e:07:3d:aa:16:b5:b7:2d:55:1b:e6:05:
01:83:be:b6:65:8b:e3:7a:0f:67:b3:c3:42:e2:38:
c9:4f:44:6b:5b:c8:9f:2f:ae:03:05:4a:fd:8d:eb:
c4:23:aa:15:0f:f4:3e:d4:dd:b7:62:0f:f2:99:93:
2e:38:3b:49:85:8c:8e:ad:6c:07:ab:0d:11:b1:68:
05:8e:52:ab:87:0d:4b:db:ce:30:6f:88:ba:7b:1b:
59:9d:d2:e4:a3:5d:92:e6:c4:6e:1e:77:2a:e6:70:
fe:45:70:d4:a1:a3:91:a2:82:98:34:65:b2:0e:dd:
cc:b6:0c:8a:ef:ff:04:e1:7b:a4:24:f4:b4:1a:97:
f3:08:85:2b:88:eb:9b:b8:91:16:3f:5d:db:7a:ce:
a3:4c:48:03:4e:d9:f6:ec:56:a9:a0:62:56:35:60:
31:fc:1d:5d:6c:e1:3e:cc:6e:ac:20:26:68:eb:35:
5c:b7:9d:ce:44:e2:8c:69:f7:bd:c2:d3:87:3a:d5:
ba:d0:08:ea:fa:05:e5:e3:4f:d9:fb:d0:6c:3c:14:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:58:CC:68:63:5C:56:71:DE:B4:FA:31:F3:ED:ED:83:7E:B1:7C:38
X509v3 Authority Key Identifier:
keyid:01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:aa:ae:b6:1f:d4:00:c3:2b:6b:16:85:34:d2:38:8b:91:18:
81:b7:81:92:1b:b4:95:19:f1:d2:c7:2f:93:f4:db:2e:09:d8:
cb:29:6e:1a:16:b6:27:97:a5:2d:fa:f9:c5:5e:24:97:26:b2:
b9:c7:34:43:a0:84:9f:02:d6:40:8f:e3:37:99:8d:ad:81:91:
65:59:54:5b:22:01:b1:7c:86:7e:48:73:62:64:3e:1e:1a:ca:
24:fb:35:02:1c:5d:7d:98:56:9e:fd:d8:e6:41:83:0b:92:97:
0e:43:cf:8d:9a:60:72:ae:24:1a:c8:83:f3:02:ca:c5:e4:fa:
71:e3:8e:b7:73:25:25:24:d7:67:c5:ca:ce:26:53:cd:a4:27:
9b:f2:a3:10:69:6a:f3:f3:19:82:1b:22:8c:d3:a8:ed:56:59:
b3:eb:c2:d9:b7:26:ac:1b:76:ca:c3:5d:ab:33:8e:63:bd:a2:
b0:1f:56:1c:fd:d6:b3:d5:65:c9:85:a7:01:7d:2d:51:23:81:
52:1e:0f:6b:eb:e3:07:11:bc:61:03:0c:b1:17:42:73:1c:16:
07:ac:8c:e2:80:2b:bc:bd:9c:06:db:4c:bc:e7:24:0d:c0:77:
2a:64:10:09:01:89:b4:52:0b:cc:be:1e:ac:7d:69:21:37:3e:
35:c3:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtaXQJG1xIdRRb4niIbgPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjk3NzkwYWQwNDI4MDg5ZmZjOTY2MzcxOTk0MTg4OTBm
ZmU4ODkwHhcNMjYxMDEyMDAwMDQ3WhcNMjYxMDEzMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg1OTU4Y2M2ODYzNWM1NjcxZGViNGZhMzFmM2VkZWQ4MzdlYjE3YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGyWzQBdZskDWQRWabo56qvef0ZY
M6xeDnpXPdDqYJ7X+QflV29DfTn6/eai0Gl+Bz2qFrW3LVUb5gUBg762ZYvjeg9n
s8NC4jjJT0RrW8ifL64DBUr9jevEI6oVD/Q+1N23Yg/ymZMuODtJhYyOrWwHqw0R
sWgFjlKrhw1L284wb4i6extZndLko12S5sRuHncq5nD+RXDUoaORooKYNGWyDt3M
tgyK7/8E4XukJPS0GpfzCIUriOubuJEWP13bes6jTEgDTtn27FapoGJWNWAx/B1d
bOE+zG6sICZo6zVct53OROKMafe9wtOHOtW60Ajq+gXl40/Z+9BsPBTUoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlYzGhjXFZx3rT6MfPt7YN+sXw4MB8GA1UdIwQY
MBaAFAFpd5CtBCgIn/yWY3GZQYiQ/+iJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdsM2tLMEVLQWlmX0paamNabEJpSkRfNklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wOWYxM2MtY2JmMS00ODRmLWI0Yjct
NmJiN2MzMTQyMGM3LzEvQVdsM2tLMEVLQWlmX0paamNabEJpSkRfNklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wOWYxM2MtY2JmMS00ODRmLWI0YjctNmJiN2MzMTQyMGM3
LzEvQVdsM2tLMEVLQWlmX0paamNabEJpSkRfNklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqquth/U
AMMraxaFNNI4i5EYgbeBkhu0lRnx0scvk/TbLgnYyyluGha2J5elLfr5xV4klyay
ucc0Q6CEnwLWQI/jN5mNrYGRZVlUWyIBsXyGfkhzYmQ+HhrKJPs1AhxdfZhWnv3Y
5kGDC5KXDkPPjZpgcq4kGsiD8wLKxeT6ceOOt3MlJSTXZ8XKziZTzaQnm/KjEGlq
8/MZghsijNOo7VZZs+vC2bcmrBt2ysNdqzOOY72isB9WHP3Ws9VlyYWnAX0tUSOB
Uh4Pa+vjBxG8YQMMsRdCcxwWB6yM4oArvL2cBttMvOckDcB3KmQQCQGJtFILzL4e
rH1pITc+NcPfnQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:27:41 2026 by rpki-client