Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: pWnFDLBVGwW+BX3IsupuKBfPamz2TqnTqOpgyazchW4=
Subject key identifier: 9D:0D:C3:DA:51:9B:01:22:A2:F2:11:2F:85:34:FF:93:A0:15:64:B2
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019CAC46AF92FA63B3A048029338036CE981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1110
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
2: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: JO9kfJBkgxuAAApjUWsKXeV7WGwFb7nrsgrvXeuwgWw=)
3: ab4oCfni6I0eVxmmGLGyz1krj30.roa (hash: gbL/66W2TTWhHvbdIV2FOVnrXjr1YDVt+7NVMMUxMss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:af:92:fa:63:b3:a0:48:02:93:38:03:6c:e9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=9d0dc3da519b0122a2f2112f8534ff93a01564b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:76:4d:b9:6f:42:c6:3a:94:6e:83:c0:9c:
81:91:45:ed:60:3b:a2:6b:64:20:95:73:79:af:d8:
70:54:b0:89:0c:75:53:3d:69:99:72:a3:dc:6e:9c:
7e:86:e3:b3:7a:a0:84:75:a9:c2:80:e3:d3:84:81:
bc:54:62:f2:a6:11:81:52:64:08:50:2e:83:64:f0:
e2:2f:c9:f8:f8:8b:b8:e8:34:0b:42:57:27:f1:a8:
45:8c:19:70:c3:09:16:a2:77:30:50:bc:2a:da:bc:
34:02:30:3d:d1:7d:61:aa:fe:c8:e7:e1:75:dd:cb:
12:77:88:7a:42:1d:86:a8:a9:bf:b4:cd:a2:54:34:
70:45:1d:40:9f:b9:bd:b5:a5:00:98:f6:c6:a7:08:
0b:ec:58:2e:0d:de:55:40:ff:f7:09:11:0f:c4:c3:
74:89:21:bd:4b:81:54:5f:90:c2:1f:2a:1e:4c:a1:
71:aa:3c:ad:a8:22:4e:30:69:98:fe:80:d3:3f:50:
f2:4c:9e:c9:50:0d:59:71:7b:8b:9f:f5:4c:1f:02:
ab:b8:91:43:2f:09:33:ac:99:38:0c:4a:eb:45:a2:
e0:b5:43:b1:22:80:c6:25:9e:95:8d:d6:ed:19:36:
33:04:ba:fb:8c:88:9d:0e:f7:1b:f3:79:e1:ee:c9:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:C3:DA:51:9B:01:22:A2:F2:11:2F:85:34:FF:93:A0:15:64:B2
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0b:79:0f:46:c8:09:c5:61:45:98:21:b8:c1:c6:d2:bc:c5:
6b:a6:69:6e:dd:ab:c1:5e:2e:80:7d:b7:e4:44:35:19:d7:26:
c8:a0:c1:8a:c9:e9:59:f5:c4:e4:e3:e7:f0:ac:6f:76:11:7b:
65:45:0d:ad:95:0d:45:da:23:da:ee:83:2b:44:58:e0:5a:7e:
57:b5:e5:36:39:83:c1:8e:f9:40:cd:34:2a:e7:f3:4b:5d:67:
20:d8:98:1a:89:84:6b:4a:3c:36:34:ad:4e:63:a1:18:21:e2:
e5:0c:7f:3a:ca:c1:9c:9c:36:f5:40:d5:1a:ae:9d:52:e4:e2:
ec:88:11:e0:e2:d9:d5:cb:68:df:6b:a7:bc:51:39:be:fb:ed:
a5:12:fd:ef:1b:0d:67:b0:3d:02:43:49:d3:7c:6b:d5:57:37:
bf:5f:2a:03:e2:1c:44:84:ae:6f:be:d5:e9:b5:0a:51:f0:bc:
86:44:e7:ec:f8:16:53:93:04:60:e7:15:91:90:89:b3:ba:ef:
a4:8e:36:66:fa:e6:bb:32:23:2f:3f:60:85:18:6f:e3:7a:aa:
b5:09:04:10:76:37:a2:09:1b:57:e2:c5:29:32:4e:70:e8:e9:
7b:3f:7c:1b:45:c3:71:2f:c9:fd:89:75:01:37:62:35:08:7d:
5b:03:47:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRq+S+mOzoEgCkzgDbOmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjYwMzAyMDIwMDM5WhcNMjYwMzAzMDIwMDM5WjAzMTEwLwYDVQQD
Eyg5ZDBkYzNkYTUxOWIwMTIyYTJmMjExMmY4NTM0ZmY5M2EwMTU2NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiN2TblvQsY6lG6DwJyBkUXtYDui
a2QglXN5r9hwVLCJDHVTPWmZcqPcbpx+huOzeqCEdanCgOPThIG8VGLyphGBUmQI
UC6DZPDiL8n4+Iu46DQLQlcn8ahFjBlwwwkWoncwULwq2rw0AjA90X1hqv7I5+F1
3csSd4h6Qh2GqKm/tM2iVDRwRR1An7m9taUAmPbGpwgL7FguDd5VQP/3CREPxMN0
iSG9S4FUX5DCHyoeTKFxqjytqCJOMGmY/oDTP1DyTJ7JUA1ZcXuLn/VMHwKruJFD
LwkzrJk4DErrRaLgtUOxIoDGJZ6VjdbtGTYzBLr7jIidDvcb83nh7smRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0Nw9pRmwEiovIRL4U0/5OgFWSyMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQt5D0bI
CcVhRZghuMHG0rzFa6Zpbt2rwV4ugH235EQ1GdcmyKDBisnpWfXE5OPn8KxvdhF7
ZUUNrZUNRdoj2u6DK0RY4Fp+V7XlNjmDwY75QM00KufzS11nINiYGomEa0o8NjSt
TmOhGCHi5Qx/OsrBnJw29UDVGq6dUuTi7IgR4OLZ1cto32unvFE5vvvtpRL97xsN
Z7A9AkNJ03xr1Vc3v18qA+IcRISub77V6bUKUfC8hkTn7PgWU5MEYOcVkZCJs7rv
pI42ZvrmuzIjLz9ghRhv43qqtQkEEHY3ogkbV+LFKTJOcOjpez98G0XDcS/J/Yl1
ATdiNQh9WwNHBg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:05 2026 by rpki-client