Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: prRynMSXnTAQQcKcXEvT9Pgm7QIIzd25M2OgjxBURGI=
Subject key identifier: 70:DB:FF:3D:59:94:97:4E:3D:76:4E:F0:C3:8E:C8:24:6D:8F:5F:4E
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 01A0C77CE85C5FF68CC5DDEB5A7B039C76C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0874
Signing time: Tue 22 Sep 2026 05:00:46 +0000
Manifest this update: Tue 22 Sep 2026 05:00:46 +0000
Manifest next update: Wed 23 Sep 2026 05:00:46 +0000
Files and hashes: 1: 8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (hash: iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: ZnlLnZx+0qld9LjbI9DLGRWx6ZQTL4AHO4hi+jWhtPk=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:e8:5c:5f:f6:8c:c5:dd:eb:5a:7b:03:9c:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Sep 22 05:00:46 2026 GMT
Not After : Sep 23 05:00:46 2026 GMT
Subject: CN=70dbff3d5994974e3d764ef0c38ec8246d8f5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:9f:00:22:e2:2a:9d:d4:13:32:ab:f0:de:
21:91:6c:82:77:c1:56:2d:65:01:9b:e2:57:67:f1:
4a:1c:37:62:69:fd:0b:1d:d5:fc:22:85:32:87:be:
6e:6a:76:93:6c:8f:8b:cd:d7:d4:85:4c:94:24:93:
05:04:98:13:4e:1c:d5:20:0d:1b:46:15:31:58:2c:
0a:33:00:d7:0f:d2:2d:db:24:b4:63:77:68:e3:39:
5b:24:c8:97:15:ff:29:a4:98:0b:79:01:41:4d:1d:
77:3f:9e:1f:14:b9:c7:e0:05:9d:48:96:4f:ad:6a:
2d:e8:0f:ff:6f:16:28:f3:34:c1:4a:fa:9b:53:87:
72:a5:c6:2c:c4:a5:fa:13:70:9e:b6:01:df:35:00:
a9:71:91:97:5b:eb:0f:9f:03:73:20:70:19:26:e9:
60:ec:35:b4:52:83:d4:a9:9c:31:31:d6:a4:94:aa:
6e:c1:b5:26:e8:7d:48:3a:c7:44:0f:a7:4b:72:8c:
30:0a:94:22:dd:f3:44:c3:ae:40:d3:7d:ef:0b:cd:
cd:22:aa:65:ca:62:55:b8:70:7e:ce:6e:c6:e6:21:
7b:c2:b7:ad:38:2d:a2:74:24:2e:3a:54:12:63:af:
d6:67:6e:14:d5:9d:ba:53:a5:d1:f2:d2:82:50:42:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:FF:3D:59:94:97:4E:3D:76:4E:F0:C3:8E:C8:24:6D:8F:5F:4E
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:f2:a6:d2:04:f6:b5:ed:c1:99:ef:b7:c5:94:0d:ac:1c:
fc:6c:e8:cd:bf:85:2a:ba:70:11:74:6b:80:77:89:93:ff:ad:
9a:da:da:c7:bf:af:05:d6:de:d4:67:ac:1f:51:14:6e:20:42:
d7:dc:3e:b1:f3:af:96:04:c1:07:8e:a9:05:58:2b:a9:9c:6a:
65:f9:33:ae:e4:d5:cb:3f:e4:d4:89:73:19:35:ce:9e:2e:37:
ac:44:b2:f2:86:69:06:d7:1b:a5:0f:ae:1f:c3:c2:b5:09:22:
7c:1d:15:b7:97:0c:e4:01:b1:99:ce:2e:b2:da:49:6d:a7:39:
77:ac:54:5d:2e:38:a1:53:ca:92:ab:27:cc:3a:ae:4d:c8:99:
bb:44:fd:1f:7b:df:cb:3a:a7:08:52:6a:03:73:fe:4c:97:b7:
cf:16:68:48:51:ec:2b:e2:72:29:82:d0:bc:e6:c9:48:c0:14:
40:2b:8d:b2:9b:95:f5:0a:48:8d:be:f5:5d:a8:26:43:dd:cc:
43:16:bc:d8:0a:20:a8:36:83:ea:ca:54:d8:ea:5a:f0:04:65:
b8:1a:00:db:7e:cd:9d:b1:9d:22:1e:e6:57:e5:71:fa:44:93:
ce:ad:b1:c5:b5:67:8e:03:24:15:62:41:2b:11:0d:1e:6f:f2:
cb:57:7c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfOhcX/aMxd3rWnsDnHbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj
OWRmZjcwHhcNMjYwOTIyMDUwMDQ2WhcNMjYwOTIzMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGRiZmYzZDU5OTQ5NzRlM2Q3NjRlZjBjMzhlYzgyNDZkOGY1ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYqfACLiKp3UEzKr8N4hkWyCd8FW
LWUBm+JXZ/FKHDdiaf0LHdX8IoUyh75uanaTbI+LzdfUhUyUJJMFBJgTThzVIA0b
RhUxWCwKMwDXD9It2yS0Y3do4zlbJMiXFf8ppJgLeQFBTR13P54fFLnH4AWdSJZP
rWot6A//bxYo8zTBSvqbU4dypcYsxKX6E3CetgHfNQCpcZGXW+sPnwNzIHAZJulg
7DW0UoPUqZwxMdaklKpuwbUm6H1IOsdED6dLcowwCpQi3fNEw65A033vC83NIqpl
ymJVuHB+zm7G5iF7wretOC2idCQuOlQSY6/WZ24U1Z26U6XR8tKCUEIYeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDb/z1ZlJdOPXZO8MOOyCRtj19OMB8GA1UdIwQY
MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt
NTNjZDkxYjI4YzRmLzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm
LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKynyptIE
9rXtwZnvt8WUDawc/Gzozb+FKrpwEXRrgHeJk/+tmtrax7+vBdbe1GesH1EUbiBC
19w+sfOvlgTBB46pBVgrqZxqZfkzruTVyz/k1IlzGTXOni43rESy8oZpBtcbpQ+u
H8PCtQkifB0Vt5cM5AGxmc4ustpJbac5d6xUXS44oVPKkqsnzDquTciZu0T9H3vf
yzqnCFJqA3P+TJe3zxZoSFHsK+JyKYLQvObJSMAUQCuNspuV9QpIjb71XagmQ93M
Qxa82AogqDaD6spU2Opa8ARluBoA237NnbGdIh7mV+Vx+kSTzq2xxbVnjgMkFWJB
KxENHm/yy1d8YQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:18:59 2026 by rpki-client