Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: iVheI1JaQ2LFh+EnIAEDqBr7wIC+NuCo9lgilwGhuUk=
Subject key identifier: 63:49:87:68:89:D4:11:5C:2C:F5:91:A2:53:BB:92:3D:1D:12:84:42
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 01A0C4B2460939507EBD24DB1F444255673E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 16:00:12 +0000
Manifest this update: Mon 21 Sep 2026 16:00:12 +0000
Manifest next update: Tue 22 Sep 2026 16:00:12 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: LwdqUTvtwxslQQ8docLh+MMfyJAJjdyaKQ3iJyPeyz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:46:09:39:50:7e:bd:24:db:1f:44:42:55:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Sep 21 16:00:12 2026 GMT
Not After : Sep 22 16:00:12 2026 GMT
Subject: CN=6349876889d4115c2cf591a253bb923d1d128442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:3c:f5:e7:1b:c8:e7:dc:36:28:41:dc:f6:
02:21:bc:43:ed:75:cd:0c:68:dc:2f:4b:36:c1:7d:
70:1a:45:72:dc:d6:7c:e4:bd:21:b0:a5:ca:9b:4c:
3a:3d:95:c5:7a:9f:82:cb:bc:c7:97:2a:c1:0a:83:
a5:33:43:20:11:8f:12:8d:0b:2b:ec:4a:2a:44:ff:
56:66:9a:2f:0a:5a:d3:ce:04:a3:2c:44:a6:17:41:
86:d3:bd:89:3a:8b:7e:85:19:6a:04:e8:40:34:91:
85:a7:43:c3:fe:a5:57:e6:c5:8c:2b:23:c1:1e:c4:
85:2d:02:29:2e:c5:4b:dd:8a:4a:28:25:c6:21:97:
d1:45:91:ad:95:b1:59:e3:8a:b2:41:c4:65:6b:68:
52:36:51:e7:36:39:3f:3c:10:d6:4c:3b:94:7c:20:
f6:f2:c6:7c:3d:b8:09:44:08:15:10:15:45:af:1d:
b0:39:45:dd:6d:c7:04:6c:f8:cb:fb:53:f8:fb:d9:
68:0c:f4:05:b2:ff:99:2f:db:a1:3c:4d:0b:f8:25:
32:83:0d:a7:7b:59:fb:86:6e:aa:65:e1:46:59:f7:
90:81:10:18:8a:42:b5:fa:15:b0:7b:36:7a:b0:72:
da:af:f9:2a:8a:dc:d3:ec:5a:a0:a4:6e:29:09:31:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:87:68:89:D4:11:5C:2C:F5:91:A2:53:BB:92:3D:1D:12:84:42
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:58:22:87:1c:41:bd:05:ce:2d:ea:0c:5b:c5:e4:52:72:
16:2a:ec:e0:ab:33:d0:bc:73:70:19:65:20:b0:92:db:14:05:
f1:99:ae:78:ca:f6:52:90:7d:e3:ea:7d:a4:db:59:a8:b2:cc:
04:e4:46:8d:06:24:bc:8a:4d:09:09:2f:40:06:8b:d0:d5:d1:
4e:d0:60:08:17:a6:6e:be:57:7b:04:dc:0e:06:25:71:2b:0a:
d5:cf:88:ad:8d:86:38:7a:6f:32:55:0d:27:81:76:ef:40:e2:
07:87:d0:44:96:70:c9:6a:b1:ef:a8:da:d4:ac:ef:f8:40:92:
aa:20:4d:4a:c9:4d:9f:e2:e9:0c:b9:a2:ee:93:eb:03:cc:fa:
85:0e:28:bb:b9:b3:34:18:9d:75:7e:b9:dc:71:fd:c6:19:fd:
63:88:51:c3:2e:9b:6a:0d:63:a2:89:9b:9e:f5:d2:61:bf:ed:
e0:c9:19:a3:b5:33:11:d1:66:f1:59:a2:6e:dd:fd:59:ab:82:
2a:21:02:c6:ce:0d:10:62:20:47:13:7b:5d:68:a8:7a:43:e2:
51:78:ac:2b:74:4b:28:5f:68:c3:d3:73:95:84:00:5d:51:f2:
0a:48:b4:80:28:b0:fa:88:94:be:15:80:03:7d:4c:d9:2f:c1:
b6:30:04:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEskYJOVB+vSTbH0RCVWc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh
ZDU5NDIwHhcNMjYwOTIxMTYwMDEyWhcNMjYwOTIyMTYwMDEyWjAzMTEwLwYDVQQD
Eyg2MzQ5ODc2ODg5ZDQxMTVjMmNmNTkxYTI1M2JiOTIzZDFkMTI4NDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf489ecbyOfcNihB3PYCIbxD7XXN
DGjcL0s2wX1wGkVy3NZ85L0hsKXKm0w6PZXFep+Cy7zHlyrBCoOlM0MgEY8SjQsr
7EoqRP9WZpovClrTzgSjLESmF0GG072JOot+hRlqBOhANJGFp0PD/qVX5sWMKyPB
HsSFLQIpLsVL3YpKKCXGIZfRRZGtlbFZ44qyQcRla2hSNlHnNjk/PBDWTDuUfCD2
8sZ8PbgJRAgVEBVFrx2wOUXdbccEbPjL+1P4+9loDPQFsv+ZL9uhPE0L+CUygw2n
e1n7hm6qZeFGWfeQgRAYikK1+hWwezZ6sHLar/kqitzT7FqgpG4pCTEjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNJh2iJ1BFcLPWRolO7kj0dEoRCMB8GA1UdIwQY
MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut
MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm
LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt9YIocc
Qb0Fzi3qDFvF5FJyFirs4Ksz0LxzcBllILCS2xQF8ZmueMr2UpB94+p9pNtZqLLM
BORGjQYkvIpNCQkvQAaL0NXRTtBgCBembr5XewTcDgYlcSsK1c+IrY2GOHpvMlUN
J4F270DiB4fQRJZwyWqx76ja1Kzv+ECSqiBNSslNn+LpDLmi7pPrA8z6hQ4ou7mz
NBiddX653HH9xhn9Y4hRwy6bag1joombnvXSYb/t4MkZo7UzEdFm8Vmibt39WauC
KiECxs4NEGIgRxN7XWioekPiUXisK3RLKF9ow9NzlYQAXVHyCki0gCiw+oiUvhWA
A31M2S/BtjAEQg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:24:29 2026 by rpki-client